Network Security

We have a situation where we have Servers that will need to be placed on a DMZ protected by a PIX that are part of the same subnet as the server farm inside the secure network. On the third arm of the PIX will have a second DMZ attached to a VPN cont...

Hi , I need to configure a PIX and VPN client software on client to use smartcard certificates from a Windows 2003 certificate services PKI . Can anyone point me to good example and documentation Thanks to everybody Stefano

I have configured Cisco PIX VPN V3 client with Xauth with an ACE server.Everything was working ok for about 2 years (Customer site) but then started to get Node authentication failure on the ACE. Have had this before with a RAS solution I did with a ...

Hi,We have the following scenario -|--R1---Z---R2---(cloud)---R3---Z---R4---| |-----------GRE Tunnel----------|Z are external cryptos, we have a GRE tunnel between R1 and R4 (the lines don't line up!!). Traffic passes through the tunnel fine....

hi I have a syslog server and it is set to recieve all messages from the router. However when i look a the show log of the router and the messages log into the syslog i see a couple of types of messages always missing for example my gatekeeper regis...

I have web servers that we do not manage. So I want to put them on the outside of a second pix we just bought. Users from our LAN need to get to them but not users from the internet. This is easy. I'm now trying to find out how to allow these web ser...

I just inherited a pix 501 router and I can't seem to access it through the console port with hyperterminal or any terminal emulation software.... i can however telnet to it but the pix asks for a password. I tried multiple computers but i still rec...

Hi,Need some advise to see whether it is hardware or other issue? I have a Pix 515 with Restricted license, the box come with 4 FE interfaces, and according to Cisco document, I should able to use 3 of them. But I can only see 2 interfaces in the con...

If I try to scan a server with <172.16.1.5> using the tool NMAP with faked IP source address :"nmap -sF -S 10.1.1.1 -e alb0 172.16.1.5" where -sF (FIN scan, could be other scans also) -S 10.1.1.1 (faked source) -e alb0 (interface, usually eth0) 172....

Hi all,I have question about network interfaces in PIX Classic firewall. It has two interfaces Token Ring(clasic PCI cards). And I want to remove them and replace with clasic Ethernet cards from PC.So what about drivers for these cards and will be th...

Hi Pro,Does anyone know about CiscoWorks VMS license problem ? how long for the license lasting ? 1 year ? or .. coz, i formatted my server and re-install the VMS while installing the Common Services .. it shows the license (PAK) been used for last t...

I have two PIX 506E firewalls used for VPN and VoIP between two offices. They were installed by someone else and I do not have any documentation to learn how to access or configure them. I'm new at this technology but want to learn more. I was readin...

I have seen a half dozen articles/white papers on these topics. But have not seen a good reference on implementation, hardware required etc.I am looking to implement a enterprise wide security solution. NAC, IBNS and CTA all seem to be geared to prov...

We have a pair of 515 firewalls in a failover configuration (cable not LAN based failover). The firewalls are being upgraded from the current 4 port ethernet to 6 ports - two single ethernet NIC's are being removed and replaced with the 4FE on each ...

@All,Would like to know how pixs handles ICMP pkts(eg ping) while uisng PAT. How will it differentiate between 2 ping request commings from the internal network to the same destination??any referedce doc/url will be appericated!!!thxhanu