Network Security

Hi,We have a PIX running 6.2 and the connections don't timeout anymore. There are connections that are 180 and 190 hours old. Connections are UDP (DNS and non DNS) and TCP.Probably there is a bug for this and I didn't see it.Anyone saw that before or...

What are your thoughts/methods on automating the creation, deletion and modification of access lists on a pix using scripts (ie: perl, wsh, expect...) via ssh, telnet and/or tftp, etc..I'm intentionally asking this open ended, but I am not looking to...

I am having a PIX515 model with inside and outside interface and 6.0version in it.I inside interface is having problem.can i have the same functionality of the pix if inside port is disabled and with other interfaces working. how should i configure t...

I have to present a case to my boss why we should use PIX over Checkpoint or Netscreen.Does anybody know where I can find a detailed comparison outlining Cisco's advantages over the other competitor's firewalls?Thanks in advance.

can pix do this?1.NAT PROBLEMfor instance,pix's public address is 218.242.2.1,its private ip address is 192.168.0.1/24,there is a server whose ip address is 192.168.0.100,if someone in internet want to access tcp ports from 2000 to 5000 of 218.242.2....

Hey all, I have a PIX 525 that crashed on me twice today, running 6.3(3). In both cases the crashinfo file generated is corrupt. Is there any way to retrieve the partial file from flash to have a look at it?The file definately does exist, but I can't...

I've installed a PIX 515E DMZ with PIX OS 6.3 at a customer's site. I've enabled RADIUS authentication for access via the internal interface to the outside interface (Internet), this is done via Microsoft Active directory and IAS (Microsoft's own RAD...

Can a PIX stop PC's from being able to receive Internet radio? PC's on inside interface, Internet on outside interface. Thanks, Bill.

Hello all,i have two pix 535 configured for failover. whenever i try to connect console to the standby pix, i get the message "aaa server host machine not responding". I don't have this problem when connecting to the active pix. any ideas?thanks all

Does the PIX support simple digital signatures? I would like to find a away for an IAS server and a PIX to exchange signed packets. In particular I am trying to increase the security of the initial PAP shared key exchange during user authentication.A...

Hi,I have a static command on the PIX 515static (dmz,outside) 200.200.200.10 192.168.10.10 netmask 255.255.255.255 0 0when I check using sh xlate it is not translating to the local IP. Following is the output of sh xlate globalGlobal 200.200.200.10 l...

Anyone any idea how to get this functional:From a Lan one need to make a rdp connection to a w2k server.From the outside i can ping a.b.c.dWhen i put the following into the PIX it won't work:access-list outside_access_in permit tcp host a.b.c.d eq 33...

I am reviewing a PIX configuration where two interfaces do not have IP addresses assigned to them ("no ip address"), but the interfaces have not been disabled using the "shutdown" keyword. Are there exposures in this instance due to the fact that the...

Can anyone tell me what the files 0-4 actually are. And I take it the length is in bytes.Many thx all and sorry if I have duplicated someone elses post.KenP01# sh flashflash file system: version:2 magic:0x12345679 file 0: origin: 0 length:1540152 fil...

Hi,I just installed a PIX 501 using the PDM software. I have two networks and want to use the 501 as a firewall between them,allowing one way traffic.I set the inside to 192.168.../24 and the outside to 195.1.../24I can ping the 192 network from the ...