Network Security

Hi,We currently have a 515 PIX with Hot Standby. When connecting to a client FTP site (ssl port 990) through the firewall (using NAT) performance is very slow, about 20kbps (however we can open numerous connections which all get 20kbps). If we put a ...

I just noticed recently that after I upgraded the PIX to 6.3(3) and I reboot 2 of my Windows 2000 servers, it brings my network to its knees and the switches go nuts with syslog messages saying unreachable from my server ip to the pix inside ip only ...

Anyone out there know of any issues with a dmz webserver accessing an inside Oracle server thru the PIX? Initial connections work, but after some time, I see a lot of syslog messages with "no connection" errors for the sql traffic. Should the web s...

I have this doubt: With model PIX-501-50-BUN-K9 PIX 501-50 3DES/AES Bundle (Chassis, SW, 50 Users, 3DES/AES) up to 50 users can surf at the same time. What happens with model PIX-501-UL-BUN-K9 PIX 501-UL Bundle (Chassis, SW, Unlimited Users, 3DES/AES...

how many access rules can support a PIX 535 ?

I have a Cisco 3005 which has been used to run PPTP connections w/MIcrosoft's VPN client for company employees who are on the road. We also have several small offices that connect via IPSec LAN-to-LAN. Now I have to setup a remote site that is sitt...

I have upgraded my MC to version 1.3.1 because the documentation says this version recognizes the "name [ip] [ name]" command. However I continue having all this command in "Config Additions > Ending commands"Any workaround?

Hi,Why the Cisco VPN client is not compatible with the Microsoft "Qos packet Scheduler"? Is there a solution to enable both the VPN client and the "QoS packet Scheduler"?I've got applications that use the "Qos packet scheduler" API in order to tag th...

We have pix 501 firewall. We blocked the internet access for all users other than Citrix. users will access internet via Citrix. But now we are in trouble and that are Microsoft and mcafee updates. Becase we just allowed access to Citrix,now Microsof...

I am trying to get my PIX 515E running 6.3(3) to filter FTP traffic to my Websense box running 5.2. I enable the "filter FTP 21 0 0 0 0" command and all FTP traffic stops. I remove it and it flows again. I checked Websense and the protocol is allowed...

I have a 515e that replace a couple of 1720 routers. I have an inside, outside and dmz setup with the mail server in the dmz. Basically it is all working, but I am having issues with smtp transfers to other (but not all) sites. Cisco TAC has looke...

When i use debug command on my PIX 515E 6.22, it start to print on console debugging information, this is OK. After a while, it stop showing me messages, and issuing any other debug command cannot resolve this.I tried to clear logging and any other f...

Hi, I'm aware that this question has been here a few times, but I didn't see an answer.With a router it's easy to route by certain ports. I'd like to do this with a setup like this:--->IN>Pix Firewall>OUT>---- DMZ | Proxy ...

Hello,My question is if there is any way to set Time Based Access-list on PIXThanks

I am looking for some firepower for a customer that I have. I am wanting to know what the best practices are for ip scheme for the outside network of the pix.I believe that the outside interface of the pix and the ethernet interface of the router sh...