Network Security

Customer has a PIX firewall with 5 interfaces.They have 2 internet links which is terminating on two separate routers.From the router the links has to be terminated on the different interfaces of the pix.He want to use one interface for normal intern...

Hello, I have DHCP clients directly behind PIX in VLAN, subinterface on PIX is default gateway for them. On outside interface is configured tunnel to remote location. DHCP server for clients is in remote location. We tried configure DHCP relay on PIX...

Hi,I'm wondering whether pix 515e can work around with secure ftp (port tcp 989 and 990) from outside to dmz ftp server (as400 iseries)?Do I need to add in fixup protocol ftp 990 ?Anyone has any advice?Thank you.

I am currently unable to access the admin account. Been using WinNT login module for months without any issues but now it seems as though it won't fallback to local accounts including admin. I have tried the reset password utility but it says there i...

I have a PIX 501. The inside network of 192.168.1.0 is being translated to a range of 12 public addresses and when those 12 addresses are used up, the interface address is used for PAT. For some reason, I can only get about 10 of he private addresses...

I have some old PIX's that I am working with and they have two default routes, one pointing to inside and the other outside - they seem to be working fine but I was wondering how this actually worked and do later versions support this?

Hi, I'm trying to enroll my PIX for a certificate.Getting the CA certificate with 'ca authenticate...' works fine and 'show ca cert' shows the CA certificate.When I try to get a CRL och enroll for a certificate however the CA sends back the message b...

Hi all,Is it possible to replciate the configuration of a PIX failover bundle across a wan link to another failover bundle? The idea is to set up two exits out of our network. While traffic can be re-routed in case the primary gateway fails, our conc...

We're having an issue where we can't send mail to ourselves. Mail will successfully come from outside sources to mail.domainname.com but if we try it internally it won't allow the traffic through. If I try to telnet to port 25 from a machine on the...

When a user has established a VPN connection to a PIX using the the Microsoft PPTP client, does he still have access to Internet?If we use the Cisco VPN client to established a VPN connection to a PIX, we have to enable Split-tunneling to be able to ...

Hi All,What is the normal effect on routing tables and routing protocol advertisements when directly connected interfaces go down ?Imagine a 506e with the following config...Inside - 195.105.100.0/24Outside - 192.168.0.1/30A host on the inside on add...

Solaris server is replying with icmp unreachable when cisco device tries to send syslog message on port 514.I can see the syslog entry come from the switch and the server is replying with an icmp unreachable msg. I have the syslog collecter running, ...

My Pix 515E model tears down my TCP connections in 4 in a very short about 4 seconds even though the timeout conn half-closed is 0:10:00 (10 minutes). How can I prevent the Pix box from tearing down my tcp connnections so fast? Below are my timeout s...