Network Security

I have a huge amount of empty connection flags when sh conn detail | include x.x.x.x command is issued.UDP outside: 64.246.x.x/53 inside: 172.16.x.x/1075 flags - It's slowing down pix - any help appreciated.

I have a PIX 525 ...6.3....I have a server that used to use the following statement to access the internet for GPRS downloads via the internet...static (inside,outside) 199.xxx.xxx.185 10.xxx.xxx.6 netmask 255.255.255.255 0 0 ...we then changed to Ko...

Hi Having a problem trying to access Outlook Web Access through a ISA server. On the firewall i have this configured: access-list outside_access_in permit tcp any host 12.30.111.204 eq smtpaccess-list outside_access_in permit tcp any host 12.30.111.2...

Hi,We currently have a 515 PIX with Hot Standby. When connecting to a client FTP site (ssl port 990) through the firewall (using NAT) performance is very slow, about 20kbps (however we can open numerous connections which all get 20kbps). If we put a ...

I just noticed recently that after I upgraded the PIX to 6.3(3) and I reboot 2 of my Windows 2000 servers, it brings my network to its knees and the switches go nuts with syslog messages saying unreachable from my server ip to the pix inside ip only ...

Anyone out there know of any issues with a dmz webserver accessing an inside Oracle server thru the PIX? Initial connections work, but after some time, I see a lot of syslog messages with "no connection" errors for the sql traffic. Should the web s...

I have this doubt: With model PIX-501-50-BUN-K9 PIX 501-50 3DES/AES Bundle (Chassis, SW, 50 Users, 3DES/AES) up to 50 users can surf at the same time. What happens with model PIX-501-UL-BUN-K9 PIX 501-UL Bundle (Chassis, SW, Unlimited Users, 3DES/AES...

how many access rules can support a PIX 535 ?

I have a Cisco 3005 which has been used to run PPTP connections w/MIcrosoft's VPN client for company employees who are on the road. We also have several small offices that connect via IPSec LAN-to-LAN. Now I have to setup a remote site that is sitt...

I have upgraded my MC to version 1.3.1 because the documentation says this version recognizes the "name [ip] [ name]" command. However I continue having all this command in "Config Additions > Ending commands"Any workaround?

Hi,Why the Cisco VPN client is not compatible with the Microsoft "Qos packet Scheduler"? Is there a solution to enable both the VPN client and the "QoS packet Scheduler"?I've got applications that use the "Qos packet scheduler" API in order to tag th...

We have pix 501 firewall. We blocked the internet access for all users other than Citrix. users will access internet via Citrix. But now we are in trouble and that are Microsoft and mcafee updates. Becase we just allowed access to Citrix,now Microsof...

I am trying to get my PIX 515E running 6.3(3) to filter FTP traffic to my Websense box running 5.2. I enable the "filter FTP 21 0 0 0 0" command and all FTP traffic stops. I remove it and it flows again. I checked Websense and the protocol is allowed...