Network Security

So, after all the hype I read about being able to get a DMZ going on a logical VLAN interface using the latest firmware 6.3(4), I decided to give it a shot.I got a basic setup going - pretty standard...inside and outside IP's and subnets. Outside def...

I have PIX 506e at office and NetGear FVS318 at home. I can create a VPN connection between the two (initiating it from the PIX as the PIX sits behind a SMC router that does not allow VPN traffic to originate from outside). I'm sure I have a VPN conn...

Ok, I'm not sure exactly how to describe this issue, but here it goes. We have two PIX 501's connected as VPN to each other, across links that have at least the capability of 1mpbs both ways. The issue is, when I go to test the bandwidth capability o...

I have a PIX 501 behind a cable modem that is performing very, very poorly. Typical web surfing speeds are worse than dial-up! If I remove the PIX, and either plug a PC directly to the cable modem or use another broadband gateway, the speed improves ...

Hi,Our Pix (535 6.3(1) UR Licence) sometimes do not seem to advertise a physical interface's mac address to the Cisco 6509 switch where the dot1.q trunk terminates.With one vlan it works fine, with another vlan it does not.Clear arp in both Pix and s...

Trying to configure a 501 as an easy vpn client to PIX 515(server). The tunnel says its up, but i am still getting "109013 user mush authenticate first before using this service" in the log on the pix 501 (client) ...any thoughts?

Hi,I am using PIX in Failover mode..Currently my one PIX is down and other is up.I am not able to find out whether my primary is up or secondary is up.Here is the output of sh failoverFirewallPIX# sh primaryType help or '?' for a list of available co...

Hi First time user on the PIX and wondering based on current config what is the best way to forward a range of IP ports to a dedicated internal server.Thanks for the helpnameif ethernet0 outside security0nameif ethernet1 inside security100enable pass...

I have a network currently configured that the PIX is the default gateway for the users on the inside interface. I am trying to send some traffic on a different subnet destined for another network through a Cisco router that is connected to the insid...

I'm having issues getting my 520 to upgrade. When trying to use the Boot helper file it will come up with:Finesse Bios V3.3Booting Floppy...................................Execing flopIT then just reloads and starts this over again. Using the rawrite...

Hi all, I got the problem , when i change A ISP (old) to B ISP (new), after that the internet connection is fail , here are change the running config information as below:1.IP address outside2.Global3.Route 0.0.0.0 0.0.0.0 x.x.x.xTesting before :If i...

I've tried several forum suggestions, PDM & command line changes to no avail. I have 1 Small Business Server behind a PIX 501 & I need to forward 5-6 ports (web, smtp, pptp, ftp, termsvcs, dns)to the SBS (192.168.10.11). The 1 public IP is the WAN po...

Hi experts,I'm using IE configured with proxy (the proxy's IP is public IP address). If my LAN is directly connected to a router (running RFC1483 bridging), I can get my address bridged and then connect to the internet.But, after I use PIX:LAN (192.1...