Network Security

trying to use static (inside,outside) and access list to make use of aditional ip.access-list acl_out permit icmp any any echo-reply access-list acl_out permit icmp any any unreachable access-list acl_out permit icmp any any time-exceeded access-list...

I am having an issue with my pix stopping traffic between inside to DMZ web server. Normally, I can get from an inside computer to the web server in the DMZ. Then all of a sudden it stops. The PC's can no longer get to the web server. I have to go to...

Anyone heard of a restricted license on the switch interfaces of a 501? I have a customer that can only access 2 of the 4 switch ports? As far as I know, the 501 only comes with user based licenses. Any ideas?Cisco PIX Firewall Version 6.3(3)134Cisco...

HiWe are migrating from Checkpoint to PIX. We have inside, outside, and DMZ interfaces. On the DMZ, we will have web servers with private addresses, the outside world connects to these servers through statics on the PIX.We currently have the CP in pl...

I had enabled timestamp by the follow commands.clock set 14:25:00 apr 1 2000logging timestampbut when i use sh log command to view the log,there is no timestamps:302015: Built inbound UDP connection -540117333 for outside:10.0.0.1/64911(10.1.1.1/6490...

When the secondary is active, the primary answers for the shared mac-address, this should not be the case. The switches get confused and intermitten problems occur. This only happens on the outside interface.Any suggestions

I currently have two problems with my setup. They may be connected but not sure.1. The outside link on the firewall will not reapond to and requests. I know that the exgternal connection is working but nothing is communicating. The internal network i...

I am in the process of setting up VMS and have noticed that with every 'save and deploy' that I do, that all of my Pix's (which run VPN's) are given the following commands:‘no crypto map x interface outside’‘crypto map x 20 set security-association l...

I'm running a PIX 501 from my primary office location running NAT. I'm trying to connect to a ConnectEnterprise Secure FTP destination. Because I have no previous experience configuring a PIX to work with a FTPS server, I was hoping for some help. Be...

Could someone please tell me what I'm missing here. We've ordered a 50 user upgrade for our PIX 501. What I received was an email with a 6 digit 'Digital License Agreement Number'. How do I apply that to the PIX? I thought maybe the activation-key co...

I am looking for any reference for the various log messages generated by the VPN Concentrator hardware. Is there such a document.Something like what can be found at:http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_system_message_guides_...

Hi,Is it possible to restrict traffic types over a site to site vpn with PIX. I am looking to restrict traffic to smtp, ping and pop3.I have the vpn working at the moment, but every time I change the access-list it stops working! I have also tried ap...

Hi, does someone know how to map ports on a PIX.Session started from "Outside" on 1812 response received on 1647 from RADIUS server on "inside" which needs to be mapped back to 1812 and delivered to originator.ThanksMick

We have a Pix 525 unrestricted and another 525 for the failover. Am looking at upgrading the keys for the failover to make it into an unrestricted PIX. I only have 1 route out and am wondering if having 2 Pix firewalls going to the same route out wou...