Network Security

We have a Pix 525 unrestricted and another 525 for the failover. Am looking at upgrading the keys for the failover to make it into an unrestricted PIX. I only have 1 route out and am wondering if having 2 Pix firewalls going to the same route out wou...

Ok, just wondering what is the suggest route to fix my problem.I am looking to create a network that has one central site and 13 branches which connect to the central site via VPN, will a PIX route packets from one branch to another branch if all of ...

I've got a PIX 515 with about 10 different EasyVPN users defined via the vpngroup command. Is there any way to see which of these users are logged in at a given time? Another way of asking this...is there any way to see which vpngroup is active at a ...

All,Is it possible to have a manual dhcp entry so that a client on the inside of a 506 will alway get the same IP address?

Hi,we have an application running between 2 custom proxy servers with a PIXbetween them. The application runs fine when both proxys are on the same lan.It stops working when we insert the PIX.Access-group allows everything , inside device is translat...

Hi to all,When I run an audit log in my CW/VMS SecMon I see a large number of output-lines like this: "ASA Error -158: Value xxxxxx out of range for destination"What is this? How can I resolv this error?Thanks in advance.Enric

So, after all the hype I read about being able to get a DMZ going on a logical VLAN interface using the latest firmware 6.3(4), I decided to give it a shot.I got a basic setup going - pretty standard...inside and outside IP's and subnets. Outside def...

I have PIX 506e at office and NetGear FVS318 at home. I can create a VPN connection between the two (initiating it from the PIX as the PIX sits behind a SMC router that does not allow VPN traffic to originate from outside). I'm sure I have a VPN conn...

Ok, I'm not sure exactly how to describe this issue, but here it goes. We have two PIX 501's connected as VPN to each other, across links that have at least the capability of 1mpbs both ways. The issue is, when I go to test the bandwidth capability o...

I have a PIX 501 behind a cable modem that is performing very, very poorly. Typical web surfing speeds are worse than dial-up! If I remove the PIX, and either plug a PC directly to the cable modem or use another broadband gateway, the speed improves ...

Hi,Our Pix (535 6.3(1) UR Licence) sometimes do not seem to advertise a physical interface's mac address to the Cisco 6509 switch where the dot1.q trunk terminates.With one vlan it works fine, with another vlan it does not.Clear arp in both Pix and s...

Trying to configure a 501 as an easy vpn client to PIX 515(server). The tunnel says its up, but i am still getting "109013 user mush authenticate first before using this service" in the log on the pix 501 (client) ...any thoughts?

Hi,I am using PIX in Failover mode..Currently my one PIX is down and other is up.I am not able to find out whether my primary is up or secondary is up.Here is the output of sh failoverFirewallPIX# sh primaryType help or '?' for a list of available co...