Network Security

We have a 40 PC office with 4 switches. We are planning to go to a T1 connection to the internet.My questions are as follows:1) If we use a PIX 515 firewall, do we still need a router to hook to the T1 or can the T1 come to the firewall direct?2) We...

Does anybody have any ideas as to how many static NAT entries a PIX 501 can realistically handle? I have seen nothing on Cisco's Web site that indicates there is a maximum, but there is a maximum config file size of 256k.I have a situation where I w...

Hi ...I'am having a problem on getting vlan failover to work on two Cisco PIX ....Anyone know a solution to this problem ..---------------pix primary----------------interface ethernet0 100fullinterface ethernet1 autointerface ethernet2 100fullinterfa...

I have started to clean up issues with a new network. I am trying to discover the reasons for the attached error messages on my PIX. I am thinking this is a spoofed address on the LAN but am not sure how to go about searching for it. 106021: Deny tcp...

Ok, my PIX firewall was sending logs to my Kiwi logger, then just up one day, stopped. I hacew tried rebooting the firewall and clearing the log settings. I have also tried setting up Kiwi on another machine and sending to it. I turned off logging...

Hi,I have installed IDS 4235 and PIX 535 (Active-Active) mode.I have configured blocking on the IDS and have enable shunHost for FTP authorisation attack.It works fine except for even if the the timer of shun expires which I have set from IDM (to 5 m...

Hello,How can i add acess-list to vpn client that connect to the PIx VPN.I tried to use :access-list outacl deny tcp 10.1.198.1 10.1.32.1but it seems not working(10.1.198.0-10.1.198.254 is the vpnpool)Thanks

Hi everyone,I am using Kiwi Syslog Deamon to keep PIX logs. I am looking for some kind of program, able to filter these logs according to a certain IP address or some other keyword I type in. I do not need a complete log analyzer. Something light wo...

Could someone explain me how can I configure interfaces on PIX firewalls. I mean number of interfaces. For example PIX 525...I populate this device with one 4 Eth. card plus 2 interfaces on board. And I see with command sh ver that max.physical inerf...

hi,i just love cisco technologi, but someone told me that netscreen firewalls are much better then pix firewall, because they have deep inspection and support for gprs protocols.is it true?thanks.

Hello everybody:I want to block one application that uses 80 tcp port (not http) and I don´t know if it is possible with PIX firewall 525 6.3.3 and just permit access to internet with http to navigate.Somebody of you knows it it possible? thank you.

Please, could you help me with basic config with access from inside network 192.168.1.0/24 to outside network 192.168.7.0/24. I have problem with icmp(ping) from inside to outside and other serveces as ftp and http on outside host 192.168.7.1. This i...

I've been looking at the spec sheets, but I'm still not sure about the advantages of the PIX Firewall series versus the IOS firewall in, say, a 2800. Would it offer any advantage for use in, say, a typical 100Mbps max 'edge-protection' application or...

hello,a customer where i just have installed a pix 515 is claiming there mail server is still vulnerable for mail relay even the firewall is inplace. They are using the below website to test their mail serverwww.rbl.jp/svcheck.phpand found 6 accepted...