Network Security

@All,Would like to know how pixs handles ICMP pkts(eg ping) while uisng PAT. How will it differentiate between 2 ping request commings from the internal network to the same destination??any referedce doc/url will be appericated!!!thxhanu

Hey you guys,I'm trying to get a pix which had a previous config to "recover" and let me in via console. There was an ACS service set up on it (as I said, it used to be standby, more precisely for the one we have in production right now). However I g...

Is it possible to create more than one DMZ within for example a PIX-515E-UR-FE-BUN.ThanksRichard

I have been messing with this problem for some time now, without really making much progress. Here is my problem (see attached network diagram for details):I have a Westell DSL router that gets the dynamic external IP from Verizon. Its internal IP is...

Dear All,I am using the following crypto map and Queue list on serial interface. I found that crypto map vpn 10 ipsec-isakmp set peer 10.50.5.173 set transform-set pilot match address 101interface Serial0/0 custom-queue-list 1 crypto map vpnacces...

My set up includes a 3000 concentrator that has a site using the 3002 hardware client. The client is running in client mode and we've got access externally using a registered address. How can I change the password without using the web interface, ...

I can't seem to log in to our Pix PDM (setup by a previous admin), and now I'm somewhat stuck since I cannot find any cisco docs on how to reset the password or obtain it from the CLI. Anyone got a clue on this one?-Tim

Have a customer situation where I only have access to their firewall via PDM, and need to be able to do a reboot. Have tried doing it via the command line interface menu in PDM, even the multiple line command.. I issue a reboot, but the confirmation ...

Due to restructuring of our network, I need to change the IP address of the inside interface of my production Pix 515 firewall. Is there anything that I need to be aware of before making this change, or can you tell me the effects of making this chan...

Hi all,I'm a bit confused as to why this config doesn't work.I have an internal Front End Exchange server which I'm trying to forward https clients to.I already have smtp forwarding to my main Exchange server and this works fine.Hers my config, any h...

Hi, I need to configure QOS on PIX 506E Ver.6.3.QOS about VoIP between VPN. It´s possible?

Hi...I'm trying to do SSH to the PIX via the DMZ port. I'm able to connect to the PIX through SSH from the same DMZ LAN, but not from any other LAN connected to the DMZ. Network reachability to the DMZ interface from the other LAN is fine. Is this th...

Dear Glen,The PIX is switching over to failover mode due to high CPU utilization. We Changed the xlate timeout value to 3 hrs. PIX switched over to failover mode thrice in the evening within 1hour duration. We opened a TAC case for the issue. CISCO T...

Wondering if you could shed some light on this.Pix Ainterface inside 172.16.25.1 255.255.255.128 sec 100interface e2 10.1.1.1 255.255.255.224 sec 15host A 172.16.25.115 (in interface inside)Pix Binterface e2 10.1.1.2 255.255.x.x sec 10host B 172.16.2...

Please advise PIX statements using outbound-list to block certain IPs from using: 1. MSN 2. Yahoo chat3. Chat in general.