Network Security

Hi, AllJust wondering what is the point of applying virtual telnet on pix. Since we can use downloadable acl at the ACS for pix, the user shall be able to access whatever he want after successfully passing the authentication (based on the downloaded ...

I am working with a client who has an older PIX 520, version 4.2(5). I would like to connect using SSH. Is that possible in this version? I can set the telnet, but I would prefer to use SSH for outside connectivity.thanks,Jim

HiIs it possible to do any of this in the Pix:1) Static DHCP lease. I e configure the Pix's dhcpd to always give a dhcp client with Mac-address xxx the same IP-address yyy?2) Static ARP entry? I e to configure the pix ARP-table (on inside) that the M...

Is it possible without WCCP, to configure a Content Engine 7305 to do real ftp proxy.Like on port 21, and use user@site:port ?

We have a ftp server on 192.168.0.4 on the inside interface of our network. The server is running an FTP Server, but we cannot get traffic from the outside interface.I have attached a copy of our config should anyone be able to help. The private ip...

I have used this Pix 501 at two locations since purchased new 7 months ago (Whats the warranty), the first location had the same problem- Massive Speed Loss(1.5/1.5 was running at 100/300), which the ISP tech support thought the Pix could not handle ...

Hi ,I have the following scenario: R7 --- INSIDE --- PIX ----- OUTSIDE -------- R5, R6RIP VERSION 2 is running between the PIX and R5,R6, R7As you can see the PIX is learning the loopbacks of R5,R6 and R7R5: 15.15.15.15R6: 16.16.16.16R7: 17.17.17.17...

WE have a PIX 515e running 6.3 FOSIs it possible to stop all mails from three ip address and allow the rest of mails from all mail servers using rule sets in PIX .We belive these three ip addresses are spammers and would like to block them at the per...

The PIX is configured with two ACls, and these two ACLs are used for the policy based NAT to translate them to two different public IP addresses.Since there is no deny statement is allowed for policy based NAT, we faced a lot of problem when creating...

Hi,I hope someone can help me out.I've a pix 515E 6.3(2), ACS for Unix 2.3(6), and a very simple webserver on the inside.Outside users need to access the simple web-server on port 80. However they need to be authenticated/authorized with the aaa serv...

I got PIX 501 firewall. We now have Windows XP small workgroup connected with 3COM switch. All connected to the internet using NetOpia Caymen 3500 4 port ASDL Router with DHCP enabled. I need a help to configure PIX 501 to have VPN. I don't know any...

Is there a way to configure a pix to limit the bandwidth consumed by a vpn as opposed to general access? (webservers, websurfing, etc.)

I have a PIX 506e running 6.2. There is a W2K server on the inside running phone system software. It is a web interface running through IIS. I have a static entry in the pix for the W2K server. The Vendor's software requires the firewall or NAT to ...

I've tryed to provision new site for VPN customer, but the VPNC gave this site an IP already assigned for anathoer VPN custome,and DFM reported this duplication.How can I resolved this problem?

Hi all,I have Cisco Pix firewall 520 series with IOS version 5.1(4), this Pix has two Fast Ethernet network cards built-in, I want to add two more Intel FiberOptic Ethernet network cards in it, Can it possible? My IOS has license of 6 network cards f...