Network Security

I need to allow Ping for troubleshooting. I have a real basic config and I am having problems with ICMP.From the inside 129.x.y.30 I can ping the PIX inside interface.From the inside 129.x.y.30 I cannot ping the outside 32.x.y.11 address.From the ou...

I have a PIX box with 50 user licences.Sometime my LAN exceeded the limit and the monitoring tools show 50 licences in use.But after for a while even some of workstations has shutdown.The PIX still capture the user licences.ANy advise.

Cisco VPN client v. 4.0 for Linux (Mandrake 9.1) works perfectly with Ethernet interface, but after I dial VPN concentrator 3005, routing installs correctly to ppp0 (VPN conc. is reachable), but IKE is not exchanging (VPN client debug shows that it i...

Hi all,it is well known that PIX doesn't work with a Microsoft subordinated CA, however, does anybody know wheter is is possible with another subordinated CA like Netscape, Baltimore or Entrust?Any idea would be appreciated.

Hello all,I have 2 pix firewalls configured in failover.I want to perform an image upgrade on them.What would be the best scenario for that. I am thinking of taking offline the standby, upgrade it, taking offline the primary , upgrade it, turning the...

I am currently working on a project to mesh several existing hub and spoke vpn systems running on Cisco Pix / concentrators and checkpoint firewalls. I am interested in the possibility of using ospf to simplify routing in the vpn structure. I have lo...

All, I am a windows admin who has been delegated the duty of working with the pix - go figure. Anyways I have a pix 525 running 6.3. Coming off of one of the interfaces of the pix I have a test network. That interface has a security rating of 50 whil...

Hello ,i have tried to install vms 2.2 90 day evaluation from files dowloaded from CCO ( 1 zip and 3 other files ), but i have not found any explanations how to install and the product.I have unzipped a files but during the unzip but appear a reques...

Hi,Scenario:a) 1xleased line to ISP.b) as initial LAN range provided is too small, a second subnet is given on the same link by the same ISP.c) this means the both subnet A and subnet B is able to route out to the Internet via the same router althou...

Hello,We are connecting using at each remote site a Cisco 837 router with a ISDN modem as a passthrough to a PIX Firewall.Each time the ISDN connection drops the Cisco box either requires a reboot or the crypto map to be restarted before anyone can c...

On PIX fw as easy vpn server,I get :106011: Deny inbound (No xlate) icmp src inside:<src host> dst inside:<dst router> (type 8, code 0)C831 is a easy vpn hardware client in network-extension mode. Vpn works correcly.Too, I can't ping PCs connected to...

Greeting every one,I am trying to configure the PIX 525 loaded with version 5.3(1) to achieve load balancing from Two ISPs, it's like I want both ISPs to forward the traffic simultaneously to the Pix firewall, the bandwidth of each link is 64Kbps. ...

hi all,I'm trying to establisg an h323 video conf througha pix 515,my remote correspondant can see me but i can't see or ear him.Do i need a special conf,does this work with nat,pat?here is a piece of conffixup protocol h323 h225 1720fixup protocol h...

Hi I need to know if the PIX Firewall can send reject packet with proper icmp unreachable type (port unreachable)Like the Checkpoint reject role does.