Network Security

Hi, I am new with firewallsCreated a lab running 3 2500series routers running rip, all traffic is good.NOw i intall the 2 firewalls with correct addresses en each side of the lab, and was able to ping only to the outside interface from one end 506e t...

Hello,I have a FO licence PIX and i need know if i can put it a UR licence and convert in a UR Pix.Regards.

i have a pix 501 that i would like to allow a couple of users to connect to the pix via ssh with read only privileges. i have tried adding command username user pass pass privilege 5 but the user still seems to have full access. what am i doing wrong...

Hi,I need to create 2 VLANs off the inside interface, say VLAN 1 and 2. I set up a switch port to trunk only these VLANs (native VLAN is 1). I cannot get the pix to communicate on VLAN 1 with other devices in that VLAN. My config looks like the follo...

hello all,apologies for this question, i assume there is an obvious answer but i cant figure out what it is...i have just downloaded an eval version of ciscoworks for windows and have a question regarding cisco view. Even though i am logged in as adm...

Hi,Anybody here can help me. Im having problem, when our remote office try to access our PIX 501 using ssh. I already issued the command:ssh 202.x.x.4 255.255.255.255 outsidessh timeout 5And also i specify the username and password with the "priviled...

Our company intend to install PIX firewall for the Internet access point. The internal dynamic routing protocol is OSPF. Also we intend to use OSPF for the connectivity with the two ISP that provide services for us (two different connections to the i...

I worked with a PIX515E-resticted bundled package (i.e. 32M RAM and 3 interface). Recently I found that there a large amount of ICMP from two to three workstations from the outside interface (the regional office) to my inside network (An access-list ...

I can see smtp data enter the pix 515e correctly (debug inside)however when it gets to the smtp server in the dmz the data field of the packet has changed to 2A(hex)'s (net monitor)Will the pix change a packets payload? Why? How to fix? The syn ack p...

Is it possible to subinterface a pix firewall?

Has anyone in this forum worked with 500 series PIX firewall or even a 515E? If so, then I would apprciate your review on it (i.e. was it easy to setup? easy to maintain? how is product support? etc. etc.) Thanks in advance!

I have a pix correctly configured to make outbound connections from the external address. I have configured a nat pool to allow the internal hosts make outbound connections using NAT. But my problem is that when an internal host try to access to any ...

Hi,since I upgraded our redundant PIX 515E from 6.3(1) to 6.3(3) there is a noticeable higher amount of dropped packets (x5).The dropped connections are equal in one point: While closing the tcp client/server session, there is a RST packet involved (...

I'm running scans against multiple PIX firewalls running both 6.3(3) and 6.2(2) code using NMap, Nessus, and GFI's scanner. All scanners show the expected ports open but also always show TCP 80 open as well, which is not open in the ACL nor staticall...

Hi,Which are the requirements for using the "isakmp nat-traversal" command in pix software 6.3.3?Some pointers:- Is it necessary to use EasyVPN or one can use the traditional method?- Is it necessary to use "isakmp identity hostname" or it does not m...