Network Security

For reasons best known to themselves our supplier tied in our IP address to the MAC address of our firewall. Hence change the device, you get a new MAC address and a new IP address!Is there any way of keeping the SAME MAC address on the OUTSIDE of th...

Dear All ,Can we implement download restrictions on PIX or Router, so that no one can download more than 10 MB of file in day time ?

I'm grappling with the way Pix 6.3 handles NAT, since it doesn't accept Alias commands. Here's what I want to do. We have to roll-out a bunch of firewalls with the same configuration, so we hope to use the same DMZ addresses on all of the firewalls,...

Using static to NAT a private IP to public and have dns rewrite enabled.static (dmz1,outside) 66.x.x.211 10.18.62.11 dns netmask 255.255.255.255 0 0This 66.x.x.211 address is the address returned for www.customerX.comThis seems to be working OK for A...

I have 1 pair of PIX failover and 2 internet connections (2 routers). Normally I use 1 connection to connect corporate network by VPN and another for Internet access.Firstly, I use static NAT (200.x.x.222) for my mail server which has provide both PO...

I am very new to the pix firewall. I have been asked to open port xxxx fully. Can any one help as I have no experience in firewalls

Purely lab purposes - Pix 501 and 6.3 OS - What is best way to setup NTP on a Pix 501 ? Can I use an Dell XP PC clock as a time source - and how do I do this ? (I have an XP PC linked to Internet getting time check once a day from Atomic clock). Tha...

Hi,I seem to be stuck with this issue. I scanned my firewall using www.grc.com. After the scan I seem to have a number of ports open aside from the ones that need to be open like 80 and 25. The port numbers that are currently open are 53,88,135,139,1...

Hi all,I have a decision to make regarding our PIX515e.We have the DMZ bundled PIX.I have been considering setting up the following configuration.internet>pix>dmz>Front End Exchange>Internal ExchangeHowever every where I look the advice is not to use...

Does Cisco have the command to reset or clear the hitcount to start at zero on the pix firewall except to reload the pix.I hope you will be able to help.Thanks

Need help with this guysI've got two interfacesinterace inside 172.16.25.1 255.255.255.128 sec100interface e4 172.16.25.193 255.255.255.224 sec10i need to allow telnet in "e4" for hosts in "inside"MY Config (disabled NAT in e4)static (inside,e4) 17...

Any help would be appreciated.I have configured many 501's in the past but recently I just ran into a problem that has me confused. Perhaps I am not configuring them the correct way or something..Anyways here is my question:ISP gave a block of 8 IP a...

Hi all,I need help with configuring isakmp policy on PIXto set up VPN connection from another PIX.What is true? When I configure same policy in both PIXs (PIX to PIX)they establish VPN connection. Thats true.When I connfigure different policy in both...

ANyone come across a bug within Ciscoworks when trying to monitor the application with HP OVO agents? Seems like I lose my CiscoWorks login GUI screen and I get an X where the Login/Password should be.I then have to restart the Jrun Proxy process as...

Hi all We have a 3005 (4.1.4) that I have moved some site to site IPsec tunnels to from a 3005 with (3.6.7B)The remote sites are mainly 837's with (12.2(8)YN) and up..Now after the tunnel been connected for 22:48 hrs i get >snip24562 07/27/2004 07:46...