Network Security

I have a PIX-525-UR, PIX OS 6.2(2) with several interfaces.Having problem to get one IP on a DMZ to be able to use to different NAT rules, one to a DMZ with a lower security and another one to the outside.like this:nameif ethernet0 outside security0n...

I'm trying to duplicate a PIX config from an existing unit to a second unit. This is my first experience in setting up a PIX from scratch so i may have missed a step somewhere? I'm trying to add in an object-group but am getting an error from the pi...

I am planning a migration from a Checkpoint Firewall box to a PIX firewall. Has anyone seen a tool or worked up a procedure for translating a Checkpoint rule set into something a PIX or human can understand?Thanks.

I am running a few PIX 501 using Network Extension Mode (NEM) connecting to a Cisco 3000 Concentrator.I am having trouble setting up a pix in NEM to accept ssh connections for remote management.I have several pixes setup using a non-nem config and I ...

I'm trying to set my 535 to syncronize time with a public ntp server but I can't seem to get it to work.Would someone mind outlining the exact steps I'd need to perform to sync the Pix's time with a public ntp server?Thanks,Mike J.

Hi Guys,I am going to execute a project involving deploying of Cisco IDS 4215 and PIX 515E at primary and disaster recovery site one each . The primary site is connected to DR site with lease line to be connected by 2691 and 1700 routers. Similarly ...

Please help,I have a client with a PIX 506e which I setup and have outbound NAT setup and the vpn working.I am having difficulty figuring out how to allow my internal services access through the wan port.To explain, I have a web and smtp server on th...

I have a PIX 515E 6.3(1) that has started blocking traffic from certain inside machines to other inside machines.I didn't think the PIX could filter from one interface to the same interface.This is only happening on traffic across my routers that con...

I have a primary and a failover PIX 515 firewall running version 6.2. Upgrading the primary to 6.3(3)is straight forward, but I'm a little concerned about the Failover unit. Do I need a different IOS or use the same IOS as the primary and it will kno...

Hi all,I'm new to pix and need some help on it.I've configured the respective interfaces but i have some qtns.Assuming i've configured 210.6.170.170 on interface e0 172.16.25.1 on interface e1Here's my host setupHost A (interface e0) > 210.6.170.171...

Hi all,could someone help me how can I determinetype of PIX and value of Flash.This PIX has floppy drive. So I closed ringto PIX classic, 10000, 510 and 520.PIX ver. of IOS is 4.2.3.And other question is how to determine value of flash.?It has 8MB of...

Hi All, Just a quick query, I seem to be having some problems with all my SMTP site to site messages with Exchange 2003. The messages all seem to sit in the queue. I am concerend that the two PIX's (506e, running 6.3(1)) at either end are interfer...

I have a odd situation. I want to use one of my PIX boxes that is set for my site to site vpns as the default gateway on our internal devices. I would like this pix to forward all traffic, except specific traffic, to another firewall destine to the i...