Network Security

I have a pix501 that I'm trying to set up for my business. 1. My internet service comes with 5 static IP's. Can I bind all these IP's to the outside (global) interface.2. I have services (web, exchange, vpn) that I have to forward to be accessible to...

Hi all,I'm not too familiar with the new OSPF routing function on ver. 6.3. I should solve that a few PIXs can advertise their inside subnets for the other PIXs. The firewalls are connected with their outside interface to the internet (PPPoE, ADSL). ...

We have added shuns for many spam email servers to help reduce the amount of spam that gets into our smtp server. The problem is that when the PIX is power cycled it looses all of the shunned IP addresses. Is there a way to keep them in the PIX aft...

I need help on how to secure the PIX firewall using PDM/HTTPS. I try to put the username and password on the accounts option but when I use HTTPS:// in order to access the firewall it verufy the username on the Domain server. Anybody can help me on h...

Hi,We have a couple of pixes in active/standby configuration. For some reason we are working on our secondary pix, since our primary doesn't stop restarting. The primary pix restarts, comes up, starts failover negotiation with the active one, receive...

I have a windows 2k domain situated on a DMZ. On the inside dms I have windows 2k workstation. I want to add this workstation to the domain. No actual address translation is being used. I have opened up from the inside interface with an access list U...

with the factory default setting I can log into pdm but I need to change the inside ip address. The address i changed the firewall to is 192.168.0.14 for inside and I do that in pdm. When I reboot my system make my computer 192.168.0.8 and a gateway ...

Hi, does anyone know of a resource to test a PIX 525 config? I want to make sure its utilizing cisco's best practices in configuration

We have VMS 2.2 installed and using "Management Center for Cisco Security Agent" portion of it. We have purchased 2 CSA licenses and have already uploaded them to the MC for CSA. I'm still receiving "Warning : Management Center for Cisco Security ...

I wonder whether there is any possibility for NBAR to match more than 16 ports for each type of protocol (for example fasttrack)? The problem is that for example imesh is using ports between 1024 and 7000 !!! I successfully managed to block p2p appli...

Hi, I have a PIX 525 running vers 6.3(1) andwould like to disable timeouts for certaintcp connections passing through the PIX. Oneof which is ssh. Looks to me like the onlyway to do this is to set "timeout conn 0:0:0"which disables timeouts for all ...

Is there any recommendations for a simple tftp software so I can upgrade my pix pdm to 3.01.any links or suggestions would be appreciated

If I take a 7960 and put it outside of a PIX and modify the cnf.xml file to point to the NAT'd IP of CM and open port 2000, should I be able to pass calls through the PIX? I can get it to register with the CM, but when I make calls, there is no voice...

I am configuring a PIX 515e. Want to deny all outgoing traffic but the ports I allow. I was trying to configure a service group to use inside of PDM for web traffic. I add http and https but the rule does not work.I can deny all traffic but to try ...

I have a PIX FWSM in a 6509 connected to two seperate upstream border routers. If I apply two static routes pointing to the two routers, will they load balance?