Network Security

Is it possible to have the DHCP server on the PIX 501 hand out a subnet different from the one on the inside interface? I am trying to have a class B subnet mask on the interface, with two different class C subnets behind the inside interface so the ...

I have a PIX firewall that needs an additional IP range assigned to the external interface. Is it possible to assign a second non-contiguous IP range to an interface? If so, how is this done? I don't think I can use the "secondary" command that is av...

Hello to all, I'm putting in a 501 for a customer and I thought I had the config installed correctly. All we are doing is connecting our dsl service (via pppoe) from SBC to the PIX. It's working fine with the Linxsys router in place.When I put the PI...

Hi,Is it common if we map windows-machine to unix, e.g Solaris server, through PIX, the copying process from windows to the Unix is slow?The windows-machine is on the Internal (inside) network, while the unix server in the DMZ.Access from Inside to D...

Hello,We just set up a PIX to use in a very small data center. At this point we have two web servers that are behind the PIX, with static translations defined for both of them. All appears to be working and we can access the web servers as intended.W...

Hello,i have a PIX 520 running softwrae 5.1(4) , i have created a static translation in order to allow outside users access a server on port 443(HTTPS) .This was done with the following statements:-static(inside,outside) global_ip_address private_ip_...

A customer has the following conf.Two sites connected with a VPN through internet .On site A there's a Win2k Server with terminal services. Users on Site B connect via RDP but after 10minutes ( even working ) the session is disconnected.Between the t...

Hello,i have a pix firewall running 5.1(4) , equipped with three interfaces ( inside ,outside ,dmz).Two access lists have been created in order to let outside access inside andthey are ok :one on the outside interface ( direction in ) and another one...

I upgraded from PIX 6.2.2 to 6.3.1. I have a 3030 VPN Concentrator in parallel with my PIX. There are IP phones behind 3002 Hardware Clients doing Network Extension Mode connected to the 3030. The default tunnel gateway for the 3030 is the inside int...

Hello,In a routed BBSM network, can we use BBSM for a network, behind a router, clients connected to hubs? Or do we need to have switches in the LAN?

I am sufferring a problem about the connection can't be clear from PIX connection table over the connection idle timeout so that the new connection can't be established while the entries in connection table is over the limitation of PIX capacity .(ev...

Has anyone used the new version of PDM and a pix blade or for that matter used the Monitoring Tab within PDM. What I want to know is what kind of information shows in the PDM log, does it show things like src/dst IP address and src/dst ports or is ju...

I'm using a global NAT pool that spans 5 Class C subnets and I am NAT'ing all internal hosts to that pool. Strange behavior is that I am running out of translations, it stops handing out translations when it reaches somewhere in the area of 650 trans...

Can PIX 506E be used in a basic hosting environment ? If I have few web servers on the Internet with no Inside interface ( Only DMZ ) and all I am looking for is One-To-One NAT, SYNC flood protection and DoS protection. Can 506E do that ?What is the ...