Network Security

On the PIX 515 when I do sh crypto engine ,it shows Crypto Engine Connection Map: size = 32, free = 11, used = 20, active = 20 I checked the command refernce but could not understand anything.What does SIZE,FREE,USED,ACTIVE denote.Does it mean th...

A client has their primary DNS on the inside and a secondary DNS on the outside (not a DMZ port). They want to be able to have the secondary DNS poll the primary every fifteen and intiate a zone transfer if required. What is an easy way to do this?...

Hi,have anyone tried to use a PIX with an Enterprise CA Microsoft?I've read that there are problem with enterprise CA subordinate or standalone CA subordinate. Are there problem with enterprise or standalone root CA?Many thanks

I am in a very large corporate environment. I have multiple PIX Firewalls running. I need to know if there is a way to strip the header information from outgoing e-mails sent from my compnay domain. I'm not even sure if this is a Firewall issue or...

Hi,We have Failover configured (using serial cable) between two PIX 515E. PIX is also configured with a trunk port on one of the DMZ interfaces. With the following relevant config+++++++++++++++++++++++interface ethernet3 100fullinterface ethernet3 v...

IS there any web interface to config PIX??Thx ^^

I need to permit/deny traffic based on time of day.Is this possible to do with a Cisco PIX?

The ISP I have uses PPPOE and assigns external dynamic IP addresses that will eventually change.1. Will Dynamic DNS services (e.g. dns2go, tzo.com) work with the PIX and2. If so what configuration is needed in the console.Also, what rules are needed ...

I used a router with "ip helper-address" to allow bootp traffic,and now the router is changed to a pix firewall,how to config a pix firewall to allow bootp traffic?

Hi,I have this situation and I'd appreciate any insights:Moved a Win2K web server from the inside network to the dmz on a pix 520; before the move the web server was able to access a Netware 5.0 running IP, after the move we can not see the Netware S...

I am not sure if this is were I need to put this conversation....I have been running a PIX for about a year now and have just started seeing lines in the log that I am not sure what it is saying. It looks like a IP address on the internet is connecti...

I have two failover PIX firewalls that were just updated to v6.3(3). Now, when a user goes through the PIX to the FTP server in the DMZ, it takes a really long time (40+ secs) before the user is presented with a login prompt. Turning off fixup for ...

I have question about how to select PIX software version. I would prefer to compromise latest and greatest against stability, such as 6.3.1 or 6.3.3. What is the best practise to compare and select a appropriate software for production?