Network Security

Ok PIX Firewall Experts, I really NEED YOUR HELP. I have posted the following two times now, and still no one has been able to resolve the issue. I hope you can.Gentlemen, I have a situation whereas I cannot do DNS REVERSE LOOKUP thru my Pix 515E. ...

1. supposed that my headend router with IP addess of 207.172.3.1, my pix IP 207.172.3.2do I have to put static route on my head end router to route all other traffic to 207.172.3.4 -207.172.3.254 to 207.172.3.2 (which is my pix outside IP, checkpoint...

I am trying to configure a PIX 506E for home office use on ADSL. The provider requires PPPoE and dynamic addressing. I am able to do everything I need except create a translation to allow smtp inbound (I have a mail server inside). I just cannot figu...

PIXinside 192.168.184.3RouterA RouterB192.168.184.1 192.168.184.2When RouterA sends a ICMP redirect 192.168.184.2 to the PIX will the PIX comply and use 192.168.184.2? I have a couple networks behind 192.168.184.2 router that aren't ge...

Currently we use a Check Point for our corporate firewall. We have kicked around the idea of replacing this with a PIX. One of our biggest concerns is the lack of a real time log viewer. I am correct in stating there isn't one right? The Check Po...

I have read CISCO guide about how to use pix failover. Here are stilla few questions:1. same version, I have one version 6.3 (2) and the ohter is 6.3 (3).is it ok for failover.2. stateful failover:1) do we need any configuration on the 2nd unit for ...

On our network we have two PIX-520 in failover configuration.Today, for the first time in five years, the active PIX startedgenerating thousands (almost a million in 15min) of messages:%PIX-3-211001: Memory allocation ErrorThe failover PIX didn't swi...

Hi.My 2 PIX 515E firewall configured on failover mode, protect 2 server form outside connection.Can i load balance or load share with pix the load on the two servers?Can i configure PIX like ios routers to balance per session, so the clients randomly...

I know you tie access-lists to a time-range on the IOS, I have looked on how to do it on a PIX and this feature does not seem to be supported. Am I right?

Hi,I am trying to integrate CiscoWorks 2000 with NNM 6.4. These applications are running on two seperate machines on the same subnet.I managed to get some kind of integration but I cannot make the databases talk to each otherThanksDione

Hello everybody, i need help here, i'm quite new in PIX configuration.Can PIX allow connection from inside to outside to an OracleServer. My costumer just need to buy an firewall to protect oracle server.i have already configured the PIX (without NAT...

Hello - I have a client who has seemingly max'd out their Ethernet connections on their PIX. ver 6.2.2 (one 4 port, and two single ethernet port interfaces).. Can another 4 port ethernet be added?Much Thanks!!

Hi all,I finally set up our pix 515 and re IPed our network. We have an Exchange Server (5.5) running on a NT 4.0 PDC. It HAD a public IP address 209.71.x.x. Now it has a private 192.168.1.x address. Accessing the mail server from the outside thr...

Hi,We have a PIX running 6.2 and the connections don't timeout anymore. There are connections that are 180 and 190 hours old. Connections are UDP (DNS and non DNS) and TCP.Probably there is a bug for this and I didn't see it.Anyone saw that before or...

What are your thoughts/methods on automating the creation, deletion and modification of access lists on a pix using scripts (ie: perl, wsh, expect...) via ssh, telnet and/or tftp, etc..I'm intentionally asking this open ended, but I am not looking to...