Network Security

I need to select hub-and-spoke VPN technology. There are ~60 spokes (17xx routers) and central site (2x 3725 for redundancy, one ISP).There is a plan to monitor routers and other equipment with HP OpenView NNM 6.41 (without ET). Also for routers main...

I am a little confused as to what this feature is designed to provide. I've been experimenting with this based on the examples in the CCO documentation.Can anyone offer me any insight into the design of this feature?My initial understanding was that ...

Hi,Does somebody have experience in setting up an ipsec tunnel between a ftp win2k client behind a checkpoint firewall which will connect to a ftp server behind a pix firewall? if possible can you send some configs for this? that'll be very much appr...

Hi,I am trying to set up a PIX 501, and would like to have separate IPs for the inside interfaces. Is there a way to assign an IP to each port? or is this something that requires 2 inside interfaces? What I am trying to do is to segment the network...

Does this model 506 support OSPF with 6.3 ios? Thanks in advance.

Does anyone have a configuration to have the ability to telnet from the outside network to a Cisco PIX? We're using a 501 within our network that is protecting a group of servers, but our administrative network and aaa server would be located (consid...

I have a client that needs to use HTTPS for an internal service. I also need to have access from the outside to do configuration changes on the PIX via the PDM.I have enabled the internal network to use the PDM and my external IP addresses. However, ...

Hello,I've got a PIX 501 and every other day or so, the network comes to a grinding halt and it has been identified that the PIX is the culprit. The utilisation is always very low and in fact little traffic really passes through the PIX. Tried a diff...

NAT services have been reduced to only 2 vlans.The computers on the remaining vlans use ISA_Server for access to the internet.The syslog server has tremendous amounts of the following messages:305005Error Message IREFO BJ:24101%PIX-3-305005: No tra...

I have a PIX 501 with a Concentrator 3005 that establishes site VPN's to our other offices. When I setup static inside routes in the PIX to point to the Concentrator for my remote office LAN IP's I cannot route traffic. When a client on the PIX lan...

Hi,I have a pix 501 which will not allow me to upgrade it to 3 DES and simultaneously a 10 to 50 IP addresslicense. When I have a look ta the key description generated it states the pix is only allowed for DES and not 3DES so it overwrites the 3DES k...

Am I correct in my findings that it is not possible to configure an external ip addresses on two different ports say 80 and 8081 re-directing to a single inside address port 80. Pix generates "overlap" errors when attempting to configure this. Backg...

Hi all,I have private point 2 point network, simply HQ and remote site scenario. I have this problem of remote site workstations not able to access servers (eg. not able to ping) located at HQ which the servers default gw are pointing to the pix. How...

What signature enabale on PIX? I must enable first?

HiHave a 515E PIX with a "Internet" ip range for both the outside and DMZ interface.I'm having a problem when I specify and access list to allow the mail relay to forward mail to the internal mail server.This is my configfixup protocol smtp 25access-...