Network Security

OK,This was working just fine till about a week ago.Their is a group A behind pix 506 "A". I can vpn in from just about anywhere.Except, Behind any other firewall.Group B, behind firewall pix 506 "B" can not see or connect to any resources in group "...

Hi. I've just added a PIX 501 to my network and have noticed that with the default configuration the Firewall is repsonding to external pings/ICMP. The firewall currently has a basic configuration using PAT and connected to a 837 Router. From reading...

I have multiple remote sites that VPN into a 3000 Concentrator; each site has a 1710 router that uses PPPoE (save for one or two exceptions). My issue is that on occasion (between several days to several weeks), the 1710 will either drop the tunnel a...

Hi,Turbo ACL is enabled on PIX 525 which H/W & S/W config details are,Hardware: PIX-525, 256 MB RAM, CPU Pentium III 600 MHzFlash E28F128J3 @ 0x300, 16MBBIOS Flash AM29F400B @ 0xfffd8000, 32KBCisco PIX Firewall Version 6.3(4)ACL compilation taking al...

I see that you can not have RIP and OSPF on the PIX at the same time. Infact the a little message comes up on the PIX 6.3 saying so. Is there anyway around this?TIA!Jeff

Hi,Our internet facing firewall is a Pix 525. For the past few years, we have had active-x filtering enabled, however recently due to business requirements we have had to disable it as there are 3rd party business sites that need to be accessed and t...

I have a remote site that I need to connect to our central site via site to site PIX VPN. I can do that without issue. My question is we also have contractors at the site who only need interent access and should not enter the tunnel back to the centr...

I am wanting to monitor a PIX FW for attempted hacking & VPN events. Are there any white papers/ tech notes that could assist with this? I will be using Cisco Works for Windows to do the monitoring.

Hi,Wondering is someone could help me understand the following.The ASA has defined rules for which it determines whether to deny or permit incoming packets.My understanding is that the ASA tracks the 3 way TCP handshake to the point where is knows wh...

Hello,Let's say you have three interfaces with the following security levels: inside (100), outside (0) and dmz (30).If you set an ACL on the DMZ interface with permit ip any any, will the DMZ be able to access the outside but not the inside? In othe...

I have a pix 501 and im trying to do redirection for www, smtp and 3389. Everything works well except the www. I cannot get this to work.

i have a pix 515 with os 6.3(1) that has three interfaces, inside outside and a dmz. i want to allow two servers from the inside to access the internet while at the same time allowing host on the internet to ssh to the severs. sounds easy enough but ...

Hi,I had PIX inside interface connect to vlan 1 with 2 routers. Both routers and PIX are running OSPF. When check on the routing table at PIX and the routers, all are perfect.I have a host at Vlan 1, with default gateway point to PIX ip address. PIX ...

Hi,I am using PIX to protect my 3 VLANs. PIX is connected to the trunk ports on the switch. E0 has 253, 556, 557 VLANs253=253.12556=156.254557=157.254E1 has 52, 156, 15752=52.1156=192.168.156.1157=192.168.157.1IPs assigned to VLANs on the router are:...

I want to set up a NTP server on my PIX. I have a Pix 501 with 2 interfaces. The outside i/f connects to a Windows XP machine which has a broadband connection to the Internet. The XP machine itself gets accurate clock signal from a remote atomic cloc...