Network Security

I am running PIX 525 6.3(3)4 interfaces 2 FE, 2 GE1 FE used for stateful failover1 FE will be used for DMZ1 GE inside1 GE outsideAttached to 6509I set GE-outside to VLAN 201 on the 6509 the fiber port it is plugged into is VLAN 201I set GE-inside to ...

Could some one please direct me on where to find literature on CISCO IPSec shared keys verses IPSec Internally generated Certificate based. If there isn’t any literature on the comparison of these two than the pros and cons of each would be good enou...

Could anyone assist this issue ?Whenever I tried to upload the file in Common Services License Option then it shows License file may have been corrupted.

I'm trying to configure Policy NAT on my PIX 515. According to Cisco docs, Policy NAT is supported on PIX v6.2 and higher. My PIX is v6.3(1). So I assume it supports Policy NAT. However, when I type in the command "nat (inside) 3 access-list acl-pnat...

What is the main reason to show this error " License file may have been corrupted" How it will resolve this problem - Even we tried to update the license file even the existing one in Hard-Disk or tried by floppy too (we copied earlier before install...

What is the best approach to performing file transfers/copies from site-to-site over a VPN. Bare transfers/copies proceed slowly over the vpn.Should I set up a PC at each site/location as anFTP server ? And if so, any good FTP shareware/freeware/chea...

Can anybody tell me whether there are any commands on the PIX that allows you to see the connections using the highest bandwidth ?I can see the overall performance, as well as the current connections, but I cannot see the performance of individual co...

Hi,My company is going to implement a squid proxy at the DMZ. All internal users from inside interface with segment 192.168.84.x 255.255.252.0 are to direct http and https traffic to the proxy server using port 8080.Here is the static map.static (dmz...

I am having trouble accessing the internet from any clients after configuring a static mapping to our terminal server on port 3389. I can get to the terminal server from the outside with no problems. If I remove the mapping and reboot the Pix then I ...

Ok, MAYBE I do not understand something and please help me. It will be long post. Hoping you can helpWe know, that pix is built on following foundation - if packet came from one interface then forward it to another interface or drop it.Now, since 6.3...

Hello All! We are troubleshooting ciscowork user tracking function and we don`t get any ip address outside the subnet where the server is! Can someone explain how cisco work get the list of all ip addresse SNMP, CDP, scan ...??? From what I have read...

Hi AllI have setup VPN3002 hardware client to establish tunnel with VPN3000 concentrator in network extension mode. It works fine with LEASED LINE connection. But the connection fails when using ISDN dial up line to establish the tunnel. Below are th...

Hi All,On IOS, prior to 12.3(8)T, inbound traffic would go through inspection once before decryption and again after decryption. Because of this, the inbound ACL should contain permit statement for IPSec protocols as well as interesting traffic. I wa...

Hi all,My PIX 515E in a customer net with the standard topo (Outside-DMZ-Inside) 192.168.28.xx----(e0 PIX e1) --(INSIDE)--10.30.31.xx | | (DMZ-10.30.30.xx) I use static map to translate 30.xx->28.xx for outside access.I got the following problem:+> P...

Configured port redirect on pix 506e to our windows terminal server using PDM. I can connect to the terminal server but then no one can access internet usless the mappings are removed and the pix is restarted.any ideas?