Network Security

Here is a question for Pix gurus:What puts a heavier load on a Cisco Pix firewall:- 4000 DNS requests generating 1 MB of traffic or- 1000 HTTP requests generating 50 MB of traffic or- 10 FTP downloads generating 500 MB of trafficIs the Pix using more...

Hello,Pix 515e, v6.3.1I'm running split dns and things are running ok. However, if I have a host defined in a static statement the Pix will doctor the dns replies when I query an external name server via a LAN workstation.For instance:static (inside,...

In normal cases; The PIX ( 515 ) CPU usage is about 10%, but temporary it jumps to 99% with less than one minute and get inaccessible; where the failover PIX get active until it’s CPU also get saturated and come back inactive.I separated all the inte...

Hey all, I looked around but didn't see this before. I'm running two 515's in failover on 6.3(3). Over the weekend, the Turbo ACL (only 32 elements) applied to my outside interface stopped working. This happened at 4am, so it wasn't due to any change...

I have a router to router VPN architecture, hub and spoke in design, with public addresses on the outside interfaces, and private addresses on the LAN side. I'd like to force all syslogs from the routers through the VPN tunnel to a privately addresse...

I am trying to upgrade my pix firewall but the only available way to do this is through the copy tftp flash command but I am having problem getting this to work because the only way my boss will let me on to the firewall is through console and I can ...

Hello AfaqHow can i decide my customer to purchase a PIX better than an upgrade of it's 7200 to a IOS FW ?Is it better to use a PIX ?If yes why.Do the PIX offer SSL for wireless encryption ?thanks for your help

Dear FriendsMy client has a PIX 520 with no extr slots for DMZ, how isit possible now to create a DMZ, can i add another rthernet card or port. i am asking because 520 is an end of sale product.IOS version is 4.2can i do something to this box now ?th...

Does anyone know if NATing a BGP peer's address on the PIX with MD5 enabled is achievable? I know the 'norandomseq' tag on a static will work for a regular BGP implementation, however this did not work for a NAT implementation. Cisco doc for BGP peer...

Hi,I have a Cisco Pix515 firewall newly installed between different sub-networks within my workplace. However, this doesn't support IPX, which is crucial for daily functioning (due to Novell).Is there a Cisco solution that anyone can recommend, such ...

I´ve configured a Certificate Authority on Linux to autenticate IPSec network devices, but I think Cisco only support Windows CA's. Anybody know how to enable Cisco support for Linux CA's ????

we have a PIX 515 with ADSL connection to our Internet provider.We want to monitor internet usage from internal users.Basically we sometimes see high input traffic to the external interface of the firewall (we see that from PDM monitoring) which mean...

Hi,We are using pix firewall and the Smartfilter for URL filtering but the pix always use around 62M RAM.Any idea about it?How to optimize configuration for decrease memory?Regards,M.Rad

Jun 16, 2004, 8:21am PST I'm using the "DHCP Network Scope" field in order to provide a specific scope for a Group of users. The VPN concentrator for the DHCP Discover request uses its own IP address into the IP source field and inserts into the GIAD...