Network Security

I use VMS v2.2 and PIX 515E with software v6.3.1.I configured PIX with PDM and after I' d like toconnect PIX to VMS PIX MC to manage configs.When I try to import PIX config VMS PIX MC saysthat it has more than 100 errors in configurationand do not im...

I used PIX525 has three interface. I have Active Directory (Windows2003) in inside zone. In inside zone, I can join domain and used Single Sign On which no problem. I have server in DMZ zone and try to join domain (AD) in inside zone but i can't join...

I am a little confused on how to upgrade the pdm... cisco states they no longer support tftp softare...if the pix firewall has a tftp server why do i need software.... can't i set up the pix as a tftp server and copy tftp flash the pdm.bin file to u...

with the pix I think you can connect to a time server and have the pix synchronize with the internet or the pix can act a time server not sure about the second part. ... I am testing a w2003 server enviroment.... what is the best way to have the dom...

I have a pix501 that I'm trying to set up for my business. 1. My internet service comes with 5 static IP's. Can I bind all these IP's to the outside (global) interface.2. I have services (web, exchange, vpn) that I have to forward to be accessible to...

Hi all,I'm not too familiar with the new OSPF routing function on ver. 6.3. I should solve that a few PIXs can advertise their inside subnets for the other PIXs. The firewalls are connected with their outside interface to the internet (PPPoE, ADSL). ...

We have added shuns for many spam email servers to help reduce the amount of spam that gets into our smtp server. The problem is that when the PIX is power cycled it looses all of the shunned IP addresses. Is there a way to keep them in the PIX aft...

I need help on how to secure the PIX firewall using PDM/HTTPS. I try to put the username and password on the accounts option but when I use HTTPS:// in order to access the firewall it verufy the username on the Domain server. Anybody can help me on h...

Hi,We have a couple of pixes in active/standby configuration. For some reason we are working on our secondary pix, since our primary doesn't stop restarting. The primary pix restarts, comes up, starts failover negotiation with the active one, receive...

I have a windows 2k domain situated on a DMZ. On the inside dms I have windows 2k workstation. I want to add this workstation to the domain. No actual address translation is being used. I have opened up from the inside interface with an access list U...

with the factory default setting I can log into pdm but I need to change the inside ip address. The address i changed the firewall to is 192.168.0.14 for inside and I do that in pdm. When I reboot my system make my computer 192.168.0.8 and a gateway ...

Hi, does anyone know of a resource to test a PIX 525 config? I want to make sure its utilizing cisco's best practices in configuration

We have VMS 2.2 installed and using "Management Center for Cisco Security Agent" portion of it. We have purchased 2 CSA licenses and have already uploaded them to the MC for CSA. I'm still receiving "Warning : Management Center for Cisco Security ...

I wonder whether there is any possibility for NBAR to match more than 16 ports for each type of protocol (for example fasttrack)? The problem is that for example imesh is using ports between 1024 and 7000 !!! I successfully managed to block p2p appli...

Hi, I have a PIX 525 running vers 6.3(1) andwould like to disable timeouts for certaintcp connections passing through the PIX. Oneof which is ssh. Looks to me like the onlyway to do this is to set "timeout conn 0:0:0"which disables timeouts for all ...