Network Security

Hi,I have 2 PIXies with configured failover.Yesterday I switch off and then switch on Secondary PIX.But when I doing telnet to Primary or Sercondary PIX and put "show ver" to get Up Time I see still the same time, 270 days in my case. But Secondary w...

I would like to come back over a problem I have already post regarding applications failure over vpn tunnel. In fact We have made some investigations and the problem seems to be « located ».What happens is :- The VPDN authentification with AAA server...

Greetings!I have reduced the command privilege as follows:"privilege exec level 1 show startup-config"Now any user with level 1 access can see the startup configuration, but with that he is also able see the snmp community strings in clear text.Enabl...

Just wondering if anyone knows the performance impact of a 9,000 entry ACL? Also, is there a limit to the number of ACEs on a PIX? Thanks.Jeff

i have made this config from the cisco website. will this config work for me, so that my exchange smtp traffic comes and goes thru this pix.nameif ethernet0 outside security0nameif ethernet1 inside security100nameif ethernet2 dmz security50enable pas...

I am setting up a DMVPN with two spokes. The hub is a 1760 witch is located behind a pix 515. What ports have to be opened on the pix to allow communication from one spoke to the other?Thanks in advance!

Hello,I've configured a VPN from outside and it works fine. The problem I have is about the access to internet.The address pool to the VPN connection is not within the inside range. And I don't know which gateway I have to configure the VPN clients i...

Upon successfully connecting to Concentrator 3000, I realised, on the Ethernet adapter, that my ISP DNS entries were replaced and new WINS entries were added according to my DHCP server options 006 (DNS Servers) and 044 (WINS/NBNS Servers) respective...

I have a pix 515E with only two interfaces, an inside and an outside, but I need to connect two T1 internet connections on different subnets to the outside interface. I have a Cisco 3550 switch on the outside between the routers and the pix. I've bee...

I am setting up a Guest VLAN 25 to provide isolated access to the internet. It is not to have access to any internal networks. This VLAN is configured to give out DHCP addresses on a 192.168.25.0/24 subnet.The operational VLAN 1 is on 10.1.0.0/16. I ...

We have a PIX 515e with six interfaces. One interface is the DMZ with public addressing. One of the other interfaces is the inside which is using private addressing. The command below disables translation for the DMZ network because all servers are p...

Dear all,I am trying to configure a 'virtual' VLAN interface on the PIX.I have created the virtual interface off of our e0/2 interface (DMZ) and given it and IP address in the 192.168.100.X/24 range.I have also created a VLAN interface (VLAN 10) on t...

I am trying to configure VPN Concentrator 3000 DHCP to set Windows 2000 Pro "Connection-specific DNS Suffix" to "windows.ap.mycom.com".So far, "windows.ap.mycom.com" always goes to "DNS Suffix Search List" when I "ipconfig /all".Anyone knows what I a...

I am using PIX 515E. Internet connectivity is through satelite and is connected to the outside interface of the PIX. I wantto have a dial back up using normal Analog lines so that in case of satelite link failure pix can route the traffic through Dia...