Network Security

I have applied the following access-list on my pix 515 (OS- 6.1(4) ) inside interface.access-list acl_in deny udp any any eq tftp access-list acl_in deny tcp any any eq 135 access-list acl_in deny udp any any eq 135 access-list acl_in permit ip any a...

I am just started to configure the PIX Firewall.But I am in confusion.Here is the conf file.PIX Version 6.2(2)nameif ethernet0 backbone_251 security0nameif ethernet1 inside security100nameif ethernet2 intf2 security10nameif ethernet3 intf3 security15...

we usually create a dmz by using a pix. however, one of my customers uses a switch to create a dmz rather than a pix. customer does that by creating 3 vlans.i was wondering what is the difference between the two.

I have PIX 520 with ver 6.1(4). The issue is when i am sending mails with attachment from the mail client behind PIX, the mail is not reaching the recipeint but the same is reaching without attachment. If I bypass the PIX, mail with attachments are d...

HiWe got a couple PIX all running 6.3(1). For some strange reason on one of them I can not create a static translation for a server (http). As soon as I enter the static-command the server is unable to get onto the internet and is also invisible to t...

I recently started a position where the previous network admin shredded a great deal of network information. I have been told that the previous admin had the network locked down too tight. To make a long an interesting story short I have a Cisco 506 ...

Hi, I have just updated to VMS 2.2 and IDSMC 1.2 on Windows 2k SP3 and want to install all three latest patches available. When I go to install the patches I get the follwing warning message:This Point Patch is not intended for this version of idsmdc...

Hello all,I am trying to sniff a session between a server on an "inside" segement and a server on a "DMZ" segment. The server on the inside is being NAT translated to the same address on the DMZ like so:static (inside,DMZ) 10.1.1.1 10.1.1.1 netmask 2...

I'm new with the PIX and don't know how to block ports. I'm using the CLI and need to block certain ports to avoid the mess with the blaster worm.Can anyone tell me what to type in after I do the config t that will block these ports?Thanks.

I do wonder if this is the right behaviour of the router. If I reload my Cisco 3620 IOS VPN Server, both CA and router's itself certificates are gone. Need to do the procedure (crypto ca authenticate ..., crypto ca enroll ...) to get the certificates...

Am I right to assume that the handful of ports 69, 135, 139, 445 and 4444 are blocked by nature on the PIX? I have not expressly opened any of them as far as I can tell? I have looked around on the net and not found anyone talking about the PIX in co...

Hi,Just a quick question. I'm running a pix 506 with software version 6.3. I was asked to look into configuring the IDS part of the firewall. Is there any white papers explaning how to configure it properly? I have experience with cisco's firewalls b...

Hi,What would be thebest way to configure a pix 501 to work with a cable modem the ISP provides a heartbeat and authentication service that periodically checks in from PC this is similar to the roadrunner service that run on some cable NW in the stat...