Network Security

Here is the situation. One PIX515E, 3 catalyst 2950-48 EI. PIXs outside interface is connected directly to internet(ISP).I post similar question at vlan, trunking etc. conversation, but i think this is firewalling issue.In a FAQ i read that PIX must ...

I have configured a hub/spoke PIX (515/506) Point to point network. I can see the tunnels come up. I can ping from each pix console the peer. I can access (telnet) external devices from an internal device (split-tunnel works). However, I am seeing 2 ...

Ok folks this one got me baffled.I have a client that that uses Citrix client to connect through the internet to a Citrix Server. ALL works well except the timeout..I have my pix set to timeout ideal tcp connections after 60mins.. On the server side ...

PixOS 6.3 starts supporting 802.1q, is this correct? If not, which version starts supporting it? And even 6.3 supports 802.1q, Pix 506e doesn't support it. Is that the case? Thanks.

We notice that our PIX logs (handled by a Linux-basedsyslog) do not contain all of the accessed URL's recorded by our Apache HTTP server. Are there any known problems in this area?Bill

I have installed a 501 pix at a remote office and am using the vpn client 4.01 I can connect just fine from my dial up connection at home and can access what ever files and computers I need to However from my other office where I am in a private netw...

I have a customer who has a Chcekpoint Firewall and they are looking to migtrate it to PIX 506. However, I just found out that they have 2 Internet connections coming in from the 2 different providers, also they have 2 different blocks of addresses o...

I have configured cable Failover using as well as statefull failover using a crossover cable. The failover works fine but the state does not. When I transfering a big FTP file and pull an ethernet cable from the active unit it failsover to the standb...

Pix 515E running 6.3(3) code. xlate timeout is set to default = 3 hours. there hasn't been any activity for days. current "show conn" shows no connections. however, the xlate table is full of old entries. should the xlate entries be flushed after 3 h...

I'm trying to link LinkSys VPN to CISCO PIX 501 VPN via DSL. My CISCO PIX 501 is having Static IP on WAN side. But my LinkSys side is having Dynamic IP. I have tested and it works with Fix IP at LinkSys Side. But what I want to find out is how to con...

Hi all,Is there a solution to allocate one pool per group of user by using the DHCP relay of the VPN concentrator ?For example :1 group for French users : pool 10.1.1.0/241 group for Spanish users : pool 11.1.1.0/24...Thanks.Regards.David RoyFrance T...

pdm loging informational 100nat (inside) 1 0.0.0.0 0.0.0.0 dns 0 0

Is it possible to dynamically re-route via a backup peer2peer VPN to a different site (device) than the original peer in the event that the primary peer2peer VPN goes down?Or does this mean changing the access-list / crypto map to a different peer ma...

Hi all,I'm trying to set up 2 separate networks, one for the office and one for the lab. The office LAN connects to the internet via a T1 and for the Lab LAN, I trying to set it up so it uses the DSL line to connect to the internet. I have a PIX 520 ...