Network Security

PIX software upgrade from 6.2(1) to 6.3(2) resulted in over 40-fold increase in syslog 106023 messages triggered by connection attempts from external hosts on 80/tcp to ports > 1023 on external PAT IP address. From packet capture, messages appear to ...

Hello,i have a question regaridng bandwith assingment on a vpn 3030 concentrator. I want to assing bandwith management for the configured groups. There are five groups configured and i want to assing a maximum bandwith for the usres in these groups. ...

Is it true that a PIX device will not allow you to SSH to the device on an interface if the traffic goes through another interface on the PIX first? If so, is there a way to get around this? We don't route the main PIX interface over our network but ...

I have a customer testing Polycom video conferencing over the Internet through their PIX 506. They have a single public IP address so all outbound traffic is PAT. When they initiate the connection the recipient sees their video feed but they see none...

Hi.I just purchased a Cisco 506e with version 6.3(3) and PDM 3.0(1). I've set up the inside interface as 192.168.1.1 and allowed access to the http server via 192.168.1.0/24. I enter https://192.168.1.1 and https://192.168.1.1/startup.html and try to...

What is the command to map a range of ports to a certain inside address? i.e. ports 2000-2010what would be the access list command for those same ports?I know these commands for port 21static (inside,outside) tcp <outside IP> 21 <inside IP> 21 netmas...

HiNeed to know whats the best way to allow Private address space .PIX ---Router -----Internetwill default route outside work.Or is there best way to do it.

Hi all-I'd like to know if there are any gotchas with running Apache webservers on a separate zone from the Oracle DB. These webservers act as clients to the DB on port 1521. Each webserver runs multiple httpd processes to support many users. Will...

Hello all...I ran into an issue today that I found kind of interesting and thought I would share and get a discussion on. I had not seen it happen before, but then again syslog has not been monitored as much as needed in the past. We have an ACL de...

Has anyone who has used this tool encountered any difficulties or anomalies they would be willing to share with this forum? I plugged in an old config and the Output Interpreter quickly gaves me a load of comments and suggestions, as well as the conv...

What ports need to be opened up on a firewall to allow outside access to a Windows 2000 Server running Terminal Services?

I have upgraded a pix from 6.3.1 to 6.3.3 and now the PIX keeps on rebooting. Downgrading doesn't have any good result! I can find any answer on the site. This is the error message:An internal error occurred. Specifically, a programming assertion wa...

I have a site to site VPN currently in place. I am using a 2600 on my side. I now need to get remote access for home users implemented. I am getting error: 412: Secure VPN terminated by locally by client. Remote peer no longer responding. Below...