Network Security

I have a PIX515, with three interfaces: outside, DMZ, and inside. Their is a current configuration in place with the exception of the DMZ, will install shortly. A new webserver will sit on the DMZ with nat to the server. Do I setup the DMZ interfa...

We have a Cisco Pix Firewall ( 2.7 we think ) that is limited to 256 connections from the inside to the outside. We have occasionally seen it run out of connections. For a moment or two you just can't get out to your favorite web site. In the last fe...

I am curious to find out how other users are managing their PIXs for your PIX to PIX VPN tunnels to remote sites. What are you using to access the remote PIX if the VPN tunnel is down? We're trying to find a secure solution. Any suggestions would be ...

We are using the IDS capabilities built into the pix. I know this is a limited set of signatures but my question is: Is there a way to enable only the 4000xx syslog messages on the PIX so the syslog server only receives those messages without gettin...

I currently have a stateful failover PIX-525 solution deployed using 5.2(5) code. I would like to upgrade to 6.2, has anyone tried this yet...is it a straight forward upgrade or is it more involved.

Has anyone had success installing one Exchange Server on a Pix DMZ? Cisco has examples of installing two exchange boxes through a Pix, one inside, one outside but is it possible to install one exchange box on the inside? This would save on cost of d...

Our Database group is asking me if our PIX supports SQL*Net Proxy? I dont know what is it. Document says Checkpoint Firewall-I, Eagle, Raptor, support it.Thanks.

Hi , I am seeking PIX 501 specific info on Port forwarding with the 501 where the outside address is configured via DHCP. I can't work out from available Cisco documentation how to allow outside access inside to specific ports. It all discusses stati...

HiWhat i need to run a Pix Failover 525 series into a Pix, i need another activation key?, can i do it with software?thanxDas caibil

by sniffing network traffic i realized that my PIX firewall 515-(software version 6.0(1) ) sends TCP Reset packets to the connection requests that are denied by the access-lists. Does anyone know how to change this feature? I want the firewall to dr...

Just incase people dont bother looking at the PIX site, 6.2 is out :) yay!!!But it doesn't fix the RPC bug *sigh*--Dave

I've seen several references to the use of MS IAS as a RADIUS server for PIX VPN authentication. I think this would be a good solution for us, but I'm wondering if anyone has followed Cisco's instructions and could relate their experience with instal...

Hi,my network has a default gateway, the inside interface of a pixfirewall.There is a workaround to permit the pix to route traffic, incoming in its inside interface, vs a destination outbound the same interface???e.g: the pakets come into inside...

I have a 501 and am trying to connect it to the net via a DSL Line.IP address information is entered staticly, and the route command for the outside interface is "route outside 0.0.0.0 0.0.0.0 Outside 1" As far as I can tell everythingis entered in c...

Maybe anyone can give me a hint where my mistake is here.I configured the following:"ip audit name test info action alarm"When I try now to configure the same audit name for attack signatures the pix blocks this command."ip audit name test attack ac...