Network Security

Hello,I'm trying to setup a PIX 515E in the lab for learning .I've configured ether0 with IP address 212.100.211.1/24 and ether1 with 192.168.10.1 /24 . Ether0 Interface of Pix is connected with a PC having IP address of 212.100.211.2 /24 using cross...

I have several IOS routers that are successfully establishing IPSec tunnels to my PIX. However there is one particular router that will not connect. It is no different than all the rest, same IOS, same crypto config but it just doesn't work. I hav...

Does anyone see anything wrong with this config. ? I just recently had to switch ISP and got only one IP from my new one. Since then, internet access has been sporadic at best and I cant seem to figure it out. Simple config for the most part other th...

I have a PIX 535 that already has 3 gig/fiber interfaces + 2-10/100 NICS in it, and 5 open slots. Question is, is there a limit to how many more Gig/fiber interfaces I can put in it?I'm surfing CCO for the specs and if there are limits to how many in...

I have a faily basic config here, and I can't get it to work :( I have a couple Citrix servers, web, and a mail server behind my pix. They all have static ip's, so, I want to nat them at the firewall to re-direct to my internal servers. Here is my ...

hello,I need help to solve this situation,I'have got a lan with two routers connected to internet.I'm trying to protect this lan using only a 506e pix.my lan is connected to the inside interface, while my routers are connected to the outside interfac...

I am considering using my ACS (TACACS) to authenticate administration users on a new VPN 3000 concentrator. My concern is that there does not appear to be a fallback authentication method such as in the routers. Does anyone know if there is indeed a ...

I started using 802.1q and VLAN, and need 12 different levels, but, The command reference for 6.3 says only 6 are available:Enter 0 for the outside network or 100 for the inside network. Perimeter interfaces can use any number between 1 and 99. By de...

Dear Friends, Around 300 dialup clients are connecting to my PIX from various public ip assigned internet pc's,whereas they will be assigned an ip from the pool of my pix to access my LAN.Now we are moving to all the clients to cisco isdn routers wit...

Hi everybody,Could anybody help me?I'm at customer'e facilities and we want to upgrade PIX 525 sw. Current verion is 6.0(1).Are we allowed to upgrade to 6.2(3) ? And if yes, what about license key, should we request a new one ?If we are not allowed t...

We have two private line T-1s coming in from customers that directly connect to our network and we decided we needed to put a firewall up between their networks and ours even though there is no public traffic traversing any of these connections. The...

Hi all,I have a customer who has a PIX 515E, 2 interfaces (inside and outside). He has an SMTP server on the inside network. I've permitted the necessary couduit to allow SMTP from the outside to the SMTP server. Mailguard is enabled (fixup proto...

Hi,we have an rpc application through the PIX. the client and server are on different segments of the firewall. rpc timeout on PIX is set to 10 minutes. sometimes we have a problem like this: client tries to send a new request to server on its establ...

We have just recently aquired a 515 and have loaded the latest code rev's for ios and PDM however on the bench the laptop we are connecting to the inside does not run up PDM it just shows page cannot be displayed. we have used the default wizard to s...