Network Security

We have some developers that have an application that they say needs to have the TCP timeout set to 4 hours (talking to some mainframe somewhere)and I need some ammunition/arguments that will show them how this is not a secure thing to do.

I have a client that receives a Dr. Watson when they try to connect to a VPN concentrator with the VPN client (3.6 or 4.0 versions) installed on a Windows 2000 Server with Terminal Services installed. They have assured me they do not have any other V...

Is anyone know how to use PIX for NAT load distribution, there is no same command as for the router.!tcp load distribution(config)#ip nat pool name start-ip end-ip {netmask netmask | prefix-length prefix-length} type rotary (config)#access-list list_...

I've had no joy trying to find the OID for the 'Authenticated Users' (show uauth) object, can anyone else throw any light on this?Thanks

I have a client using Cisco VPN Client to establish a VPN to a 3005 Concentrator. (Ver. 4.0.1) I am also using the 3005 to establish VPNs to remote PIX firewalls. The VPN Clients are using an address pool that is not on any other network.Question: Ca...

hi, i have a permission only list going, when i have the list enabled i can not do autodates for windows nor for mcafee virus program.. i have ports 21,110 enabled.. i also have mcafee's ip address allowed and windws update server allowed. I have con...

I'm having a VPN connection back to the PIX but PCanywhere connection is not able to established.Any advise on which ports to open.

I got 3 Linux email servers, and only these 3 devices, behind a PIX 506E and the outside interface is connected directly to the Internet. Sending email to and receiving email from Internet is working fine. But if the email servers send email to each ...

Hi,here's my setup:Internet|T1|Cisco 1721a.b.c.2||a.b.c.1Cisco PIX 501192.168.0.1/24||||192.168.0.200/24Netopia|ISDN|Netopia192.168.2.200/24For some reason, I can't reach the 192.168.2.0 subnet from a client PC. I have added a static route to the PIX...

Hi I have a pix 520 firewall(6.1(4) ver), pdm and http are enabled, i just can't access the pix through HTTP( http://ipaddress) neither the pdm (https://ipaddress),having the the knowledge that i have a pix 515 working fine with pdm and http), is the...

Pix 520 with failover with 6 physical interfaces.Only in a pix interface I plan to configure 2 or 3 vlan: do you think I' ll face some problem, in particular related to the failover presence ?Thank youRenato

I need to provide a breakdown of the Outside link usage, the internet 'pipe' is shared by our Education and Corporate users. The management want a breakdown of how much of the link either group has used.All the information needed is in the PIX syslog...

Hi,Is there anything wrong with this setup. I have two legal ip addresses. One for the router and one for the external int of the pix. I need to have a nat 1 command for the entire internal network (this is not used yet but is setup). I need a static...