Network Security

Hi,We have a couple of pixes in active/standby configuration. For some reason we are working on our secondary pix, since our primary doesn't stop restarting. The primary pix restarts, comes up, starts failover negotiation with the active one, receive...

I have a windows 2k domain situated on a DMZ. On the inside dms I have windows 2k workstation. I want to add this workstation to the domain. No actual address translation is being used. I have opened up from the inside interface with an access list U...

with the factory default setting I can log into pdm but I need to change the inside ip address. The address i changed the firewall to is 192.168.0.14 for inside and I do that in pdm. When I reboot my system make my computer 192.168.0.8 and a gateway ...

Hi, does anyone know of a resource to test a PIX 525 config? I want to make sure its utilizing cisco's best practices in configuration

We have VMS 2.2 installed and using "Management Center for Cisco Security Agent" portion of it. We have purchased 2 CSA licenses and have already uploaded them to the MC for CSA. I'm still receiving "Warning : Management Center for Cisco Security Age...

I wonder whether there is any possibility for NBAR to match more than 16 ports for each type of protocol (for example fasttrack)? The problem is that for example imesh is using ports between 1024 and 7000 !!! I successfully managed to block p2p appli...

Hi, I have a PIX 525 running vers 6.3(1) andwould like to disable timeouts for certaintcp connections passing through the PIX. Oneof which is ssh. Looks to me like the onlyway to do this is to set "timeout conn 0:0:0"which disables timeouts for all t...

Is there any recommendations for a simple tftp software so I can upgrade my pix pdm to 3.01.any links or suggestions would be appreciated

If I take a 7960 and put it outside of a PIX and modify the cnf.xml file to point to the NAT'd IP of CM and open port 2000, should I be able to pass calls through the PIX? I can get it to register with the CM, but when I make calls, there is no voice...

I am configuring a PIX 515e. Want to deny all outgoing traffic but the ports I allow. I was trying to configure a service group to use inside of PDM for web traffic. I add http and https but the rule does not work.I can deny all traffic but to try an...

I have a PIX FWSM in a 6509 connected to two seperate upstream border routers. If I apply two static routes pointing to the two routers, will they load balance?

Hi,Has anyone else experienced an abundance of problems in LMS 2.2? I've done two installations so far for different customers, and have got nothing but problems and bugs. This is very disappointing, considering that LMS 2.1 seems more stable.Am I al...

The problem I encounter is when I use the PAT through outside interface, my database segment unable to resolve name and surf internet. When I change it using another public ip for PAT, then it works fine. I did check through bug tools kit, but nothin...

When failover occurs:Does VRRP replace the IP address on the backup device? Or is it an additional IP address?

Can VRRP fail back to the original master automatically? I am referring to the preempt option of HSRP. Is there any equivalent function in VRRP?