Network Security

Our company intend to install PIX firewall for the Internet access point. The internal dynamic routing protocol is OSPF. Also we intend to use OSPF for the connectivity with the two ISP that provide services for us (two different connections to the i...

I worked with a PIX515E-resticted bundled package (i.e. 32M RAM and 3 interface). Recently I found that there a large amount of ICMP from two to three workstations from the outside interface (the regional office) to my inside network (An access-list...

I can see smtp data enter the pix 515e correctly (debug inside)however when it gets to the smtp server in the dmz the data field of the packet has changed to 2A(hex)'s (net monitor)Will the pix change a packets payload? Why? How to fix? The syn ack...

Is it possible to subinterface a pix firewall?

Has anyone in this forum worked with 500 series PIX firewall or even a 515E? If so, then I would apprciate your review on it (i.e. was it easy to setup? easy to maintain? how is product support? etc. etc.) Thanks in advance!

I have a pix correctly configured to make outbound connections from the external address. I have configured a nat pool to allow the internal hosts make outbound connections using NAT. But my problem is that when an internal host try to access to any ...

Hi,since I upgraded our redundant PIX 515E from 6.3(1) to 6.3(3) there is a noticeable higher amount of dropped packets (x5).The dropped connections are equal in one point: While closing the tcp client/server session, there is a RST packet involved (...

I'm running scans against multiple PIX firewalls running both 6.3(3) and 6.2(2) code using NMap, Nessus, and GFI's scanner. All scanners show the expected ports open but also always show TCP 80 open as well, which is not open in the ACL nor statical...

Hi,Which are the requirements for using the "isakmp nat-traversal" command in pix software 6.3.3?Some pointers:- Is it necessary to use EasyVPN or one can use the traditional method?- Is it necessary to use "isakmp identity hostname" or it does not m...

Can anyone provide me a "matrix" of some sort comparing the features af the restricted and unrestricted liscence options for the PIX 515e firewall? Ex.. concurrent connections, throughput, and the likes.I found a document for the Pix515 but not the 5...

Is there, anywhere, some document that compares/contrasts setting up two PIX's in failover mode versus load balancing them as discussed in this document?http://www.cisco.com/en/US/customer/products/hw/contnetw/ps789/products_configuration_example0918...

In release 6.3.3, does the pix no longer implicitly permit traffic from a higher priority interface to a lower priority interface other than the respective inside and outside interfaces? Or, is this a caveat in the code itself? For some reason, I am ...

Is there a way to configure the console on a PIX so I can connect a modem?If so how?

Silly question:If I have 5 licenses for CSA in place - should I purchase and install another 5 licenses for a cold DR environment or I could use same licenses (will it work from legal and tech side)?

Hi,I have VPN 3000 box 3.6.7. I need to enable RIP v2 on outside interface. My problem is that I cannot find where I should specify that RIP v2 will use MD5 authentication and where I should specify RIP v2 authentication key. I look through the manua...