Network Security

Is it possible to subinterface a pix firewall?

Has anyone in this forum worked with 500 series PIX firewall or even a 515E? If so, then I would apprciate your review on it (i.e. was it easy to setup? easy to maintain? how is product support? etc. etc.) Thanks in advance!

I have a pix correctly configured to make outbound connections from the external address. I have configured a nat pool to allow the internal hosts make outbound connections using NAT. But my problem is that when an internal host try to access to any ...

Hi,since I upgraded our redundant PIX 515E from 6.3(1) to 6.3(3) there is a noticeable higher amount of dropped packets (x5).The dropped connections are equal in one point: While closing the tcp client/server session, there is a RST packet involved (...

I'm running scans against multiple PIX firewalls running both 6.3(3) and 6.2(2) code using NMap, Nessus, and GFI's scanner. All scanners show the expected ports open but also always show TCP 80 open as well, which is not open in the ACL nor statical...

Hi,Which are the requirements for using the "isakmp nat-traversal" command in pix software 6.3.3?Some pointers:- Is it necessary to use EasyVPN or one can use the traditional method?- Is it necessary to use "isakmp identity hostname" or it does not m...

Can anyone provide me a "matrix" of some sort comparing the features af the restricted and unrestricted liscence options for the PIX 515e firewall? Ex.. concurrent connections, throughput, and the likes.I found a document for the Pix515 but not the 5...

Is there, anywhere, some document that compares/contrasts setting up two PIX's in failover mode versus load balancing them as discussed in this document?http://www.cisco.com/en/US/customer/products/hw/contnetw/ps789/products_configuration_example0918...

In release 6.3.3, does the pix no longer implicitly permit traffic from a higher priority interface to a lower priority interface other than the respective inside and outside interfaces? Or, is this a caveat in the code itself? For some reason, I am ...

Is there a way to configure the console on a PIX so I can connect a modem?If so how?

Silly question:If I have 5 licenses for CSA in place - should I purchase and install another 5 licenses for a cold DR environment or I could use same licenses (will it work from legal and tech side)?

Hi,I have VPN 3000 box 3.6.7. I need to enable RIP v2 on outside interface. My problem is that I cannot find where I should specify that RIP v2 will use MD5 authentication and where I should specify RIP v2 authentication key. I look through the manua...

Ok, I've got 30 LAN to LAN sites configured, up and running on a 3015. But the last one is killing me. It connects for about 20-40 seconds, disconnects and starts over. Here is an exerpt from the 3015 log, the ip's have been changed to protect the gu...

Please can you help with this, the scenario is as follows: internal ip address allocation: 192.168.1.1 - internal pix 192.168.1.2 - file server (2k domain) 192.168.1.3 - exchange server 2k - SMTP 192.168.1.3 - Outlook web access 192.168.1.7 - ftp ser...