Network Security

I am trying to set up our 1720 to act as a vpn server for our developers so they can access the DMZ I created with a second ethernet WIC in the router. I have udp 500 and 4500 open to the router and using local authentication. The client prompts for ...

Hi,I have a Cisco 1700 VPN router connection to a concentrator VPN 3005 located in overseas via a 256k lease line. The concentrator can ping to the Cisco 1700 VPN router ethernet port (private IP) during office hours 0900 - 1800 hrs but cannot ping a...

I am trying to establish a branch office VPN connection between a PIX 501 and a Nortel 1700 using IPSEC. The 501 shows that the tunnel is up while the Contivity says it fails. The failure in the Contivity log is Invalid ID information in ISAKMP negot...

Hi,Does anyone know of any tools (free or commerical) that could generate reports against pix logs? I'm looking for something that would generate a web based report. Like what webalizer does for apache logs....Thanks,Kevin

Once an Object-Group is defined and used in an access-list can the Object-Group be modified without removing the access-list from the interface?Sample:object-group network OutsideWebServers network-object host 10.10.10.10 network-object host 10.10.10...

We have an office that is connected via 512 managed T1 that has a 501 Cisco PIX using EZVPN connecting to us via 2 T1's load balanced and managed by our ISP which our Concentrator is connected to. Our Concentrator is running at 10MB half duplex. I no...

Hi, I have a setup in which my PIX 506 is connected to an 805 Router Via the Ethernet port.I want to replace my 805 with a 1760 but the FastEthernet port on the 1760 doesn't seem to inter-operate with the PIX ethernet Link. Does this mean I have to g...

I have a Cisco PIX 515, I currently have 5 VPN groups set up, Is there a way for me to monitor the activity for the last few days for a each VPN group? I am trying to monitor one of my VPN groups inpacticular.Also each of the users of the 5 groups ha...

Current network config:Border router, Pix 515, core switch with RSM. Running multiple vlans on core. Trying to figure out how to replace existing pix with a 515e with dmz's but not alter existing network configuration.Has anyone used the new vlan abi...

Hi,I have two router with following config.1. Cisco 1700 VPN router It s running via a 256k lease line. It configured with site to site VPN to a concentrator overseas where the mail server are located. All users will access their email server through...

Hello,I have redundant PIX 515's running ver. 6.2(1). Every few occasions, the primary PIX FW mysteriously failovers to the secondary. When this occurs, all traffic flowing through the now active FW is being blocked. I tried simulating a failover usi...

Hello All,I am behind a PIX v6.2(2) and trying to make a connection to a Citrix server behind a Checkpoint firewall using Checkpoint's Securemote VPN client software to establish a secure connection. However I am unable to make this Citrix connection...

Hello,we are currently connecting our main and remote offices together with a mix of Cisco routers (3540, 2600s, 1720s) using IPSec tunnels and access-lists on the serial interfaces to only allow the serial IPs of the other routers in (the encapsulat...

VPN Client with certificate on Token connects through PIX 6.2 to the internal network.Is it possible to log the Common Name from the certificate on the PIX when the user connects successfull?