Network Security

How can I combine the TCP & UDP service into one object-group ?object-group service DGCORP_UDP1 udp port-object eq 1000 port-object eq 8000object-group service DGCORP_TCP1 tcp port-object eq 3365 port-object eq 4445Regards.

I have been looking for a definite answer to whether there is a bug that will not allow my PIX 501 with 6.3(1) to use dynamic and static PAT at the same time. The problem I have is this: I'm setting up a PIX on a PPPoE dsl connection with a web serve...

Hi there, I've got a bit of a problem, hoping someone can help with troubleshooting.We have a site with 50 or 60 workstations, all connected via a PIX 515e to a DSL line, and thus to the web. Intermittently, and seemingly randomly, workstations lose ...

Our VPN routers all have more than one Pre-shared key, one for each VPN partner router. I read that VMS 2.2 only supports one preshared key on import. How then to I setup the routers to have more than one VPN partner? Do I have to use the same presha...

Hello,I am looking for information on prioritizing our IPSEC vpn traffic over all other traffic on our Internet connection. We have 10-15 IPSEC/GRE site-to-site VPNs connecting back to our central office. We have a non-Cisco firewall connected betwee...

Dear All,How do I configure a secondary IP on pix interface . I have PIX 520 with OS 6.2(3) .Another question : I have unristricted license , what is the maximum number of fast ethernet interfaces limitation, and does it include the gigabit interface...

Can anyone advise on the how to backup and restore back the config using tftp server?

Our company has two PIX 535 (vers. 6.3) for access the InternetWe allready installed VMS 2.2 (unrestricted license) for managing PIX firewallsWhen we tried to import PIX configurations to management server (with VMS 2.2) we have an error regarding th...

Can anyone tell me why I can not access my mail server?Ok here is my setup:I have 5 useable static addresses, 217 is the pix, 218 is my mail server. I have complete internet access from any of the workstations that I am using DHCP (from the PIX) and ...

I Have 2 sip-phones are both on the outside and the server is on the inside of the pix. (version 6.2)i used the command fixup protocol sip 5060 also access-list sip permit udp any any eq 5060 access-list sip permit tcp any any eq 5060 access-group si...

Ok PIX Firewall Experts, I really NEED YOUR HELP. I have posted the following two times now, and still no one has been able to resolve the issue. I hope you can.Gentlemen, I have a situation whereas I cannot do DNS REVERSE LOOKUP thru my Pix 515E. Th...

1. supposed that my headend router with IP addess of 207.172.3.1, my pix IP 207.172.3.2do I have to put static route on my head end router to route all other traffic to 207.172.3.4 -207.172.3.254 to 207.172.3.2 (which is my pix outside IP, checkpoint...

I am trying to configure a PIX 506E for home office use on ADSL. The provider requires PPPoE and dynamic addressing. I am able to do everything I need except create a translation to allow smtp inbound (I have a mail server inside). I just cannot figu...

PIXinside 192.168.184.3RouterA RouterB192.168.184.1 192.168.184.2When RouterA sends a ICMP redirect 192.168.184.2 to the PIX will the PIX comply and use 192.168.184.2? I have a couple networks behind 192.168.184.2 router that aren't getting through t...