Network Security

Hello all,i have two pix 535 configured for failover. whenever i try to connect console to the standby pix, i get the message "aaa server host machine not responding". I don't have this problem when connecting to the active pix. any ideas?thanks all

Does the PIX support simple digital signatures? I would like to find a away for an IAS server and a PIX to exchange signed packets. In particular I am trying to increase the security of the initial PAP shared key exchange during user authentication.A...

Hi,I have a static command on the PIX 515static (dmz,outside) 200.200.200.10 192.168.10.10 netmask 255.255.255.255 0 0when I check using sh xlate it is not translating to the local IP. Following is the output of sh xlate globalGlobal 200.200.200.10 l...

Anyone any idea how to get this functional:From a Lan one need to make a rdp connection to a w2k server.From the outside i can ping a.b.c.dWhen i put the following into the PIX it won't work:access-list outside_access_in permit tcp host a.b.c.d eq 33...

I am reviewing a PIX configuration where two interfaces do not have IP addresses assigned to them ("no ip address"), but the interfaces have not been disabled using the "shutdown" keyword. Are there exposures in this instance due to the fact that the...

Can anyone tell me what the files 0-4 actually are. And I take it the length is in bytes.Many thx all and sorry if I have duplicated someone elses post.KenP01# sh flashflash file system: version:2 magic:0x12345679 file 0: origin: 0 length:1540152 fil...

Hi,I just installed a PIX 501 using the PDM software. I have two networks and want to use the 501 as a firewall between them,allowing one way traffic.I set the inside to 192.168.../24 and the outside to 195.1.../24I can ping the 192 network from the ...

Will the 515e support subnetting a class C public address range between the inside interface and a dmz interface? Thanks!

Just confirming that if I allow a TCP conversation to originate on the Internal Interface, that the reply traffic will be allowed back thru the PIX, to the original sender? What CLI command enables this, or how can I tell this is true?Now, with UDP, ...

I have a pair of PIX 525 set for failover. Since upgrading to 6.3(3), we have been having periodic failures in that the active device loses its running config, it transfers the default config to the standby. The proper config remains in flash and a r...

Hi,I just dropped in a pix 501 for remote access to an office and was wondering if the pix has an equivalent to the 'tunnel default gateway' in the vpn concentrators... I'm not going to do split tunneling, but would like users to be able to access th...

We have a small network of 25 users (running Win XP Pro and MAC OS 10) all connected to the Internet throught a PIX 515e firewall.We don't own any router or switches. The ISP leased line - well the ISP owns the router so I can't touch it. Also, we do...

If you are using (PIX Device Manager) PDM to configure a PIX, can you also telnet into the PIX and configure it via the CLI? I have read that if you are using PDM, the only other way to configure the PIX is via the Console or Cisco Secure Policy Mana...