Network Security

Has anyone tried to setup the same IP address range on both the inside and outside interfaces of the PIX? I.E. 192.168.33.0 255.255.255.0 mask (inside) 192.168.19.0 255.255.255.0 mask (DMZ1). Tried IP NAT at the FW and it does not solve the problem. ...

I want to be able to translate connections from external hosts to a range of internal addresses. For instance, I want PCAnywhere users who connect to a public address through the Internet to see all the PCAnywhere hosts on my internal network.In thi...

Hello!!Recently , I upgrade my pix 515-ur from 6.1 to 6.33I feel something wrongthis is my static command , it works fine on ver 6.1 static(inside,outside) tcp 123.123.123.123 domain 192.168.254.49 domain dns netmask 255.255.255.255static(inside,out...

Hello,Is there any way to, after adding access-lists and assigning them to an interface....then capture what traffic (IP address) is hitting the interface and setting off the access-list. For example setting up an access-list to deny traffic to port ...

I have two servers, one in my DMZ and one on the internal network. All IP traffic is allowed between the DMZ and the internal network. These two servers talk just fine for most of the time, but when they need to set up a particular connection, the ...

Hi,I am having an issue with PIX 6.3(3) creating a static inbound tunnel to web servers running NLBS/WLBS in both unicast and multicast mode. Has anyone been able to get this working?Thanks

I have the vpn set up between a pix and netscreen and everything works. I have no control over the netscreen or its network. It has one host and clients on the inside of the pix have to telnet to the host. I want to make sure that I protect my networ...

Hi all,I`d like to know if it is possible to enable Client Firewall Enforcement on a per user basis via ACS Server. What will happen if I apply the "CVPN3000-Required-Client-Firewall-Vendor-Code" and "CVPN3000-Required-Client-Firewall-Product-Code" A...

Client has 3640 at their mail co-lo. They have a pix515 at the office. I now know that you can't terminate their clients to the pix and let them hop into the L2L to get down to their mail. I am hearing that I can do the reverse. Terminate the cli...

i have a 515E pix firewall and installed with 1 ISP and exchange in a dmz ZONE . Now the senerio has changed that i have the internet access to 2 ISP . what will be the configuration now , i heared about multihome box . how i will use in fornt of fir...

Hi,Can someone explain why I need security levels on a PIX - they seem VERY limiting. Or prehaps I don't understand the logic.Example. Interface E 0 - Internet Interface E 1 - DMZ 1 Interface E 2 - DMZ 2 Interface E 3 - DMZ 3 Interface E 4 - Com...

Have a simple PIX network setup, basically just allowing Internet Access and some limited VPN stuff. There is only one computer on the inside that cannot see outside, and that is the domain PDC which is also running DNS and WINS. I think my problems ...