Network Security

The following is part of my configuration:access-list 101 permit tcp any host xxx.xx.xxx.36 eq 5900 global (outside) 1 xxx.xx.xxx.37-xxx.xx.xxx.38static (inside,outside) tcp xxx.xx.xxx.36 5900 192.168.100.253 5900 netmask 255.255.255.255 0 0access-gr...

Hi,I have suddenly started to get the following error message when trying to run PDM from my PC to our PIX 515e Firewall.'Your PIX image has a version number of unknown. This version of PDM will only interoperate with versions that start with 6.0 or ...

Hello all,I am having a problem with the dmz on the PIX. All connections to the DMZ from the outside work correctly.However when I try to access our webserver on the DMZ from the inside.. Everything slows to a crawl. It can take up to 3-5 minutes to ...

I've downloaded the CiscoWorks Security Suite 90-day Eval, but it does not come with an eval license for the CSA suite. The documentation said I had to request one, how is this done? Online? Through a Cisco rep?

After installing a PIX 501 Firewall at a client, they are complaining that when they send e-mail from Outlook Express 6 that a message displays for 30 - 60 seconds stating that is Connecting to the Server. The e-mail does send correctly after this de...

Hi,Is it possible to set the MTU for a PIX Ethernet interface to a value greater than 1500 ?I know that it will allow me to do it in the PIX software but the documentation says that the Max. Value is 1500 for Ethernet Interfaces ?Which one is True ? ...

hello,i have a pix 520, and when he start, he do some checkings , fire a error, and restart. If i boot from a floppy, he say that flash is obsolete, can i do something???here are the outputs:Finesse Bios V3.3Booting Floppy...............................

Hi,When i attempt to upgrade the PIX Software, on my "PIX Classic Firewall"i get the below error. Do i need to change any Dip switch settings on the Flash card (ISA)?I get the below error when i boot of the boothelper disk.I have a 2MB Flash card. I ...

I'm trying to figure out what is the best way to do span port on my core switch:This is my scenario: | | F/W (Active) ---------- F/W (Standby) | | Coreswitch1 ---------- Coreswitch2If I configure span source port and span destination port on my cores...

Hi,my costumer´s Internet Firewall between inside, outside and DMZ networks is a Linux running Iptables. Well, his Proxy Server is installed in DMZ network and his inside workstations access webpages passing through this proxy. This access is carried...

Our PIX has extremely high CPU usage, mostly 99%, with lots of interface overruns. Is there a way to track what is causing such high CPU usage. We have a VPN tunnel running between the sites as well. For that very reason, it keeps locking up every no...

Hi I have got a PIX 520 that I cannot seem to get working.The following message is displayed. Any ideas what the cause could be.Cisco Secure PIX Firewall Version 5.3(2)open(ffsdev/2/read) failedAn internal error occurred. Specifically, a programming ...

I know VPN 3k boxes talk directly to RSA server without the need for a proxy device but I am not sure about PIX running v6.3.Thank you

What's the difference between Attack and Info policies with the PIX IDS feature? It looks like the same global signatures are used for each one, so why have two policies if they both do the same thing?It would be nice to enable or disable different s...