Network Security

I am considering using my ACS (TACACS) to authenticate administration users on a new VPN 3000 concentrator. My concern is that there does not appear to be a fallback authentication method such as in the routers. Does anyone know if there is indeed a ...

I started using 802.1q and VLAN, and need 12 different levels, but, The command reference for 6.3 says only 6 are available:Enter 0 for the outside network or 100 for the inside network. Perimeter interfaces can use any number between 1 and 99. By de...

Dear Friends, Around 300 dialup clients are connecting to my PIX from various public ip assigned internet pc's,whereas they will be assigned an ip from the pool of my pix to access my LAN.Now we are moving to all the clients to cisco isdn routers wit...

Hi everybody,Could anybody help me?I'm at customer'e facilities and we want to upgrade PIX 525 sw. Current verion is 6.0(1).Are we allowed to upgrade to 6.2(3) ? And if yes, what about license key, should we request a new one ?If we are not allowed t...

We have two private line T-1s coming in from customers that directly connect to our network and we decided we needed to put a firewall up between their networks and ours even though there is no public traffic traversing any of these connections. The ...

Hi all,I have a customer who has a PIX 515E, 2 interfaces (inside and outside). He has an SMTP server on the inside network. I've permitted the necessary couduit to allow SMTP from the outside to the SMTP server. Mailguard is enabled (fixup protocol ...

Hi,we have an rpc application through the PIX. the client and server are on different segments of the firewall. rpc timeout on PIX is set to 10 minutes. sometimes we have a problem like this: client tries to send a new request to server on its establ...

We have just recently aquired a 515 and have loaded the latest code rev's for ios and PDM however on the bench the laptop we are connecting to the inside does not run up PDM it just shows page cannot be displayed. we have used the default wizard to s...

I need to give users access to an outside registered IP address. But instead opening up the firewall to that registered IP address I would like to have an internal address being mapped to the external address, so that users in stead of connecting to ...

Hello,is there a possibility to configure a policy routing at the pix firewall.I want to configure a policy routing at the pix that only traffic from a special IP address routes over a special gateway all other traffic should use the default standard...

I am in the middle of changing from a 520 to a 515. I have moved everything except the VPN tunnels. I an getting the following error, when I enter the "no sysopt route dnat" command."The sysopt route dnat option has been deprecated"Any thoughs.The 52...

Dear All,I will like to use the pix dhcp (on the inside) to deliver the same IP address to the same PC every time. eg. registering the mac address of the PC. This becaouse I only what that specifik host to be able to go over the L2L VPN, this is in a...

Is there a way of indexing individual VPN Tunnels statically, through a VPN3000 concentrator? If I MIB browse a VPN3000 concentrator, I can see the individual VPN tunnels each with ifindex numbers, so for the period this tunnel is active, I can colle...

Can i configure the PIX´s outside interface for PPPoE and normal ethernet at the same time?I need to communicate a PIX 501 with an ADSL ISP and a partner´s extranet (with a 1600 router)Thanks in advance