Network Security

Does anyone knows what would happen if a forged ICMP echo reply packet coming from the Internet to a inside host hit the outside interface of the Pix?.The inside host is static translated on the pix. And an ACL which permits ICMP echo-reply, time-exc...

Ladies and Gentlemen, Apparently there is no FIX for this Problem(s). However, If one of you CISCO Ladies or Gentlemen can Figure this out, Please let me know Soonest... Thank You in advance.I have a PIX 5 15 w/failover. On one of my Networks, I h...

I have a PIX 6.2 with 6 interfaces and VPN client 3.0. I have configured the firewall to permit a VPN connection using the following confaccess-list 100 permit ip x.x.x.x 255.255.255.0 y.y.y.y 255.255.255.0nat (dmz2) 0 access-list 100sysopt connectio...

I have configurated my pix 515 (ver. 6.22) to logging to my webtrend servereverything seems ok ,the logging level is debuggingbut something wrongall my hosts on inside can not use DNS to reslove DNS (port 53 )name to access the internet , my network ...

I want to protect an existing internal network. Can the inside and outside interfaces addresses be on the same subnet. I want to avoid creating more subnets. Thanks

Okay this question is kind of a double-shot. One thing you need to know before you read this is that my background is iptables on Linux.Now, question 1: Let's say I've got a 3-interface firewall, one external interface, one DMZ, and one private LAN. ...

Hi,I've a numerous ISDN users dialing to a Cisco1720 router which is connected to a Pix525 one of the ethernet port to access one of the zone secured by the Pix. I'm able to dial-in and get an IP address from the router but cannot access other zone, ...

Hi,I am getting ready to replace a managed FW solution that includes a screen router, a Checkpoint FW, and a choke router with a PIX solution. Since I will have a router to intercept the provider's circuit I am planning touse that router as a simple ...

Hi All,How can I replicate( LDAP replication for Domain controllers) MS Win2k server( which is in dmz) with another Win2k server( internal) through PIX firewall? Thanks in advance,Richard

Having the ftp fixup configured ( i didnt test with no fixup ) , transferring a large amount of files and Megs , after a time the connections get closed, and the only i keep seeing is a fin wait for tcp/20 in the server.We have tested a lot of ftp cl...

I need help Ladies and Gentlemen. I have a PIX 5 15 w/failover. On one of my Networks, I have People that have to get to a certain .mil site, but when they attempt to hit certain Links off of it, they cant get to it. When I do a Reverse DNS Lookup...

I keep trying to solve a problem which is as follows: IPSec VPN Gateway SpeedStream ADSL PIX 501 195.xxx.xxx.xxx---------- 80.xxx.xxx.xxx / 192.168.0.1 --- 192.168.0.20 /192.168.2.1- LAN Segment---192.168.2.2...

My network currently connects to the world via our dual homed ISA server. It plugs directly into the outside NIC of the server - no router. The external DNS server points to that one outside IP Address. The ISA server is also our Websense Server. ...