Network Security

Hi All,We have a number of Cisco 3000 Concentrators which are doing VPN beautifully. But at a couple sites we want to enable NAT for the PCs inside. I've tried everything to get NAT working out and the best i can get is to ping out. No surfing and...

need a configuration sample on pix to let IDS traffic go though pix. The director is inside a pix firewall and the sensor is outside the pix.

Hi,I'll be doing a "conduits" to "access-list" conversion for some PIXs with version 6.2. I`ve looked in the documentation and technical tips and there`s not much configuration examples and guidelines. Has anybody found a good document on the subje...

I have jsut setup a new PIX-515 (moving away from proxy). The internet rtr is a bay router.We noticed that for any existing outside IPs that we migrated to PIX, will not be accessible from the Internet. We can access it if we are locally attach to th...

I just upgraded a clients' pix from 6.0.1 to 6.2.2 sw and just for kicks, we went to a few online scan services such as grc and sygate to run a few scans against the PIX. Prior to the upgrade, any port showeed up as stealth or blocked. After the up...

I need to design a VPN network around a PIX 515E hub site and IOS routers at the remote sites. In the past, I have designed VPN networks using only IOS routers. I like to use IPSec encrypted GRE tunnels so that I can run RIP over the VPN and also s...

Can anyone give me an indication if/when the PIX 'alias' command will be supported in the PDM?Thanks--David RichardsSenior Network EngineerChristchurch City Council

We have a need to use another VPN hardware/software solution. However, in order to use this other solution we need to be able to configure the 501 to pass the NATT'ed address 192.... to the VPN hardware in front of it.

I have multiple customers that will accessing my network via VPN. I am using a 7204 which resides behind two of my BGP routers. I would like to allocate a specific amount of bandwidth per customer. Is there any way to do this with IOS based vpns?Th...

Our case goes like this:In one of inside networks an NT box had a record of an FTP session (Close Wait) from an internet host with a public address. Is there a way in which this host could bypass the pix? The NT box is for internal use only and it i...

Is there any version of the PIX that allows this???

I have installed the 2nd CD One,but it's ANI Server is down,Now I have 4th CD One,Can I upgrade from 2nd to 4th directly?when upgrade is finished,the ANI Server will be restarted?or I must remove 2nd and later install 4th?

can someone please confirm or correct me on this. i have an IP addy that has been scanning my network off/on for a few hours. i have already contacted the administrator for this IP's network(a college campus) via email and left him a voicemail, but h...

DSL into 826. Winproxy and 1720 into 826. 1. Can the 826 prevent VPN traffic while allowing web traffic to flow thru Proxy?2. Does the Proxy server setting in IE connection override default gateway IP?The problem is that VPN clients have Default GW ...

Hello,How can I get the PIX log to show a timestamp that shows the time and date.I get a strange #. Below is my show clock and show log output.thanks,rrc> PIX(config)# sh logg> Syslog logging: enabled> Facility: 20> Timestamp logging: enabled...