Network Security

Once an Object-Group is defined and used in an access-list can the Object-Group be modified without removing the access-list from the interface?Sample:object-group network OutsideWebServers network-object host 10.10.10.10 network-object host 10.10....

We have an office that is connected via 512 managed T1 that has a 501 Cisco PIX using EZVPN connecting to us via 2 T1's load balanced and managed by our ISP which our Concentrator is connected to. Our Concentrator is running at 10MB half duplex. I no...

Hi, I have a setup in which my PIX 506 is connected to an 805 Router Via the Ethernet port.I want to replace my 805 with a 1760 but the FastEthernet port on the 1760 doesn't seem to inter-operate with the PIX ethernet Link. Does this mean...

I have a Cisco PIX 515, I currently have 5 VPN groups set up, Is there a way for me to monitor the activity for the last few days for a each VPN group? I am trying to monitor one of my VPN groups inpacticular.Also each of the users of the 5 groups ha...

Current network config:Border router, Pix 515, core switch with RSM. Running multiple vlans on core. Trying to figure out how to replace existing pix with a 515e with dmz's but not alter existing network configuration.Has anyone used the new vlan a...

Hi,I have two router with following config.1. Cisco 1700 VPN router It s running via a 256k lease line. It configured with site to site VPN to a concentrator overseas where the mail server are located. All users will access their email server thro...

Hello,I have redundant PIX 515's running ver. 6.2(1). Every few occasions, the primary PIX FW mysteriously failovers to the secondary. When this occurs, all traffic flowing through the now active FW is being blocked. I tried simulating a failover ...

Hello All,I am behind a PIX v6.2(2) and trying to make a connection to a Citrix server behind a Checkpoint firewall using Checkpoint's Securemote VPN client software to establish a secure connection. However I am unable to make this Citrix connection...

Hello,we are currently connecting our main and remote offices together with a mix of Cisco routers (3540, 2600s, 1720s) using IPSec tunnels and access-lists on the serial interfaces to only allow the serial IPs of the other routers in (the encapsulat...

VPN Client with certificate on Token connects through PIX 6.2 to the internal network.Is it possible to log the Common Name from the certificate on the PIX when the user connects successfull?

hi:when you purchase an upgrade to make a pix go from restricted to unrestricted and a license to enable 3des:what do you get exactly? do you get a piece of paper telling you the serial numbers you're supposed to enter when you go throught the upgrad...

I have my LAN and DMZ seperated by PIX515. All the computers on the LAN under the windows domain A, and all the servers in DMZ under the workgroup called B. I wanted to see B and its servers on any of computers on the LAN in Network Neighbourhood, bu...

I have PIX 501, flash ver. 6.1(3). How can I update the PIX & where I can download new version?

I had a strange outage where my PIX 515E 6.22 constantly rebooted. I was able to console into the firewall and noticed an Unable to Allocate Memory error. Thinking it was being overloaded logging errors I turned off logging. The firewall stablized, b...