Network Security

Our PIX 520 running 5.1(2) -- it is scheduled for upgrade in two weeks -- has "suddenly" begun dropping all packets to two remote networks. There are no ACL entries preventing access to these two networks and there are no indications in the syslog (s...

hi i'm looking for the commands to change the mac address on the ethernet 0 interface on a customers pix firewall.Thanks for helpsh versCisco PIX Firewall Version 6.1(1)Hardware: PIX-506, 32 MB RAM, CPU Pentium 200 MHzFlash i28F640J5 @ 0x300, 8MBBIOS...

Hello,I have a running PIX501 with VPN service, accesslists and nats. I want to change the external IP address on the box. which is the efficient way to do this without disruption the currrent configuration. thank you,travis,

Hi,I am using PAT with PIX firewall. I have observed that PIX translates the source port number (for the packet from inside host) to a port number less than 1023 (well known port numbers), while sending it to outside world.1. Is there a way to config...

I've two PIX 515E firewalls and when I issue the command "show fail" I notice that the outside interface stays in "waiting" mode and the secondary PIX is "Failed." I am using a switched network so I disable spanning-tree on my switches, but it doesn'...

This is beating me up. If anyone has a suggestion, please help.I need web services to NAT to two different web servers behind the inside interface. Below are portions of my config. The NAT 0 is there becasue this is a PPTP and IPSec endpoint as well....

Are there any documents out there that explain how to use isa proxy and cisco pix? Thanks for any info!!Jenn

Hi AllI am trying to understand what are the parameter/output From the debug SNMP timers Output SNMP timers : *Dec 31 11:56:27: SNMP: HC Timer 632DDE28 fired*Dec 31 11:56:27: SNMP: HC Timer 632DDE28 rearmed, delay = 5000 *Dec 31 11:56:32: SNMP: HC Ti...

I am using PIX 525 running 6.2 to protect inside and dmz networks. I am using static NAT. The PIX is denying outbound connections from dmz as well as inside interfaces though implicit permit is already there. the log messages are:"201008: The PIX is ...

How to configure the PIX to restrict - to only accecpt - packets from the ethernet of the router connected to internet on the outside interface.

The question concerns a connection problem, the setup in short : we have a good signal (leased T1) comming through into a PIX box, which is not allowing the signal to go any further, it is also preventing certain packets from leaving the network. For...

I have my PIX configured to use Microsoft IAS as a RADIUS (10.1.0.12) :aaa-server partnerauth protocol radiusaaa-server partnerauth (inside) host 10.1.0.12 xxxxxx timeout 5crypto map mymap client authentication partnerauthI need to configure a second...

Hi All.We are facing some problem with floating IP address which is actually a package IP in HP cluster environment. HP servers-------PIX-------NAS-------PC client 1) PIX arp table has 2 entry for main HP server lan0 and virtual IP, but there mac tab...

The following error is reported when attempting to install QPM 3.0Interactive SQL usageUsage DBISQL [FLAGS] [SQL coomand]Flags -C -D -Q -Xinstallation continues and advises successful but when attempting to start QPM from ciscoworks.....................

"If the actual debt is greater than the extended limit, all packets willbe dropped until the actual debt is reduced through accumulation oftokens in the token bucket."(from "Policing and Shaping Overview")Does it mean, that the next tokens (number eq...