Network Security

Hi,we want to monitor periodically the memory utilization of our PIX firewalls. I did not find any recommendation what amount of free memory in percentage should be the threshold to look for. In the TAC documentation it is mentioned that the free mem...

We currently have a /30 external subnet to the internet (2 IP address in reality, 1 on outside of PIX, 1 on perimeter router). We want to allow 4 inside machines outbound using a variety of protocols and SMTP traffic inbound to the mail server. One o...

A mutlicast server and a PIM router located at PIX outside interface. The client is protected by the PIX at inside interface. Client cannot connect receive the stream from the server. However, if the client locate at the outside interface, it can rec...

Hello, i m trying to initiate a Telnet session from a Pix Firewall console running 6.3.1 software to a remote device but the firewall IOS did not recognize the command Telnet even if type only the ip address of the remote device without the com...

As the title suggests, I am trying to create two VPN tunnels over a single ISDN circuit. But, I am wondering how to apply two crypto maps to that single interface, and how the interface will know which one to use. If anyone has any experience or ad...

I have a curious, theoretical question re PIX VPN implementation, specifically regarding crypto acl entries. I'm using the following qoute as the foundation of my question:http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_configuration_g...

We have been running into the problem with vendors that we initiate FTP sessions to. We do not allow inbound access and passive connections will not work with their FTP server. They use Microsoft FTP servers and they have port security setup on th...

Hi there first time trying to do this but I what I need to do is allow ssh (port 22) through my PIX I tried to use fixup but it doesnt like the ssh as a port. What I would like to do is be on the inside of the PIX and access ssh on the outside. It so...

Hi Experts.As far as I know, a Pix Firewall is not able to route a packet coming in from an interface to the same interface.But what about two logical dot1q-based interfaces configured on the same physical interface?Is it able to route between them?T...

We have some developers that have an application that they say needs to have the TCP timeout set to 4 hours (talking to some mainframe somewhere)and I need some ammunition/arguments that will show them how this is not a secure thing to do.

I have a client that receives a Dr. Watson when they try to connect to a VPN concentrator with the VPN client (3.6 or 4.0 versions) installed on a Windows 2000 Server with Terminal Services installed. They have assured me they do not have any other V...

Is anyone know how to use PIX for NAT load distribution, there is no same command as for the router.!tcp load distribution(config)#ip nat pool name start-ip end-ip {netmask netmask | prefix-length prefix-length} type rotary (config)#access-list list_...

I've had no joy trying to find the OID for the 'Authenticated Users' (show uauth) object, can anyone else throw any light on this?Thanks