Network Security

I'm looking to buy a 525 with a 4-port add-on. Can I only have 3 "zones" - inside, outside and DMZ? Or is it possible to configure more? Thanks in advance. Couldn't find anything on CCO.

I am working on PIX firewall 501. As per ASA, traffic can flow from a high security area to low security area without conduit. But i am unable to access the low security network without conduit. What can be the problem area?

We have a bunch of PIX 501s VPNing to a 3030 here. I expect like many, we're going a little nuts right now. Licenses being used up as MSBLAST.D pings non-existing IP addresses, etc.We're now starting to see, sometimes, our 10 or 50 user licenses appe...

I cannot ping the inside interface of my PIX, I have connected the ethernet1 inside interface directly to a PC via a cross over cable. I have configured the IP address of the inside to 192.168.1.1 and of the PC 192.168.1.2. The duplex and speed of th...

I have an internet user that is trying to connect to a server using RDP in Windows XP. The server that is trying to be reached is on the internal network, but has a static mapping from the external network(internet). I have opened up TCP port 3389 on...

Hi!I have simple test network with overlapping address spaces and want to solve the problem with PIX NAT on a single PIX firewall.PIX inside = 192.168.1.0/24PIX outside = 172.16.1.0/24and the config is:route outside 0.0.0.0 0.0.0.0 172.16.1.2 1nat (i...

Good morning fellas... Searching through the archives ive tried to fix my own problem with no luck =( Mind taking a look at the below config seeing if u find any reason why when this box is connected to the network no one can telnet into port 25 and ...

I have VPN client Vers. 4.0 and need to connect to a PIX firewall across the internet. The problem I am having is that I can establish a tunnel, but am unable to utilize the application or even ping the application server on the other side. I am behi...

Is the following configuration supported ?PIX Version 6.3(1)nameif ethernet0 outside security0nameif ethernet1 support security95nameif ethernet3 inside security100.access-list support-in permit tcp any host My_Host eq wwwaccess-list support-in permi...

Hi,I want to place a PIX to front of Misrosoft ISA Server. It will be : Internet->PIX->ISA->Our LAN.Do you have some documents about this case? I want to know more about configuration of PIX and ISA. ThanksPeter

I have a remote user that is not able to install the VPN Client 3.6.1 without receiving the error: Windows Socket Initialization Failed upon restarting Windows.He is using XP Home from his own LAN. Note there is another user on that same LAN (also wi...

HiI'm trying to get statistics for CPU usage and connections through SNMP. I did it on my lab pix 515e 6.2 and it works. After this I did it on the second pix 515 6.0(1) and as you can see on the output it doesn't work only for CPU. Is it any bug at ...

Hi,I've got a box on the outside of a PIX515E that I use ssh to get to and administrate it.If I leave the session open, without any activity the PIX will 'cut' the connection between, not killing it. Leaving a disconnected ssh session which is not id...

Hello!I have a problem with renewing RA certificates.I discovered after i reinstalled mscep that it's possible to modify the validity period of personal certificates in command prompt on CA server:C:\certutil -setreg ca\ValidityPeriodUnits xwhere x =...