Network Security

Are any of the PIX OS versions susceptible to the latest OpenSSH Security buffer.adv advisory?http://www.openssh.com/txt/buffer.adv

Does PIX support Traffic Load Monitoring?I want to see regularly the traffic being blocked/passed thru by the firewall on a per policy basis.

It seems that the latest version of the PIX OS can run OSPF. Will BGP be added eventually? Is it there already and I just didn't notice?Thanks,Diego

Hi Guys,The functionality of the Static Command is bothering me for a while.If anybody could help me out.My Configurations is as follows:Inside Network - 10.160.2.0Outside Network - 172.16.35.0The following line in my PIX bothers me.static (inside,ou...

I think this is a rather easy question but looking for confirmation. I have a 515 PIX with a DMZ interface, a LAN interface, an Outside interface out to ISP #1, a second Outside interface out to ISP #2. I want all users to use ISP #2 and all servers...

Accesses from outside a PIX 515 to the public IP works fine. However, there are some situations where the PIX needs to reach ITSELF on the public IP being used in the static statement and this isn't working.Any ideas on what causes this ? The PIX OS ...

I have a class c network. 192.168.1.0 /24i have several web,ftp and mail server 192.168.1.100 - 180I also have two dns server 192.168.1.35,192.168.1.45the problem is that i need to allow traffic from the outside to these webservers each host is a dif...

Just installed VMS and after installing it on the server, we found out that we had the wrong IP address. I have changed the address on hte server, but I am getting errors on trying to add devices. Do I need to reinstall VMS or is there a quick chan...

We have a company which use the Pix as VPN Server. Now we have to connect an internal PC to CheckPoint FW with the SecureRemote Client.We sniffered the intern and extern site of the Pix with following results:the client update to the remote site is o...

Hi,Im stuck on a little problem. I'm setting up a brand new 506E firewall. When I try to specify an internal IP for my interface I get the following error, "interface address is not on the same subnet as the dhcp pool" I've disbaled the DHCP server o...

This is a somewhat lengthy post so I'll pose the key questions up front:1) Are there any other viable workarounds for the problem/behaviour described below?2) Is the behaviour described below a bug that should be fixed or a "design feature" of the 30...

We have NAT to a device in the DMZ and I want to forward traffic coming via the NAT forwarded to another PC in the SMZ which has not 1 to 1 NAT.Can this be done.

Hi,We have internal network connected to Internet by 3 ISP,some clients connected to internet using first ISP using the proxy server 1,otheres connected to internet by second ISP using the proxy server 2,one application server connected to internet u...

Do you need to setup an access list to enable syslog messages to a host on the inside interface? I'm not getting syslog messages on kiwi. I have it set up for udp on port 20000 and the pix has the logging host inside 'x' udp/20000 command. In the ...

Can the IDS 3.x software shun to the PIX using SSH?Thanx.