Network Security

Hi,Im stuck on a little problem. I'm setting up a brand new 506E firewall. When I try to specify an internal IP for my interface I get the following error, "interface address is not on the same subnet as the dhcp pool" I've disbaled the DHCP server o...

This is a somewhat lengthy post so I'll pose the key questions up front:1) Are there any other viable workarounds for the problem/behaviour described below?2) Is the behaviour described below a bug that should be fixed or a "design feature" of the 30...

We have NAT to a device in the DMZ and I want to forward traffic coming via the NAT forwarded to another PC in the SMZ which has not 1 to 1 NAT.Can this be done.

Hi,We have internal network connected to Internet by 3 ISP,some clients connected to internet using first ISP using the proxy server 1,otheres connected to internet by second ISP using the proxy server 2,one application server connected to internet u...

Do you need to setup an access list to enable syslog messages to a host on the inside interface? I'm not getting syslog messages on kiwi. I have it set up for udp on port 20000 and the pix has the logging host inside 'x' udp/20000 command. In the buf...

Can the IDS 3.x software shun to the PIX using SSH?Thanx.

Dear All, I am sucessfully configured my LAN switches for port security auto shutdown and max-mac-count 1 in order to protect any body to plug they laptop or any other device to get connected with my network without authorized approval. I knew it is ...

I work on the company helpdesk, and I was asked a question in passing that I would like an answer to.I understand that L2TP uses GRE to tunnel. I would like to know how internal gateways on the internet and local LAN routers, and ABR's know how to ro...

HiI am going to upgrade my PIX(520)software version from 6.2 to 6.3(3).But I want take backup of existing version 6.2copy flash tftp--This command does not exist.Is there any way to copy existing software for backup ??Please help me.Ishwar

I have two 520 PIX running in failover mode on 5.3.3 version. I am getting a message on Primary such as "(Secondary) Lost Failover communications with mate on interface X" and then if I do show failover, it says that its doing testing on both interfa...

Is there a way to put a Mobile IP home agent behind a PIX ? I've got two public IPs, want to PAT one on the outside of the PIX and forward/translate one to the home agent. Anyone done this? Can it be done? Thanks.

I am connecting to a PIX 515 via windows / Linux Cisco VPN clients, however when I connect to the VPN my local LAN is disabled. I have checked the option to allow local LAN access when connected to the VPN however I am still locked out. After doing s...

I am trying to get a PIX working with an ADSL modem. It seems that the modem has a fixed IP of 192.168.0.1 and is configured with a dhcp client using http on this address. Having been configured with the ISP etc the modem then 'remembers' the MAC add...