Network Security

I think this is a rather easy question but looking for confirmation. I have a 515 PIX with a DMZ interface, a LAN interface, an Outside interface out to ISP #1, a second Outside interface out to ISP #2. I want all users to use ISP #2 and all servers ...

Accesses from outside a PIX 515 to the public IP works fine. However, there are some situations where the PIX needs to reach ITSELF on the public IP being used in the static statement and this isn't working.Any ideas on what causes this ? The PIX OS ...

I have a class c network. 192.168.1.0 /24i have several web,ftp and mail server 192.168.1.100 - 180I also have two dns server 192.168.1.35,192.168.1.45the problem is that i need to allow traffic from the outside to these webservers each host is a dif...

Just installed VMS and after installing it on the server, we found out that we had the wrong IP address. I have changed the address on hte server, but I am getting errors on trying to add devices. Do I need to reinstall VMS or is there a quick change...

We have a company which use the Pix as VPN Server. Now we have to connect an internal PC to CheckPoint FW with the SecureRemote Client.We sniffered the intern and extern site of the Pix with following results:the client update to the remote site is o...

Hi,Im stuck on a little problem. I'm setting up a brand new 506E firewall. When I try to specify an internal IP for my interface I get the following error, "interface address is not on the same subnet as the dhcp pool" I've disbaled the DHCP server o...

This is a somewhat lengthy post so I'll pose the key questions up front:1) Are there any other viable workarounds for the problem/behaviour described below?2) Is the behaviour described below a bug that should be fixed or a "design feature" of the 30...

We have NAT to a device in the DMZ and I want to forward traffic coming via the NAT forwarded to another PC in the SMZ which has not 1 to 1 NAT.Can this be done.

Hi,We have internal network connected to Internet by 3 ISP,some clients connected to internet using first ISP using the proxy server 1,otheres connected to internet by second ISP using the proxy server 2,one application server connected to internet u...

Do you need to setup an access list to enable syslog messages to a host on the inside interface? I'm not getting syslog messages on kiwi. I have it set up for udp on port 20000 and the pix has the logging host inside 'x' udp/20000 command. In the buf...

Can the IDS 3.x software shun to the PIX using SSH?Thanx.

Dear All, I am sucessfully configured my LAN switches for port security auto shutdown and max-mac-count 1 in order to protect any body to plug they laptop or any other device to get connected with my network without authorized approval. I knew it is ...

I work on the company helpdesk, and I was asked a question in passing that I would like an answer to.I understand that L2TP uses GRE to tunnel. I would like to know how internal gateways on the internet and local LAN routers, and ABR's know how to ro...

HiI am going to upgrade my PIX(520)software version from 6.2 to 6.3(3).But I want take backup of existing version 6.2copy flash tftp--This command does not exist.Is there any way to copy existing software for backup ??Please help me.Ishwar

I have two 520 PIX running in failover mode on 5.3.3 version. I am getting a message on Primary such as "(Secondary) Lost Failover communications with mate on interface X" and then if I do show failover, it says that its doing testing on both interfa...