Network Security

For accessing the internet we have a proxy in our LAN (Authentification proxy) and one in our DMZ1. The second proxy is performing as a normal proxy server, located in our DMZ2.The ISP's Internet router is located in our DMZ3. Whenever accessing an S...

I am trying to find the best solution to setup our Corporate Email to be available on the web without compromising security. Can I setup on the PIX to only allow users access to the mail folders on our email server? Any other suggestions would be a...

A friend of mine has a PIX501 and whenever he boots up, all the lights start to flash and never stop. What could be or is the issue? My first thought is an IOS issue.Thanks!!

Hi,we want to monitor periodically the memory utilization of our PIX firewalls. I did not find any recommendation what amount of free memory in percentage should be the threshold to look for. In the TAC documentation it is mentioned that the free mem...

We currently have a /30 external subnet to the internet (2 IP address in reality, 1 on outside of PIX, 1 on perimeter router). We want to allow 4 inside machines outbound using a variety of protocols and SMTP traffic inbound to the mail server. One o...

A mutlicast server and a PIM router located at PIX outside interface. The client is protected by the PIX at inside interface. Client cannot connect receive the stream from the server. However, if the client locate at the outside interface, it can rec...

Hello, i m trying to initiate a Telnet session from a Pix Firewall console running 6.3.1 software to a remote device but the firewall IOS did not recognize the command Telnet even if type only the ip address of the remote device without the com...

As the title suggests, I am trying to create two VPN tunnels over a single ISDN circuit. But, I am wondering how to apply two crypto maps to that single interface, and how the interface will know which one to use. If anyone has any experience or ad...

I have a curious, theoretical question re PIX VPN implementation, specifically regarding crypto acl entries. I'm using the following qoute as the foundation of my question:http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_configuration_g...

We have been running into the problem with vendors that we initiate FTP sessions to. We do not allow inbound access and passive connections will not work with their FTP server. They use Microsoft FTP servers and they have port security setup on th...

Hi there first time trying to do this but I what I need to do is allow ssh (port 22) through my PIX I tried to use fixup but it doesnt like the ssh as a port. What I would like to do is be on the inside of the PIX and access ssh on the outside. It so...

Hi Experts.As far as I know, a Pix Firewall is not able to route a packet coming in from an interface to the same interface.But what about two logical dot1q-based interfaces configured on the same physical interface?Is it able to route between them?T...

We have some developers that have an application that they say needs to have the TCP timeout set to 4 hours (talking to some mainframe somewhere)and I need some ammunition/arguments that will show them how this is not a secure thing to do.