Network Security

It is my understanding that you can NOT use the PIX to route between two subnets connected on the same inside interface. The PIX will not take receive packets and send them out the same interface that it receives them on. In other words, the PIX will...

I have a need to monitor the internet usage of a single workstation with a static ip address. Is there an easy way to do this? I have a PIX 515e. Any help would be greatly appreciated.

Hi,We are currently testing a PIX 515E with 6.2(2) software.Now i have had this problem 3 times that PIX "inside" and "outside" interface would be shutdown automatically without any SYSLOG message being logged.If i look physically at the link , both ...

We are getting ready to deploy 6 VPN 3000 in sets of 2 for fail-over. As part of this product we purchased VMS 2.1 under the impression that it provided a centralized management console for multiple VPN 3000 concentrators. However, I cannot find any ...

I'm trying to make the IDS shun. In Administration>Manual Blocking I can see that the Net Device is in "Password Sent" state. On time to time I see some ip addresses as it they were being blocked in that url. But, a "show shun" or "show shun statisti...

I have a situation where I utilize CacheFlow devices to serve up web content for a high traffic web site. In considering new secure architecture - I have two options, creating two seperate DMZ segments - one for the redundant CacheFlows and another t...

Hi,I would like to be able to telnet to my PIX from the outside connecting via PPTP. I know that I can do this with an IPSEC connection but can I with a PPTP connection, if so where on CCO can I find configuration examples of this?Thanks in advance,C...

Hi,I would like to know whether we will be able to configure IP directed broadcst, or helper address in PIX. The scenario is something like this.There are two networks connected through internet. At one location we have PIX 515 (PIx version 6.2) and ...

Given that I am configuring PQ/CBWFQ over MPLS and using rate limiting to mark the packet on input. On congestion does the packet go thru three different software modules ie the policy first, if policy is oversubscribed then second, the fair queueing...

hi all,anyone know the command to get the PIX to block directed-broadcasts from the outside interface?or is it for the router todo?cheersdave

using CISCO-PING-MIB in MPLS VPN ? In CISCO-PING-MIB.my document, wu can use the CISCO-PING-MIB to Proxy ping the hosts in the MPLS VPN (vrf). But when i do it, router will return the message: errstat =12; errindex = 1(ciscoPingProtocol). If Router i...

My english isn´t good , but a hope that understandmeAny body speak spanish??I am installing a PIX 515 with 3 interface fastethernet ( e0, e1 and intf2). I have two ISP to internet. One interface (e0) is conected to cisco 2621 ( ISP telecom). Another ...