Network Security

On the old PIXes such as the classic, you have static and conduit commands to open ports to the outside. I know on the new versions, you can use access lists paired with static commands to open ports. You can also use conduits. I have two question...

As they are the minimum components to carry out automatic shunning of an ip address on PIX Firewall during an intrusion attempt attack?

I have a PIX 525 for testing. If I go into monitor mode I can ping an IP on the LAN get to a tftp server and all is well. When I relaod - same IP same network connection - no connectivity.confused??There is absolutely NO config on teh PIX box it is w...

Hi All,Does anyone know if you can specify multiple client interfaces? ie:dhcprelay server 10.1.1.1 outside dhcprelay enable inside dhcprelay enable dmzie listen on inside and dmz and forward requests to outside dhcpd?cheersdave

A campus network:I have a pix515R and a 3640 connect to internet . The Link to Internet is 100M.when I do not use 515 , only use 3640 do NAT , the browse internet speed (download big file speed)is high ,but 3640 cpu usage is high as 80%,the concurent...

I work with a client who wants to hang a modem off their PIX 501's at their remote locations. Is this possible and if so any help would be greatly appreciated.Thanks.

We have a pix 525 (v6.2.2). Syslog messages are directed to a syslog server using the following config:logging onlogging timestamplogging trap debugginglogging host inside 10.0.0.4Show logging give the following output:Syslog logging: enabled Fac...

I'm trying to implement Java applet blocking on my PIX, and I'm looking for a way to be more selective about how i do it.According to the documentation, I can permit certain internal addresses to get Java applets from the outside, but it doesn't seem...

Hi!I know that the new software 6.3 comes with 802.1q support bu i have a few questions about that:1 - does the PIX501 supports it also?If yes, only in the inside interface right (10/100 Mbps)?2 - does the 8 VLAN support is by interface or the total?...

I have added the line "telnet 0.0.0.0 0.0.0.0 outside" to my PIX 515e and I still cannot telnet to it from the outside. Do I also have to add an ACL entry for this? The permit IPSec command permits IPSec without having to add an ACL. Is the telnet...

In Topology manager device type column instead of seeing "C2950G" description i am receiving "Ciscoproducts.429 description" . When i look at the view, all 4 of the C2950's have question marks on them. Why is this?Thanks.

I have 2 PIX 525 unrestricted bundle. Everytime I type wr mem in the pix it slows down tremendously. I have a continuous ping going from a device on the directly connected internal network. As soon as I do wr mem the ping round trip goes from under...

I want to integrate a virus scanner m/c for http taffic and mail traffic with PIX. The virus scanner m/c is required to be put at DMZ. How can I do this and how shall I write "ip route ......." command for this purpose.--ejaj

hi all just got a pix 506 with ios 5.2.xx want to reset it tofactory defaultthere's a password how do I set it up to factory default?or change the password ? how do i run pix device manager for gui configuration