Network Security

I have pix 515 with UR liscence . Currently my mail and www server are outside my pix . I had installed a dmz interface and put both of them on the dmz but it is not working . I am following the standard method . Can you please check what could be th...

Hi,Can somebody explain the meaning of the pix command:management-access inside or management-access outsideI red the command reference but it's not clear why this command is useful.Somebody knows?Regards,chabral

We're trying to block inbound and outbound port 135 traffic at one of our sites. When we add the below we block inbound 135 traffic but PCs on the inside can still send traffic out on 135. Any ideas what we need to add or remove?ThanksEricaccess-list...

Hi everybody, Like the title said, anyone has a copy of the PIX OX 5.22 that i can get a copy, or anyone can tell me where i can still download it? Somehow, need this old os for a client pix. any help would be really appreciate, thank you

Is it possible to limit a user's access to only the "show xlate" command on a PIX? The purpose is:An expect script to capture the user's global addresses if needed for later forensic evidence. The capture would be done on time period that coincides w...

I have a client that wants to monitor who is logging into a newly setup vpn. I can answer a question about them being logged in at that time, I even got the syslog setup to tell me, but surfing through that at that level is hilarious. Is there no way...

RT

can a router have more than 1 snmp community string both for RO & RW? if yes, then which command to configure to assign one as default. what will be the implications? the string are mentioned below.snmp-server community nms RWsnmp-server community ca...

All,I could really use someone's help. We have recently moved our Internet Mail Server from the Internet to the DMZ. We are runningLotus Notes Domino. As you can see from the configuration below, I have created the Access Lists to permit tcp 1352 tra...

HiI want to prevent my external PIX interface from being "pinged". I removed the "conduit permit icmp any any" statement and added a "conduit deny icmp any any" command. Now I cannot ping anything on the Internet nor can anyone ping any of my NATed a...

we have a router doing nat and vpn to remote through internet.PC can vpn without nat (lan-lan), but, how it can re-direct traffic to internet when ip is not nating ?the router has a default route to internet.The VPN works fine and internet connection...

My customer has 3 public networks and a single Internet connection. The IP address space on their Internet connection is a 30 bit point to point subnet. The other 2 networks are Class C. They want to use these 2 Class C networks for Static nat transl...

Hi! What I need to upgrade a Pix 515 v6.2(2) to make it compatible with IPv6??Thank you!

Our ISP has supplied us a Cisco router which is currently connected to a switch. I am trying to add a PIX 501 into the mix. Below is my current running configuration on the PIX and the router. I am not able get an outside connection when the PIX is i...

I'm implementing my first PIX this weekend, and I wanted to post my config for you experts to look at before I start. If anybody notices something that may cause some problems, or if you have any suggestions, I would greatly appreciate it. Thanks.PIX...