Network Security

Running PIX 515 with one DMZ. Problem is I cannot initiate any sessions from the DMZ side. Ping is the really strange one. I cannot ping from the DMZ to inside, the packets do not hit the debug packet dmz. Packet sniffer shows the requests being...

I'm in the process of deploying an SNMP infrastructure for our network using OpenNMS, and am wondering if I should use either traps or thresholds (or both?) to detect Cisco events such as high router/switch temperature, high CPU usage, etc. I've alw...

How do I erase the configuration, and rebuild the Firewall?

Can you sync time on a PIX 501 (v6.1) with a NTP server? If so, what is the command? Thanks,Rick

From the PIX firewall documentation, it was mentioned that the "clear xlate"command should be used after changing or removing the alias, access-list,conduit, global, nat, outbound, and static commands.Question: Does this command clear (or refresh) th...

Just installed standalone vms 2.1 and attempted to import devices into IDS MC and VPN Routers MC, but I get errors. The IDS MC error I get is importing configuration files from the sensor Could not find version instring "Unknown version". I followe...

Hi, is it possible to use a smart-card (or token, like aladdin e-token) to authenticate a vpn on a pix using the default VPN client (l2tp/ipsec) coming with windows2000/xp ?It seems that EAP support is required and then smartcard/token auth is possib...

I have two old 515 pix firewalls and would like to upgrade them with the earliest software version. Actually when I give a "sh ver" in each, I get this information, but I`m not sure how to read how much flash it has. Also if I need a flash upgrade, w...

I have a PIX 506 with two interfaces. The PIX is only used between to private network segements for some political reason. Here the description is:PIX outside interface is on 198.199.199.0 network and PIX outside interace address is 198.199.199.1 c...

Does anybody know a good book about cisco works 2000 (on solaris)? If so please write the isbn so I can order it. Thanks.

I know that a cluster member will send the traps to the cluster commander but is there anything I have to configure (trap wise) from the member side?My config is as follows from the cluster commander.conf t logging on logging 1.1.1.1 logging trap inf...

Is it possible to hang a modem onto a pix on the console port.i have a firewall that is at a remote location. Intermittently it hangs and i have to drive out to it and reboot it. Is it possible to put a modem on him so I can dial in when it hangs a...

Hi All,Just wondering if there are TX based Gig ethernet cards for the 525? Or am i stuck with FX? CheersDave

Hello all, Just wondering if the same type of support that exists for fixing up FTP when NAT is used also is available for RPC traffic ? IE a management station is trying to access a station via RPC, but the destination IP is a NAT.. I'd be surpris...

How can I make the PIX auto-redial with pppoe, when the PIX gets disconnected? It seems that the PIX gets disconnected when it's idle for some amount of time, and only reconnects when I attempt to get out to the internet. Is there a config similar ...