Network Security

Hi,I see the following message repeated in the firewall log.PIX-3-305006: regular translation creation failed for udp src inside:169.254.69.1/138 dst DMZ:192.168.100.12/138192.168.100.12 is a host in my DMZ where as the address 169.254.69.1 is no whe...

Hi,We have a FLAT Inside network with all users and Servers in the same Subnet.While connecting PIX Inside interface 1. Should i connect it to a different subnet and then route using a Router, to Block un-necassary broadcast being sent to PIX Interfa...

My PIX 520 restart automatically several times a day. what's the possible reasion? previously ,we use aaa authentication include any any , it authentication tcp only , it work well , now we use aaa authentication match and access-list to authenticati...

Hello all,I am using a PIX 515E with two interfaces and can't get out from the inside to the outside interface. I don't need or want NAT. The network is configured as follows...router <---> pix <----> switchWithout the PIX the router's address is 192...

Hi,I want to deploy certificate at PIX for IKE negotiation. In the Cisco dokumentation it is not mentioned which type of certificate I need. Should this be a server oder a user certificate just like a personal email certificate? Which type certificat...

Hi !Can anyone tell me how to enable SNMP on a PIX 525 ?I am sitting on VLAN203 and configured the following:snmp-server host vlan203 xxx.xxx.203.254snmp-server community x26193ROsnmp-server enable trapsbut using "snmpwalk" (from 172.23.203.254) I do...

I have a PIX firewall that needs two default routes pointing to two separate HSRP addresses. Can I configure two default routes in the PIX and is it possible to do per-packet load balancing?Thanks in advance.....

I have 3 3030's that I load balance. Do any one know of any way I can create one group and spread them across the 3030's without creating them on each concentrator

Dear reader'sI am trying to move a TCP load sharing functionality from an 2600 router to an pix525 running 6.2. On the router I used an Nat pool type rotary. Doe anybody know if this is possible on an PIX ???Regards Dohan

Hi,I need to have telnet access through our Pix. I have set up the following:access-list acl-out permit tcp any host x.x.x.22 eq telnetstatic (inside,outside) x.x.x.22 10.0.0.1 netmask 255.255.255.255 0 0where 10.0.0.1 is the internal ip I need telne...

Is there a way to telnet into PIX frewall through the outside interface?SSH is a valid method to access in, however I wonder if there is another way of doing it. PDM is another tool for the access and changing the configuration.Any help will be usefu...

Hello,I have a pix firewall that protects servers from the internet. Each server has local ip address that is staticly mapped on he PIX to Internet address.I wonder if PIX performance improves if I assign real ip addresses to the servers ?Thanks

Hi all. I have a relatively easy question regarind how to block Instant Messaging programs. I've tried a few things like:access-list inside deny tcp any any eq 1863 access-list inside deny tcp any any eq 5000 access-list inside deny tcp any any eq 50...

We have several clients that allow us to vpn into their systems and it has come to the point that we are getting software incompatabilities. What I am trying to do is set up "compatable" connections on a Terminal server box and let our people access ...

PIX 525 6.2(1)In the case where connections should NEVER be 'timed-out' such as remote database connections, what timeout config values should be used?Documentation suggests setting 'timeout conn 0:0:0' to 'never timeout a connection', but this does ...