Network Security

we usually create a dmz by using a pix. however, one of my customers uses a switch to create a dmz rather than a pix. customer does that by creating 3 vlans.i was wondering what is the difference between the two.

I have PIX 520 with ver 6.1(4). The issue is when i am sending mails with attachment from the mail client behind PIX, the mail is not reaching the recipeint but the same is reaching without attachment. If I bypass the PIX, mail with attachments are d...

HiWe got a couple PIX all running 6.3(1). For some strange reason on one of them I can not create a static translation for a server (http). As soon as I enter the static-command the server is unable to get onto the internet and is also invisible to t...

I recently started a position where the previous network admin shredded a great deal of network information. I have been told that the previous admin had the network locked down too tight. To make a long an interesting story short I have a Cisco 506 ...

Hi, I have just updated to VMS 2.2 and IDSMC 1.2 on Windows 2k SP3 and want to install all three latest patches available. When I go to install the patches I get the follwing warning message:This Point Patch is not intended for this version of idsmdc...

Hello all,I am trying to sniff a session between a server on an "inside" segement and a server on a "DMZ" segment. The server on the inside is being NAT translated to the same address on the DMZ like so:static (inside,DMZ) 10.1.1.1 10.1.1.1 netmask 2...

I'm new with the PIX and don't know how to block ports. I'm using the CLI and need to block certain ports to avoid the mess with the blaster worm.Can anyone tell me what to type in after I do the config t that will block these ports?Thanks.

I do wonder if this is the right behaviour of the router. If I reload my Cisco 3620 IOS VPN Server, both CA and router's itself certificates are gone. Need to do the procedure (crypto ca authenticate ..., crypto ca enroll ...) to get the certificates...

Am I right to assume that the handful of ports 69, 135, 139, 445 and 4444 are blocked by nature on the PIX? I have not expressly opened any of them as far as I can tell? I have looked around on the net and not found anyone talking about the PIX in co...

Hi,Just a quick question. I'm running a pix 506 with software version 6.3. I was asked to look into configuring the IDS part of the firewall. Is there any white papers explaning how to configure it properly? I have experience with cisco's firewalls b...

Hi,What would be thebest way to configure a pix 501 to work with a cable modem the ISP provides a heartbeat and authentication service that periodically checks in from PC this is similar to the roadrunner service that run on some cable NW in the stat...

Hi All,I want to do the tunnelling in GRE or IPIP mode on the router behind the firewall. Then I do static NAT on the router for the tunnel source. I have opened ip any any and GRE for that static IP but somehow, I got error messages such as no xlate...

Is there anyone who worked with the Policy NAT on PIX 6.3 (2) ?I have a scenario where a central PIX vpn a remote site PIX .I want to translate Remote site inside private addresses because theyconflict with another remote site.So i want the Remote PI...