Network Security

Hi,This new PIX VLAN stuff is really cool but I have one quick question. Lets say you have configured the inside interface with 2 VLAN's 20 and 21. Now, does the same hold true about a packet entering an interface cannot leave the same interface? I j...

I need to install the 3des in my pix any link how to get the activation key & installaton procedure.secondly i want to telnet the pix from outside the LAN, what will be the configuration for that

Hi all.This is my PIX configuration, I need deny all not interesting traffic like UDP 137 - UDP 138 - TCP 139.I try to do it but when I add deny access-list role the ICMP traffic doesn't work.I need to add this role on PIX.PIX Version 6.3(2)interface...

I have PIX 520 with "PIX Version 4.2(4)". Some inside workstations are permitted to go to Internet through the PIX using NAT and Global commands.Suddenly some of the workstations can't reach the Internet, and I must do "clear xlate" to enable them to...

I have a dual-homed freebsd box running squid. The outside interface is connected to a switch that has the outside interface of the MS proxy connected to it and the inside interface of the PIX. I can access the web just fine going through the MS Prox...

Hi I have got a PIX firewall with outiside,inside 2 subnets( 192.168.128.0 255.255.252.0 & 192.168.136.0 255.255.248.0)and DMZ (192.168.132.0 255.255.254.0 ). Below are my config's for the same...please lemme know if it is right...the inside users ne...

I understand that PIXen support VLANs, but is it possible to create VLANs on a PIX 501's switch ports?Can you run a VLAN with a separate Cisco Switch without a router, or do you still need a separate router for that?

Hi,I was just curious in finding out whether a primary PIX firewall has a certain hardware/firmware that distinguishes itself from a secondary pix. I understand that a secondary standby PIX FW has the exact configuartion parameters as the primary and...

I have a PIX 525. I can telnet anywhere except one place. Anyone heard of this?More info...I can get to the ip address telnetting on a DMZ but not on my "inside".I have setup a PC on the inside with full open access in and out w/o any luck.Thanks,Mat...

Have anyone implemented an ISA infront of a pix anddid you have any problems configuring the process?Thanks

Is there a pix product with a wan interface? If there isn't, is the firewall software on the cisco ios router as secure?

Hi...We've noticed that web pages with embedded Java applets take an inordinately long time to download when opened from behind the PIX, even though supposedly there is no filtering enabled on the PIX.Does anybody else see this ??? Could it be that t...

Hi,I'm new to the pix and have a couple of questions reguarding acl's and the ASA.1) I remember reading somewhere (can't find the link now) that each interface should have an acl. Why would i need an acl on the inside interface if I'm allowing any co...

I am looking for any advice or hints on the process of upgrading a PIX515 failover Bundle from version 6.2 to 6.3 .I have a document from CCO that lays out the step by step process. ( http://www.cisco.com/warp/public/110/upgrade.shtml#usingcommdupgra...