Network Security

I have a PIX 515 configured to an application service provider who host applications over a VPN connected back to my office.Does the PIX 515 allow for a 3rd ethernet interface to be added for an ISP which would then allow me to have 2 outbound routes...

Is there a way to change the RIPv2 hold/update timers on a PIX 515E with 6.3.1? Because we can't use OSPF in our environment I'd like to get faster network convergence than with the default RIP timer values.Daniel Ruch

Hi everybody,I have 1710 to 1721 IPSEC.The telnet session close in idle mode within about 30 minutes. Tunnel is 192.168.1.0/24 to 192.168.2.0/24 via 62.x.x.x and 212.x.x.x endpointsWith commands can be used for timeout handling.Configuration of 1710 ...

Hello ,We have got pix 515 with IOS ver 6.2(1). We have created an access-list & NAT for one of customer requirement to access a server behind the firewall. Sadly , customer can't able to connect to server inside . Is there any command like debug to ...

Hi folks,can somebody tell if Pix support a 10.1.x.x in internal int, and a 10.2.x.x in DMZ int?can I do that?Thanks in advancedmc

We are configuring PIX515 ver6.3(1) using PDM3.0(1). When it comes to defining AccessRules using Groups in both Source and Destination fields having two or more members in the group, we noticed that duplicate rules appear when you expand the rule usi...

if without ACS,how can I know the detail traffic(like "show ip accounting" in router)?thanks

What is the PIX Order of Operations. This article:http://www.cisco.com/warp/public/556/5.htmlcontains a table that seems to be describing the order in whichtransactions are processed using Network Address Translation (NAT) for IOS. Is this the way it...

I've been researching this problem for several days now, and have come up totally short in terms of finding a solution. I have a PIX 515 with an internal network range of 10.10.0.0/8 behind it and a single external IP I obtain via DHCP [cable]. I hav...

Hi there,Could anyone advise me of the ports/destination that I would need to block internal users from accessing MSN Messenger using a PIX firewall running version 6.3 with access-lists.I have looked on the web and it seems that it is port 1863 you ...

Hi,I got a cisco pix 525 with me.I have a LAN in the Inside interface and there are people doing various things from inside.Also im not much aware about the logging happening from outside. I dont want this facility in the servers , instead, i want th...

I cant find this anywhere and a cutomer wants to know if this PIX can do this like a WatchGuard Firebox can. Finding the features a product does not have is always fun.Thanks,Greg

Having a problem changing passwords remotely when clients password expires. Users are connected remotely through vpn ( Using Cisco Pix Firewall). Problem occurs when remote user's password expires on the domain ( NT Domain), eventhough the change pas...

HelloI have a CISCO 801 to connect to the internet (dynamic IP).The router is establishing a VPN-Tunnel to private LAN behind a PIX.It works with authentication pre-share.It works fine. But now I want access the internet like split tunnel option.The ...

We have PIX 520 running in failover fashion. Both have 5.3(3) running on then. I want to upgrade to 6.2(2). Can anyone suggest me the best route to achieve this and plus what are the factors I need to keep in mind functionality wise for version diffe...