Network Security

We are configuring PIX515 ver6.3(1) using PDM3.0(1). When it comes to defining AccessRules using Groups in both Source and Destination fields having two or more members in the group, we noticed that duplicate rules appear when you expand the rule usi...

if without ACS,how can I know the detail traffic(like "show ip accounting" in router)?thanks

What is the PIX Order of Operations. This article:http://www.cisco.com/warp/public/556/5.htmlcontains a table that seems to be describing the order in whichtransactions are processed using Network Address Translation (NAT) for IOS. Is this the way it...

I've been researching this problem for several days now, and have come up totally short in terms of finding a solution. I have a PIX 515 with an internal network range of 10.10.0.0/8 behind it and a single external IP I obtain via DHCP [cable]. I hav...

Hi there,Could anyone advise me of the ports/destination that I would need to block internal users from accessing MSN Messenger using a PIX firewall running version 6.3 with access-lists.I have looked on the web and it seems that it is port 1863 you ...

Hi,I got a cisco pix 525 with me.I have a LAN in the Inside interface and there are people doing various things from inside.Also im not much aware about the logging happening from outside. I dont want this facility in the servers , instead, i want th...

I cant find this anywhere and a cutomer wants to know if this PIX can do this like a WatchGuard Firebox can. Finding the features a product does not have is always fun.Thanks,Greg

Having a problem changing passwords remotely when clients password expires. Users are connected remotely through vpn ( Using Cisco Pix Firewall). Problem occurs when remote user's password expires on the domain ( NT Domain), eventhough the change pas...

HelloI have a CISCO 801 to connect to the internet (dynamic IP).The router is establishing a VPN-Tunnel to private LAN behind a PIX.It works with authentication pre-share.It works fine. But now I want access the internet like split tunnel option.The ...

We have PIX 520 running in failover fashion. Both have 5.3(3) running on then. I want to upgrade to 6.2(2). Can anyone suggest me the best route to achieve this and plus what are the factors I need to keep in mind functionality wise for version diffe...

Hello,Please, how can i limit the number of connection for a such user in PIX firewall. I know that wen i execute this command : sh local-host 10.1.1.100 detailthe display is like:local host: <Mohamed_HAMDI>, conn(s)/limit = 2/0, embryonic(s)/limit =...

Hello, we're trying to set up over 30 site to site vpns in a hub-and-spoke and model where both the hub and spoke boxes are pix. I know usually spoke to spoke communication is not allowed throught the hub pix. Is there any workaround or do we have to...

Hi I have a pix with version 6.3.1 and it is sometimes restarting with the following dump on console (it seems something wrong with isakmp process):Watchdog timeout failure! Please contact customer support.PC SP STATE Runtime SBASE Stack ProcessHrd 0...

Dear Mynul,I would like to know,why I can not see the timestamps in PIX log ?Logging timestamps andlogging buffered are configured,but I am not able to watch anything similar to time withthe messages.Thank you. Zdenek Roth Siemens Business Services