Network Security

Hi all.My Customer has a Pix running PIX Version 5.2(9) and cannot upgrade the software because a Token Ring interface on the firewall is needed.Given that the "show cpu usage" command is not available on that software release, how can I calculate an...

How many IDS type messages are used in PIX ? And can you please tell me their names ?

On PIX515 with a DMZ port running 5.2(9) everything is working as far as traffic flow in and out of the proper interfaces. I am upgrading to, or rather attempting to, 6.2(2) in order to evaluate N2H2 content filtering. 6.2(2) is required in order t...

In my network I have a PIX-520 with 2 interfaces ( i,e inside and outside ) I am using real ip's on the inside means using them without NAT. I want my traffic generated from Inside should go to internet via router placed on the outside interface of P...

How many IDS type messages are used in PIX ? And can you please tell me their names ?

I have a PIX 506E firewall, this device have only two ethernet interface : one for the lan and the other one for the internet. I would like to add a third interface on the PIX without having to change my PIX. So my question is : can I configure a sub...

I am configuring a PIX 515e Software Version 6.1(4) and would like to give access to all traffic accessing the DMZ. I thought this would work: ("dmz" is the interface name)conf taccess-list acl_dmz permit ip any anyaccess-group acl_dmz in interface d...

I have just recently taken over our PIX firewall and have been experimenting with the logging features. I am currently logging up to Warning Level, and have seen a lot of activity that leads me to believe that several people have attempted to get pa...

Is it possible to have a one global IP address to be statically mapped to two separate IP adresses (one of them on the inside and one on the DMZ) by specifying the requested port? I know that you can map multiple global IP addresses to a single inter...

Hello,I am having difficulty with several vendor/distributor offices that connect with our mainframe throughout the day. The distributors are using the VPN client, release 3.5.1.E. They connect to our PIX 525s running 6.1(1). The distributors that...

I am using the PIX 515 version 6.2 with WEBSENSE as a filtering. Reading the cisco documentation, the PIX does not send the Duration nor the bytes Transferred to the WEBSENSE.Does any one know which version of the PIX will send this info.Thank you.

I am attempting to configure a PIX 520 to support connections from a low security zone to high security zone inbound to a exchange server from outlook. I am using the NAT 0 options and have the no problem pinging, hitting the web interface on the sa...

What is the best way to disable NAT on the PIX (specifically between two interface, not globally)? There appears to be two alternatives: use a net static of the form "static(high,low) high high" or "nat 0 (high) access-list". I've seen postings which...

I have CiscoWorks 2000 LMS / RWAN with the VPN Monitor software loaded. Currently I have our VPN 3000 concentrators entered in RME with only an SNMP Read-Only string. If I add a telnet access into RME for the VPN concentrator will it pull a copy of t...