Network Security

How are group policies usually put in place with pix? For example, let's say I'm a software company. I've got 14 devolopers who need access to things in the DMZ that no one else would (such as SQL, and who knows what else). Also, Finanace uses a spec...

I updated the PIX 501 to 6.3.(1). I still am unable to VPN from behind the PIX 501 to corporate PIX 515. If I move the W/S in front of the PIX I can VPN in using Microsoft client [pptp]. I get a 721 error message [microsoft]. How can I get pptp to wo...

I have a PIX 501 with a server on the inside that is accessible from the outside with the routable IPonly, using the static command;static (inside,outside) <outside IP> 192.168.0.101 netmask 255.255.255.255 0 0There are inside users that also need to...

I need some direction or documentation links on how to pull-off the following on the PIX firewall:1. Terminate VPN traffic on PIX (accomplished)2. Filter decrypted traffic with access-lists on outside interface (accomplished)3. Forward/Route decry...

I am looking at the design for a web site.Currently I am looking at a pair of perimeter routers, connecting through a pair of 2950's to a Failover pair of Pix's. These connect via a pair of 2950's on the internal network to a tollerant CSS11506 con...

I know that "outside nat" exists but have not seen any possibiltiy to do an outside nat based on the destination address. Is it possible?Example: client on outside network accesses a server in the internal network. If outside client tries to connect ...

I have a user that needed pop3 access to our exchange server behind the PIX 515. I allowed access to port 110 and disabled mailguard on the PIX in order to accomplish the task. My question is what are the ramifications of disabling mailguard? How muc...

I have configured my PIX (6.3) running PAT to allow a PPTP session from remote Win2K client. The client is authenticated by the PIX, receives it's IP addresss from the pptp-pool and can even ping the internal Win XP Pro machine. So far, so good.The...

hello, the scenario is this:I have a user in my network that needs to connect to a VPN server in the Internet, his VPN uses l2tp/ipsec, he uses the windows 2000/XP VPN Client. There is a PIX 535 6.2(2) between the user and his VPN server.the problem ...

Hi !I have a small problem ! I'm using a cisco 802 for a Vpn but I was wondering if there is a problem if I use Dmz at the same time. I've got servers that use the vpn but I have, on the same network, a camera server that has a special application t...

We are adding a second PIX 515 with a FO license as a failover device.I am concerned about what will happen in the event of a failover. Specifically, the documentation says to not use a FO device as a standalone because it will automatically reboot ...

I work for a local ISP and am putting in a PIX firewall for the first time. It is going to go between the router on our backbone and a PC setup as a router. We got a small hub and my plan is to have the Ethernet address on the backbone router chang...

I am trying to copy VDM-1.2-router.tar file from a TFTP server to flash on a 1751V running 12.2.15T. The 1751 has 16M f lash 48Mram.Although I can copy the IOS image using TFTP onto flash when I try to copy the VDM file to flash it fails to copy. I h...