Network Security

How many IDS type messages are used in PIX ? And can you please tell me their names ?

I have a PIX 506E firewall, this device have only two ethernet interface : one for the lan and the other one for the internet. I would like to add a third interface on the PIX without having to change my PIX. So my question is : can I configure a sub...

I am configuring a PIX 515e Software Version 6.1(4) and would like to give access to all traffic accessing the DMZ. I thought this would work: ("dmz" is the interface name)conf taccess-list acl_dmz permit ip any anyaccess-group acl_dmz in interface d...

I have just recently taken over our PIX firewall and have been experimenting with the logging features. I am currently logging up to Warning Level, and have seen a lot of activity that leads me to believe that several people have attempted to get pa...

Is it possible to have a one global IP address to be statically mapped to two separate IP adresses (one of them on the inside and one on the DMZ) by specifying the requested port? I know that you can map multiple global IP addresses to a single inter...

Hello,I am having difficulty with several vendor/distributor offices that connect with our mainframe throughout the day. The distributors are using the VPN client, release 3.5.1.E. They connect to our PIX 525s running 6.1(1). The distributors that...

I am using the PIX 515 version 6.2 with WEBSENSE as a filtering. Reading the cisco documentation, the PIX does not send the Duration nor the bytes Transferred to the WEBSENSE.Does any one know which version of the PIX will send this info.Thank you.

I am attempting to configure a PIX 520 to support connections from a low security zone to high security zone inbound to a exchange server from outlook. I am using the NAT 0 options and have the no problem pinging, hitting the web interface on the sa...

What is the best way to disable NAT on the PIX (specifically between two interface, not globally)? There appears to be two alternatives: use a net static of the form "static(high,low) high high" or "nat 0 (high) access-list". I've seen postings which...

I have CiscoWorks 2000 LMS / RWAN with the VPN Monitor software loaded. Currently I have our VPN 3000 concentrators entered in RME with only an SNMP Read-Only string. If I add a telnet access into RME for the VPN concentrator will it pull a copy of t...

Hello,Does anyone know a good Cisco documentation on how to set up the PIX 515E and Windows 2000 client for VPN access via L2TP and IPSec? I found some okay documents. They are not too good. Kinda confusing. They only talk about setting up the PI...

I was looking at using the "name" command for a pix configuration I was working on for the purpose of a) making the configuration easier to read and b) making changes to an ip address easier.I ran into this problem however and wonder if there is any ...

Does the 501 acting as a client to a concentrator support the features that software clients do such as Split-DNS, or split tunneling policy pushes from the concentrator?I'm not clear how I can push that DNS policy down from my concentrator to my pix...

I am about to convert this PIX to ACLs, I can do a show conduit and see that some of them have no hitcount, would it be safe to remove these before converting to ACLs?