Network Security

Hi everyone,We're having problems downloading POP3 mail from our ISP and I'm trying to look at all avenues. It appears that during the retrieval process, there is a timeout and the message fails to download. The only messages we are having problems w...

Have a situation wherby a server and client exchange data on tcp ports 3299 (client) and > 1023 (server). They are hosted by different service providers with a gre tunnel serviced by static routing running between the two provider's border routers.Th...

I have a Pix 525 running 5.2(5) code in production. We purchased another 525 with failover license only, to create a failover set. The problem is that this pix is running 6.1(2) code. I don't believe I can configure them in failover mode unless th...

Hi, does anyone has a sample configuration on how to configure bi-directional NAT for overlapping private ip address using PIX firewall version 6.2 ?ThanksDavid

Anybody has any input on how to keep a VPN tunnel up and running even though there's no interesting traffic ? I'd like to get the IPSec and ISAKMP always up. Is that possible ?

Hi,we have a PIX 515 - Version 6.1(2) - in use with one external und 2 internalinterfaces. Because of our technical structure, there are connections from outside, which go trought one internal interface in but the answers go throught the other int...

Hi everybody:I´m trying to configure stateful failover in my pix firewall 525, I have inside, outside, and dmz ports and other fastethernert ports, I´m using failover serial cable and 1 fastethernet interface for stateful. It seems it´s working but...

VPN Client 3.5.1 on Win2K laptop - dialing ISP's to access 3005. After making a successful connection to the concentrator, user is not prompted for NT logon. "Enable start before logon" is checked in the client Windows Logon Properties - "Allow Loca...

Is it possible to pass EIGRP through a PIX. I know that the PIX will not pass multicast packets and EIGRP uses multicast. I have read that you can use the neighbor command on the routers to send unicast instead of multicast. If i set this up and p...

Anyone know of a config analysis tool for the PIX 515E? I heard that there was one but have not been able to locate it in TAC. Can anyone point me to the right place? Thanks!

A question came up recently in our department whether the cisco catalyst 4006 and 6509 switch agents would support SNMP over tcp? The default standard for SNMP is UDP is underlying transport mechanism. Any suggestion is greatly appreciated.

I am trying to connect from Int3 security of 15 to int2 securiyt of 10 however I am having no luck can any one help, if I put in any rules to try and force it through it drops all connections on this interface.

I have a PIX running 6.2(2) code and the 3.5.1 vpn client. I can set up different vpngroups that use the same local ip pool fine. But if I create a second ip pool and assign a vpngroup to use the new pool they hang at the "securing connection" entr...

I have been testing traceroutes through the PIX and found an interesting anomaly. Current architecture for testing is:interent(1.1.1.1) -> pix(2.2.2.2) -> router(3.3.3.3) -> host(4.4.4.4) When performing a traceroute from the internet to the host t...

Does anyone know whether there are any limiations on the number of static statements that are permitted on a PIX 515-E?I potentially need to statically map 100's of addresses!