Network Security

Hi, I have configured a VPN tunnel from a PIX to a Cisco 3640. The problem is I can only initiate the tunnel from the PIX side. Once the IPSec SA is created I can ping from either side, but I can only ping from the PIX side initially.I've triple ch...

Cisco.com has 3rd to 5th edition migration tools, but none for 4 to 5.How is this done? What tool? Where obtained? What URL?Thanks!!

I have a customer that wants to upgrade from a GUI based platform to a 515. My understanding is that Checkpoint policies are GUI based. Is there an easy way to import them into a new box, or will I need to do a glare and stare and just manually type ...

Hi All,We have a number of Cisco 3000 Concentrators which are doing VPN beautifully. But at a couple sites we want to enable NAT for the PCs inside. I've tried everything to get NAT working out and the best i can get is to ping out. No surfing and...

need a configuration sample on pix to let IDS traffic go though pix. The director is inside a pix firewall and the sensor is outside the pix.

Hi,I'll be doing a "conduits" to "access-list" conversion for some PIXs with version 6.2. I`ve looked in the documentation and technical tips and there`s not much configuration examples and guidelines. Has anybody found a good document on the subje...

I have jsut setup a new PIX-515 (moving away from proxy). The internet rtr is a bay router.We noticed that for any existing outside IPs that we migrated to PIX, will not be accessible from the Internet. We can access it if we are locally attach to th...

I just upgraded a clients' pix from 6.0.1 to 6.2.2 sw and just for kicks, we went to a few online scan services such as grc and sygate to run a few scans against the PIX. Prior to the upgrade, any port showeed up as stealth or blocked. After the up...

I need to design a VPN network around a PIX 515E hub site and IOS routers at the remote sites. In the past, I have designed VPN networks using only IOS routers. I like to use IPSec encrypted GRE tunnels so that I can run RIP over the VPN and also s...

Can anyone give me an indication if/when the PIX 'alias' command will be supported in the PDM?Thanks--David RichardsSenior Network EngineerChristchurch City Council

We have a need to use another VPN hardware/software solution. However, in order to use this other solution we need to be able to configure the 501 to pass the NATT'ed address 192.... to the VPN hardware in front of it.

I have multiple customers that will accessing my network via VPN. I am using a 7204 which resides behind two of my BGP routers. I would like to allocate a specific amount of bandwidth per customer. Is there any way to do this with IOS based vpns?Th...

Our case goes like this:In one of inside networks an NT box had a record of an FTP session (Close Wait) from an internet host with a public address. Is there a way in which this host could bypass the pix? The NT box is for internal use only and it i...

Is there any version of the PIX that allows this???

I have installed the 2nd CD One,but it's ANI Server is down,Now I have 4th CD One,Can I upgrade from 2nd to 4th directly?when upgrade is finished,the ANI Server will be restarted?or I must remove 2nd and later install 4th?