Network Security

Can someone indicate if a Preshared keys and also CA authentication is allowed in the same config of PIX. We have a customer with PIX configured for preshared keys. They want to add a new VPN with CA auth. Can we just add all CA related commands in t...

Using 4.4(7) code on a pix 515, default fixup statement for ftp, and both NAT and PAT configured. FTP requests for large files hang after a seemingly random amount of time. I reviewed the field notice regarding PTR records in the DNS, but I don't t...

Being that I need CSPM to manage numerous firewalls, I would like to find out if there is a way to implement, and maintain, separate ACL(s) for each firewall. Aside from that, When I try to actualy implement a rule through the policy tab, that invol...

Hi,I have pix 6.1 firewall in the corporate office,I have pix 3.1 client in the remote network,I have setup the VPN access,I am able to connect to the pix from the remote network and be able to ping outside ip address of the PIX,I am not able to ping...

interface on standby pix shows in 'testing' state from primary. but shows as normal when logged in from standby pix. what is the problem and what can I do to correct it?

I run the following commands to copy PIX config file to TFTP and got error message:tftp-server aa.bb.cc.dd /pix01102002write net aa.bb.cc.dd:pix01012002building configuration...TFTP write at 'aa.bb.cc.dd' on interface 1Timed out attempting to connect...

I have a client with multiple ISPs who would like to host web internally (off one isp) and mail internally (off the other isp).DMZ (Mail)172.16.11.1 /24-------+(WWW)172.16.11.2 /24 | |Inside 172.16.10.X /24----PIX 515----+(provider1) ...

Hi All,I know it is not documented anywhere but I was wondering if it is at all possible to make a PIX boot from a tftp server. I know it can be done with routers, but have not heard it done with a PIX.Thanks in advance.Willie

I have a Pix 515 running 6.0(1) software. I'm trying to give split-tunnel access to a vpngroup, but am having difficulty with the implementation.Here are my configuration entries:vpngroup 2000clients split-tunnel webaccessaccess-list webaccess permit...

i have configure the remote client/w cisco VPN client 1.1 to dial into my 1720. The VPN tunnel is builded successfully. i can ping both remote client IP and internal IP. now , i would like to know how to i configure my win98 client to logon to my Dom...

I have a situation with and office attached to our internal network via a T/3 and sharing the same internal IP address space. Both offices have different ISP's. I also have a test web server on our internal network and it is being static assigned an ...

I understand how to nat on a Pix firewall, but lets say that a clients addsanother separate internet router and wants to nat a certain internal networkaddress to the new internet router via it's pix firewall which is already everythingnatting to the ...

setup:2651----- Internet----- 1720i'm doing vpn on the routers.question:How can I prioritize outgoing VPN traffic fromother traffic ( http, ftp etc.) ?

I want to copy the pix config off of the box. I seem to remember copying the config onto a floppy disk, but I can't find any documentation on it. Is there any other way. Thanks.Jpoulos

This is a stupit question. I have a pix525,I want to copy running config to tftp server just like router,but it has not the same copy command,Could you tell me how to do it? thankx~~~