Network Security

I have two problems around LAN based failover which I would be grateful for help with I have 2 PIX 535s , 1 with full license, 1 failover license. I have upgraded both IIXs to 6.22 and are configured for LAN based failover, which seems (superficiall...

Hello,I have a pix 501 with 50 hosts license. How can I see how many of those inside hosts are using the firewall in a given moment?Thanks

Our school has purchased a 525 with version 6.1(4) code on it and it will replace a pix 520 with version 5.0(1).When I installed the exact same config on the new pix, email and our proxy server were not working. Both are natted. All other non natte...

I am facing some problem with the configuration management.From last few days the configuration management is not picking up the configurations from the routers,if i update manually then also it is not doing so.Help needed!!

(Head Office Network) <-> VPN 3030 <-> (Internet) <-> PIX 501 / PPPoE / VPNC <-> (Branch Network)I can ssh and pdm to the dynamic public address of the PIX.How can I tunnel to the PIX inside address? i.e. Use telnet to the known private address inste...

Hi everyone,We're having problems downloading POP3 mail from our ISP and I'm trying to look at all avenues. It appears that during the retrieval process, there is a timeout and the message fails to download. The only messages we are having problems w...

Have a situation wherby a server and client exchange data on tcp ports 3299 (client) and > 1023 (server). They are hosted by different service providers with a gre tunnel serviced by static routing running between the two provider's border routers.Th...

I have a Pix 525 running 5.2(5) code in production. We purchased another 525 with failover license only, to create a failover set. The problem is that this pix is running 6.1(2) code. I don't believe I can configure them in failover mode unless th...

Hi, does anyone has a sample configuration on how to configure bi-directional NAT for overlapping private ip address using PIX firewall version 6.2 ?ThanksDavid

Anybody has any input on how to keep a VPN tunnel up and running even though there's no interesting traffic ? I'd like to get the IPSec and ISAKMP always up. Is that possible ?

Hi,we have a PIX 515 - Version 6.1(2) - in use with one external und 2 internalinterfaces. Because of our technical structure, there are connections from outside, which go trought one internal interface in but the answers go throught the other int...

Hi everybody:I´m trying to configure stateful failover in my pix firewall 525, I have inside, outside, and dmz ports and other fastethernert ports, I´m using failover serial cable and 1 fastethernet interface for stateful. It seems it´s working but...

VPN Client 3.5.1 on Win2K laptop - dialing ISP's to access 3005. After making a successful connection to the concentrator, user is not prompted for NT logon. "Enable start before logon" is checked in the client Windows Logon Properties - "Allow Loca...

Is it possible to pass EIGRP through a PIX. I know that the PIX will not pass multicast packets and EIGRP uses multicast. I have read that you can use the neighbor command on the routers to send unicast instead of multicast. If i set this up and p...