Network Security

I have turned on OSPF on the PIX. I have two different areas - 100 on the outside and area 0 on the inside. But, the routes from the inside are showing on the dmz routers. Is there any command on the pix to stop you from doing this?

i keep getting this error: <163>May 19 2003 23:13:57: %PIX-3-106011: Deny inbound (No xlate) udp src outside:193.146.77.31/1027 dst outside:67.104.55.209/137in the documentation it says it's a security breach, but i've been getting this for a while. ...

Hello, I would like to make a VPN with IPSec between a PC with a client VPN (like the easy VPN client ) and a firewall (like a PIX).Like both devices are separate in different networks that have a router with NAT, I would like to know if this will wo...

We may need to add another ipsec tunnel for our FLA location. This is becoming a very popular option. We need to figure out how to do this so that we don’t exhaust all internet bandwidth. Is there a way to measure bandwidth per tunnel? We currently h...

I work for a local ISP and am putting in my first PIX. i have posted several times before and keep getting closer but something still dosnt seem to be right. Right now we have our backbone with a 206.x.74.1 address on the ethernet and 206.x.74.5 on o...

I am new to the PIX and need to allow a satellite office to access an inside exchange server via Outlook. E2k is currently sitting on my DC, which is on the internet. I want to pull the DC off of the internet, firewall it, and still provide email acc...

I have already established a VPN connection from a FreeSwan box to my PIX but the remote end can not ping or access my network.The config is like this:access-list 200 permit ip host x.x.x.x y.y.y.y 255.255.255.0 (hitcnt=0)access-list 210 permit ip ho...

I am looking at doing a major firewall upgrade and moving from Checkpoint Firewall-1 to PIX I wanted to see if there was any tips or suggestions on the migration from anyone that has been through the process.

Hallo,Does anybody know how the CSPM will go on? Will there ever be a CSPM release that supports all features of PIX 6.3? If so, when will it be released?Our local Cisco account manager told us, that CSPM development will be stopped in near future.Ho...

First off let me say I didn't design, create or, even recommend this network. I Inherited this mess, I'm just the one cleaning up...The previous admin has setup a email account for a local lawyer that my company uses. When someone needs to send the l...

Which is the first thing of queueing and load balancing? I've experienced load unbalance in 2*512K serial interfaces which are configured as load sharing per packet and cbwfq. If load balancing is after the queueing, load must be equally shared.

router 2611 is connected to the internet by using ethernet port to ISP. And it is also configured to allow vpn connection with remote clients. Issue:Client is now worrying that if the outside link to isp is down, all the users from internet can not g...

I have a PIX 506 firewall running Version 6.0(1) and have just received the license for VPN-3DES. According to the instructions provided from Cisco - "On systems running PIX OS 6.1 and earlier, a software image must be downloaded to the PIX Firewall ...

I would like to install the HP-OV-Adapter from the Device Fault Manager but then the CPU-Utilisation goes up to 100% and stays there. What do I do wrong? Is there a workaround for it? I usr HP OV 6.20 on Solaris 7/SPARC. Thanx for help.

My question is: How to forward udp port 3283 to a single internal ip address on the PIX 515? This is to allow an internal client to connect to an Apple X-Serve via Apple Remote Desktop.