Network Security

On a PIX what does cable status Testing mean?

In a failover configuration, if I do a show fail on the active PIX, I see thisfor the cable status for the insideinterface on the secondary host:Interface Inside(10.0.0.2):Testing.On the active PIX the status is normal and if I look on the secondary ...

HTTP->HTTPS redirect at PIX?

We have a solaris box behind a pix firewall. We would like to not allow port 80 traffic to the server for security reasons and only allow 443. But if users in advertently go to the http:// URL instead of the https:// - they get a page not found err...

Stopping http downloading o a pix

Is is possible to block http downloading on a pix 515 or do I need a 3rd party prorgam??

PIX not NATing

I am trying to get my PIX to NAT addresses from a DMZ interface out the outside interface. If I use a block of addresses from the subnet of my outside interface it will not NAT them. Here is my pertinent config info:ip address outside 10.1.116.2 25...

3005 VPN Client Time-Outs

My Cisco 3005 VPN Concentrator keeps timeing out for some connections. When I look through the logs the only thing I see is:626 07/03/2002 00:06:30.890 SEV=5 IP/50 RPT=192 Headend received TCP ACK pkt from client 68.38.72.43, TCP source port 1195627...

What is "sysopt connection permit-ipsec" in a PIX for??

If I remove that line what will happen?I want to be able to have an ACL applied to the inside interface of the PIX to control what type of unencrypted traffic is allowed inside. Do I need to remove the 'sysopt connection permit-ipsec' command in or...

pix firewall Syslog server

Anybody knows about PIX firewalls Syslog server?

maximum memory on a PIX 515

What is the maximum memory I can put on a PIX515?

What is the <names> command used for in the PIX firewall?

I noticed that 2 of our PIX firewalls have a difference in the configuration; one has the "names" command, and the other has "no names". What is this used for?

Does Disabling Access Lists on the PIX Firewall Block All Traffic?

If access lists are disabled on the PIX Firewall, does that mean all traffic is blocked?

pix and irc and icq

how to prevent users in a campus from using chat programs with a pix firewall. Do you know the ports of icq and irc.

PIX Timeout

Oracle connections through our Cisco PIX 515-UR are timing out. Are there any commands for timeouts on the PIX that might affect an Oracle connection?

Can you add a static route for the inside interface of a PIX to point to a router on the same inside network?

When I add a static route on a PIX for the inside i/f, to redirect traffic to a router on the inside network, the traffic doesnt route to the router. e.g. a PC has DG=192.168.1.254 which is the inside i/f of the PIX. Its trying to reach 192.168.2.0 n...