Network Security

I have to PIXen running PIX Code 6.1(1). The secondary PIX is showing an interface in Normal (Waiting) mode. Now I have replaced the PIX and 4-port Ethernet card (PIX-525 team running 6.1(1) code.At this point, I am swapping the failover cable and po...

Hi everyone ! I've got a PIX 515E (ios version 6.2(2), pdm version (2.1) 32Mb ram).Enabling logging and monitoring results (both from pix itself or sending to syslog server) Pix stop responding and give me some messages like:PIX IS DISALLOWING CONNEC...

What happens to the existing connections when "clear xlate" command is issued? Thanks,Mohan

I am trying to verify where the problem is coming from, either our PIX 515 (6.2.2) or our Linux 7.2 Proxy server (acts as router also). The configuration on the old PIX was done thru telnet and I'm trying to recreate it thru PDM on the new PIX. Here'...

hi, i install ciscoworks2000lan and rwan on W2k Professional,it has works properly for a long time.but recently,when i login ciscoworks2000 from client and run topology service,it notice me:cannot connect aniserver,maybe aniserver shutdown or not run...

I am trying to set up our 1720 to act as a vpn server for our developers so they can access the DMZ I created with a second ethernet WIC in the router. I have udp 500 and 4500 open to the router and using local authentication. The client prompts for ...

Hi,I have a Cisco 1700 VPN router connection to a concentrator VPN 3005 located in overseas via a 256k lease line. The concentrator can ping to the Cisco 1700 VPN router ethernet port (private IP) during office hours 0900 - 1800 hrs but cannot ping a...

I am trying to establish a branch office VPN connection between a PIX 501 and a Nortel 1700 using IPSEC. The 501 shows that the tunnel is up while the Contivity says it fails. The failure in the Contivity log is Invalid ID information in ISAKMP negot...

Hi,Does anyone know of any tools (free or commerical) that could generate reports against pix logs? I'm looking for something that would generate a web based report. Like what webalizer does for apache logs....Thanks,Kevin

Once an Object-Group is defined and used in an access-list can the Object-Group be modified without removing the access-list from the interface?Sample:object-group network OutsideWebServers network-object host 10.10.10.10 network-object host 10.10.10...

We have an office that is connected via 512 managed T1 that has a 501 Cisco PIX using EZVPN connecting to us via 2 T1's load balanced and managed by our ISP which our Concentrator is connected to. Our Concentrator is running at 10MB half duplex. I no...

Hi, I have a setup in which my PIX 506 is connected to an 805 Router Via the Ethernet port.I want to replace my 805 with a 1760 but the FastEthernet port on the 1760 doesn't seem to inter-operate with the PIX ethernet Link. Does this mean I have to g...

I have a Cisco PIX 515, I currently have 5 VPN groups set up, Is there a way for me to monitor the activity for the last few days for a each VPN group? I am trying to monitor one of my VPN groups inpacticular.Also each of the users of the 5 groups ha...

Current network config:Border router, Pix 515, core switch with RSM. Running multiple vlans on core. Trying to figure out how to replace existing pix with a 515e with dmz's but not alter existing network configuration.Has anyone used the new vlan abi...