Network Security

Hi!Long ago, in 1999, somebody pointed out that "selling routers with no CRLsupport is like selling a car with no brakes".Has it been changed since 1999? What do we have now?We are still waiting for good documentation from cisco, waiting for support(...

Hi,Is it possible to establish GRE\IP (no IPSec) between a Cisco IOS router and PIX ? Is there any document i can refer to ?Regards \\ Naman

Hey all,I know that this is a hard and broad question to answer, but I am trying to think of something to tell my client other than "uhh..I don't know". My PIX 515 recently "locked" up, leaving all of my hosting clients down. I was unable to ping the...

How long will a secondary PIX in a failover bundle pass traffic while the primary is down? Will it timeout?Thanks,RJ

1. After alert events are pruned into the fold "AlertPruneData", they will become some "txt" files. Which application can I use to read the events from these txt file?2. For the default alarm pruning, it is stated in the document only the events in t...

is there a command to show the free memory of a Pix (where store the pix configuration)?Thanks

Hi, I have cisco pix 515 with three interface cards. I have configured one as outside and the other as inside and i am hosting all my webservers,mail servers in the inside network. The internal interface card is connected to Cisco 3640 Router and the...

I have a VPN3000 (ver 3.5) at the hub site with PIX 501's deployed remotely. Remote sites can ping the hub site but not another remote site. I have enabled RRI (but not RIP or OSPF) on the VPN3000 and see the routes in the routing table. Pings timeou...

Is there any way that I can use my RIP learned route from my outside interface and proagate that default route out my inside interface? The inside default command will just send a default route to my inside router even if the PIX does not have a defa...

One of my clients wants me to use a VPN connection through his PIX Firewall to work on his computers.From reading the documentation, I have been unable to determine if the PIX Firewall can be configured to enable me to have local LAN access at the sa...

Hi,I am using NAT to resolve DNS queries originating from our DNS Servers.I am trying to understand the difference betweennat (<interface>) 0.0.0.0 0.0.0.0ANDnat (<interface>) 0.0.0.0 0.0.0.0 dnsBoth seem to work. What is the difference between using...

I have a number of PIX firewalls and have encountered a problem with static address translation a number of times, although not consistently.I apply a static translation to an machine using the command:static (inside,outside) 193.125.1.1 10.0.0.1 net...

Hi all,I have tried to configure CBWFQ and PPP Multilink on an ISDN BRI interfacewith DDR. The dialer load-threshold is set to 1 so that both b-channels of the BRI interface are connected when the link comes up.I need a traffic class with a minmum of...

Here is the main focus of what we want to do. We want to be able to allow remote-dial-in and SOHO users (50 or so simultaneous) access to the corporate servers behind the PIX firewall. The Remote users are connected to the internet via Cable, DSL, Sa...

We have a Pix 515. We want ot VPN into other customers with the 3.62 client. The IPSec connection completes but we cannot ping or access any hosts on the remote network. Is there anything that needs to be done on the pix to allow this? I am using NAT...