Network Security

Is there a possibility to configure policy based routing on the pix device like on ios routers. I had to forware packets to different default gateways according to their source address. Thanks for any help.

Hi,Is the PIX 501 running the same OS than the PIX 506 ?I was looking at the PIX 501 Data Sheet and it says that PPPoE is available ( Q1 2002 ) .But i didn't find any PPPoE related command in the PIX OS command reference .I want to plug the PIX on ...

What is the best way to disable NAT between two interfaces on a PIX (6.2), for example between the "inside" interface and a (lower-security) "dmz" interface?As far as I understand it, there are two methods, both of which appear to achieve the same ob...

I am trying to upgrade the code on a PIX 515 from 4.4.7 to a newer version.I downloaded code 6.0.4, set up TFTP server, went to console and tried "copy tftp flash" and it does not recognize the command.How can I get this box upgraded to newer code wi...

I have a problem with PIX 520.This is what happens when i boot pix and once i get a prompt.console hangs.....***********************************************************************Finesse Bios V3.3Booting FloppyLoading from Flash128MB RAMFlash=AT29C0...

We are setting up a load balancing design, and I noticed the only routing protocol the Pix supports is RIP. I know in 6.3 it will support OSPF, what about EIGRP? Any information would be extremely helpful so i can anticipate design changes.this is so...

What is NAT Transparency, and why doesnt it work with the PIX, are there any work arounds for this?If I configure a PIX to receive vpn connections from outside, do I need to open any ports or protocols up on the outside interface or should it just wo...

Hi !I am totally confused with this NAT0 stuff !Could anyone tell me which command i should prefer:NAT 0 ( with access-lists)orstatic (inside,dmz) IP(inside) IP(inside)to disable NAT from inside to dmz - respectively from the dmz to inside.thxhans

Hi,I'm in the process of migrating a datacenter from one location to another. Since there would be an overlap period for production during transition i need a Pix-515 ( min 64 MB RAM, 16 MB flash, 3 -DES licence and 6 interfaces) with or without fail...

Each morning our user community remotely connects to the VPN Concentrator, establishes a secure tunnel, acquires a dhcp IP address and continues to work. One of the IP addresses is coming up in the syslog on CiscoWorks 2000 %RCMD-4-RSHPORTATTEMPT: At...

Hello,Does anyone have a recommendation for a program to analyze my PIX firewall logs? I'd like to make reports showing activity by protocol, by user, etc. If VPN 3005 logs can be read as well, then all the better. I'm not looking for anything huge o...

Hi all, i have a problem here, my system is using solaris 8 and i have just installed Resource Manager Essentials. When i access my server thru my web browser and i click on the general setup, an error reads Database is down. Internal error message. ...

Is it true that in order to run EIGRP between site-to-site VPN, One must need to run GRE because what I read that IPSEC doesn't support multiprotocol?But then, my headqurter has PIX Firewall, where I was thinking of terminating 8 IPSEC tunnels from t...

Ive got two PIX's telnetting to each other fine, but my third PIX that I just placed, I cant get to. Here's my configs:(515e at location A, can telnet to an existing 501e (location B) without problems, but not to the newly placed 501e in location C)...

HI I have two questionsI am hoping to use a PIX or VPN concentrator to host only vpn connections at the central office. I will be connecting sites up using a mixture of pix, vpn concentrator, and router. Is it possible to pass routing protocols throu...