Network Security

Friends,I have the following config:PIX 525 (5.3)fixup protocol ftp 21static (inside,outside) publicIP privateIP netmask 255.255.255.255 0 0conduit permit tcp host publicIP eq ftp anyconduit permit tcp host publicIP eq ftp-data anyI think those are a...

I am looking to deploy a PIX with the inside interface facing outside to allow for DHCP addresses to be assigned to Wireless clients. I will be deploying ACL's to restrict access on both interfaces, but am looking for confirmation that there will be...

when I add pix to a network,it complains "your ip address can't be the same to your gateway address" when I set its outside interface ip address using 'dis conver interface settings',but I can manually set it .what is wrong ?for example, when I add p...

Hi,How can I log who connects to my Cisco 827 (C820 Software (C820-K9OSY6-M), Version 12.2(8)T4)I tried "vpdn logging user" but no success...I can only see when the Virtual-Template interface goes up and down(logging with syslog server)Please help.P...

I can't seem to think of the best way to phrase this so please bear with me.If I put a fluke on a network it appears to show that 192.168.255.255 is the address the pix is using. There are two 515 with failover between them (if it makes a difference...

Dear all,I have failover 515 Pix, the logging configure as follows:[logging onlogging standbylogging buffered debugginglogging trap debugginglogging host inside 210.177.52.33]in pix menu, if logging standby will created doubles the amount of traffic ...

When using the "fixup protocol SMTP 25" command you tell the PIX to just accept standard SMTP-commands.Now when many uses ESMTP, would it not be possible to integrate support for this in the pix (i.e fixup protocol ESMTP 25) ?Do anyone know if Cisco ...

I have a old PIX 515 with 4.4 Software Image that I would like to keep before I upgrade the PIX IOS on it. Can you backup the image file?Thanks for your time.Nick

What methods are people using to automatically backup PIX configs? I'm putting together a script to SSH to the PIX and issue a 'write net' to a predefined tftp server. However, this is difficult and there are some issues in doing this.What are othe...

Hi All,I have a client wants to create Real server On W2k server behind Pix firewall and I am trying to make the outside real player to contact the inside server but I failed..Is there any extra commands more than the following commands on the PIX to...

I am in need of information pertaining setup of DMZ on PIX 515. Currently we have a Web Server on a single ethernet interface. We need to add a second web server in a DMZ. My question is: Do I have to install a second ethernet interface for the s...

Hi,I have upgraded the PIX 525 from version 5.3(2) to version 6.2(2). The upgrade was successfull but I have noticed that the commandisakmp identity hostname was no longer in the config in 6.2(2). Correct me if I am wrong, I do not think the comman...

After upgrading from 515 PIX to 515E PIX what would you recommend as the best tools available for testing the success of the installation on which the expected performance are better or a least the same as it was before the upgrade?

Can anyone tell me how this pix works with the 10 or 50 user limits? Does it learn the mac/ip address and only allow the first 10 through? If so then what is the time-out for the clients after they disconnect? and is there a way to change this?Can i...

Hello,I'm trying to use two PIX 525s in a failover configuration. But failover box is always in the "failed" state. There's no problem with physical connections (both ethernet and failover ). I'm restarting the fdailover box, issuying "failover reset...