Network Security

If access lists are disabled on the PIX Firewall, does that mean all traffic is blocked?

The PIX currently is running PIX Firewall Software version 5.1, and I need to upgrade it to version 5.3.

I am running PIX Firewall Software version 5.0.3. For example, can I do:<pre>nat pool 172.30.0.0 255.255.0.0 </pre>but exclude: <pre>172.30.16.0 255.255.255.0</pre>

I want to upgrade my PIX515-UR from IOS Version 5.2 to 6.1Do I need a new 3DES license, or will the existing one work with the new IOS version?Wolfgang

I want to stop traffic for one ip address explicitily.I used :conduit deny tcp host my_ip host outside_ip eq 80 anybut it didn't work.What else can I try?

My problem is a static connection from the PIX to the ISP after configuring PPPoE with VPDN on the PIX. I can Ping the ISP DNS Server from the PIX and from the User, too -- but the connection never ends.What configuration parameter do I have to use, ...

Well, My PIX501 just come in the mail today. I first read all the documents that came with it, but nothing mention about the 3des license that is included in my purchase. The box said that the 3des key is included, but I dont see it anywhere. I bough...

"show cpu usage" is for PIX version 6.0 or better. Is there a a way to see how much load is on the CPU on a firewall running code under version 6?

Is it possible to telnet into a PIX and then telnet out to a router from the PIX

I have an interface on my PIX520 assigned to my RAS dial up network. Presently, I have all ports opened up for traffic coming from that RAS interface to my inside. I need to determine which ports I need to keep open to allow my dial up users to work....

I made a degrade for my pix 525 IOS to version 5.0.2 for both primery and failover , after that i note that the failover always the active pix and not the primery pix , if i switch manulally to primery pix it work but the network is very slow and som...

Peoples,got an *old* PC based PIX (PIX-520?) which is already maxed out at 128 meg DRAM, but only has 2 meg of flash. We want to upgrade the flash, so that we can upgrade the OS (already at the highest that it can go to). Any idea who would have the ...

In our organisation I permitted only DNS SMTP WWW & POP3 . But I find that one user still use the irc. What's the problem ?

I can not get a copy of my PIX config sent to our TFTP server. Other routers on our LAN can.TFTP server is TFTPd32 by Ph Jounin running on a WinNT 4.0 SP6PIX is configed like this.tftp-server inside 192.20.6.8 pixwcimageWhen I issue a 'wr net' of cou...

Hi folks, I have an issue with the ftp fixup feature on passive ftp. The PIX 515 (6.1) has private addresses on the inside and outside. NAT for all the lan clients is done not by the PIX but by the edge router (a 2620). LAN = PIX = 2620 = internet I ...