Network Security

I have any server ( DNS, SMTP, www) in inside interface with private IP address.With static command i traslate public address in private address:static (inside,outside) 200.21.225.243 mail netmask 255.255.255.255 0 0 static (inside,outside) 200.21.22...

Would appreciate feedback, I have configured a couple of pix configs before with little difficulty. Im running into problems. First of all, I've read conflicting articles......Can you have one public ip on the outside then nat on perimeter then have ...

How do I keep a log of the PAT/NAT translations running on a PIX for a future analysis?I have tried to log it with syslog and SNMP MIBs but I couldn't find the right object or line in the syslog.The informations that I am trying to get are the same a...

I was wondering if there is a power failure, will the PIX 515 fail opened or closed?

It is my understanding that you can NOT use the PIX to route between two subnets connected on the same inside interface. The PIX will not take receive packets and send them out the same interface that it receives them on. In other words, the PIX will...

I have a need to monitor the internet usage of a single workstation with a static ip address. Is there an easy way to do this? I have a PIX 515e. Any help would be greatly appreciated.

Hi,We are currently testing a PIX 515E with 6.2(2) software.Now i have had this problem 3 times that PIX "inside" and "outside" interface would be shutdown automatically without any SYSLOG message being logged.If i look physically at the link , both ...

We are getting ready to deploy 6 VPN 3000 in sets of 2 for fail-over. As part of this product we purchased VMS 2.1 under the impression that it provided a centralized management console for multiple VPN 3000 concentrators. However, I cannot find any ...

I'm trying to make the IDS shun. In Administration>Manual Blocking I can see that the Net Device is in "Password Sent" state. On time to time I see some ip addresses as it they were being blocked in that url. But, a "show shun" or "show shun statisti...

I have a situation where I utilize CacheFlow devices to serve up web content for a high traffic web site. In considering new secure architecture - I have two options, creating two seperate DMZ segments - one for the redundant CacheFlows and another ...

Hi,I would like to be able to telnet to my PIX from the outside connecting via PPTP. I know that I can do this with an IPSEC connection but can I with a PPTP connection, if so where on CCO can I find configuration examples of this?Thanks in advance,...

Hi,I would like to know whether we will be able to configure IP directed broadcst, or helper address in PIX. The scenario is something like this.There are two networks connected through internet. At one location we have PIX 515 (PIx version 6.2) an...