Network Security

At the start of the day, all the systems can get to the internet just fine but as the day progresses, less and less systems are able to connect. They have only 10 systems that would connect to the internet and by the end of the day only 4 or 5 are ab...

Apparently NAT is keeping our users from making connections to external servers using Hummingbird's Exceed X-window client. The port in question is 6000, and simply opening a conduit to the global pool for that port doesn't solve the problem.Anybody ...

How are group policies usually put in place with pix? For example, let's say I'm a software company. I've got 14 devolopers who need access to things in the DMZ that no one else would (such as SQL, and who knows what else). Also, Finanace uses a spec...

I updated the PIX 501 to 6.3.(1). I still am unable to VPN from behind the PIX 501 to corporate PIX 515. If I move the W/S in front of the PIX I can VPN in using Microsoft client [pptp]. I get a 721 error message [microsoft]. How can I get pptp to wo...

I have a PIX 501 with a server on the inside that is accessible from the outside with the routable IPonly, using the static command;static (inside,outside) <outside IP> 192.168.0.101 netmask 255.255.255.255 0 0There are inside users that also need to...

I need some direction or documentation links on how to pull-off the following on the PIX firewall:1. Terminate VPN traffic on PIX (accomplished)2. Filter decrypted traffic with access-lists on outside interface (accomplished)3. Forward/Route decrypte...

I am looking at the design for a web site.Currently I am looking at a pair of perimeter routers, connecting through a pair of 2950's to a Failover pair of Pix's. These connect via a pair of 2950's on the internal network to a tollerant CSS11506 conte...

I know that "outside nat" exists but have not seen any possibiltiy to do an outside nat based on the destination address. Is it possible?Example: client on outside network accesses a server in the internal network. If outside client tries to connect ...

I have a user that needed pop3 access to our exchange server behind the PIX 515. I allowed access to port 110 and disabled mailguard on the PIX in order to accomplish the task. My question is what are the ramifications of disabling mailguard? How muc...

I have configured my PIX (6.3) running PAT to allow a PPTP session from remote Win2K client. The client is authenticated by the PIX, receives it's IP addresss from the pptp-pool and can even ping the internal Win XP Pro machine. So far, so good.The p...

hello, the scenario is this:I have a user in my network that needs to connect to a VPN server in the Internet, his VPN uses l2tp/ipsec, he uses the windows 2000/XP VPN Client. There is a PIX 535 6.2(2) between the user and his VPN server.the problem ...

Hi !I have a small problem ! I'm using a cisco 802 for a Vpn but I was wondering if there is a problem if I use Dmz at the same time. I've got servers that use the vpn but I have, on the same network, a camera server that has a special application th...

We are adding a second PIX 515 with a FO license as a failover device.I am concerned about what will happen in the event of a failover. Specifically, the documentation says to not use a FO device as a standalone because it will automatically reboot o...