Network Security

My inside network uses a NAT pool to go to the Internet. However I have an external site which will only allow access from a predefined address. How do I allow all users going to this one external address use the same (predefined) address and the n...

Does the pix log traffic in some buffer internally that I can look into or Do I need to configure logging and point it to a syslog server.If we need to do the second part Will it affect our utilization or what percentage will it add on our utilizati...

Dear All,Here's my problem:I have a cable ADSL modem supplied by my ISP.The ethernet cable is connected to ethernet 0 in my cisco 2621.Router Ethernet 1 is directly connected to ethernet 0 (outside) of my pix 506EPix's ethernet 1 (inside) is connecte...

We have a client with a network of about 50 users. The client is connected to the net through DSL and has given access to about 25 users of the same for mailing or browsing. The client wants a basic security implementation as they fear that their sit...

Running PIX 515 with one DMZ. Problem is I cannot initiate any sessions from the DMZ side. Ping is the really strange one. I cannot ping from the DMZ to inside, the packets do not hit the debug packet dmz. Packet sniffer shows the requests being...

I'm in the process of deploying an SNMP infrastructure for our network using OpenNMS, and am wondering if I should use either traps or thresholds (or both?) to detect Cisco events such as high router/switch temperature, high CPU usage, etc. I've alw...

How do I erase the configuration, and rebuild the Firewall?

Can you sync time on a PIX 501 (v6.1) with a NTP server? If so, what is the command? Thanks,Rick

From the PIX firewall documentation, it was mentioned that the "clear xlate"command should be used after changing or removing the alias, access-list,conduit, global, nat, outbound, and static commands.Question: Does this command clear (or refresh) th...

Just installed standalone vms 2.1 and attempted to import devices into IDS MC and VPN Routers MC, but I get errors. The IDS MC error I get is importing configuration files from the sensor Could not find version instring "Unknown version". I followe...

Hi, is it possible to use a smart-card (or token, like aladdin e-token) to authenticate a vpn on a pix using the default VPN client (l2tp/ipsec) coming with windows2000/xp ?It seems that EAP support is required and then smartcard/token auth is possib...

I have two old 515 pix firewalls and would like to upgrade them with the earliest software version. Actually when I give a "sh ver" in each, I get this information, but I`m not sure how to read how much flash it has. Also if I need a flash upgrade, w...

I have a PIX 506 with two interfaces. The PIX is only used between to private network segements for some political reason. Here the description is:PIX outside interface is on 198.199.199.0 network and PIX outside interace address is 198.199.199.1 c...

Does anybody know a good book about cisco works 2000 (on solaris)? If so please write the isbn so I can order it. Thanks.

I know that a cluster member will send the traps to the cluster commander but is there anything I have to configure (trap wise) from the member side?My config is as follows from the cluster commander.conf t logging on logging 1.1.1.1 logging trap inf...