Network Security

How would I conver the following into "pix language"inheritance=1authprotocol=2authalgorithm=2authkeysize=128encrprotocol=2encralgorithm=4encrkeysize=168compression=2lifetimemode=1lifetimekbytes=10000lifetimeseconds=28800gatewayaddress=ikephase1mode=...

Does anybody know how to configure the microsoft Internet Authentication Service IAS to interact with an access-list from the PIX.

Hi all.My Customer has a Pix running PIX Version 5.2(9) and cannot upgrade the software because a Token Ring interface on the firewall is needed.Given that the "show cpu usage" command is not available on that software release, how can I calculate an...

How many IDS type messages are used in PIX ? And can you please tell me their names ?

On PIX515 with a DMZ port running 5.2(9) everything is working as far as traffic flow in and out of the proper interfaces. I am upgrading to, or rather attempting to, 6.2(2) in order to evaluate N2H2 content filtering. 6.2(2) is required in order t...

In my network I have a PIX-520 with 2 interfaces ( i,e inside and outside ) I am using real ip's on the inside means using them without NAT. I want my traffic generated from Inside should go to internet via router placed on the outside interface of P...

How many IDS type messages are used in PIX ? And can you please tell me their names ?

I have a PIX 506E firewall, this device have only two ethernet interface : one for the lan and the other one for the internet. I would like to add a third interface on the PIX without having to change my PIX. So my question is : can I configure a sub...

I am configuring a PIX 515e Software Version 6.1(4) and would like to give access to all traffic accessing the DMZ. I thought this would work: ("dmz" is the interface name)conf taccess-list acl_dmz permit ip any anyaccess-group acl_dmz in interface d...

I have just recently taken over our PIX firewall and have been experimenting with the logging features. I am currently logging up to Warning Level, and have seen a lot of activity that leads me to believe that several people have attempted to get pa...

Is it possible to have a one global IP address to be statically mapped to two separate IP adresses (one of them on the inside and one on the DMZ) by specifying the requested port? I know that you can map multiple global IP addresses to a single inter...

Hello,I am having difficulty with several vendor/distributor offices that connect with our mainframe throughout the day. The distributors are using the VPN client, release 3.5.1.E. They connect to our PIX 525s running 6.1(1). The distributors that...