Network Security

We have a WAN with a PIX and (2) 2620 routers in the following config...Internet<--PIX<----LAN1----Cisco2620<----HDLC Serial-----Cisco2620<---LAN2Currently hosts on both LAN1 and LAN2 are able to talk to one another only after adding entries to their...

I am trying to use a VPN tunnel to allow a workstation to periodically appear on a real world IP address on the external side of a 3005. I have set up appropriate group and address pools. Once connected the client cannot see the internet nor can ...

I am changing ISP's soon and would like to configure my PIX 515 with the new range but keep the old range in place and working. The reason is the site where the PIX is has no on-iste support so I need someone to unplug the PIX and replug into the ne...

Does anyone know if Cisco intend building support for trunking on the PIX firewall , if they do when?

HiI have a Pix 525 with Failover, when I make a "wri mem" on the active Pix (via consol), I get the message "Attempted to free nonchunk memory, chunk .., data..." (The Pix has plenty of free memory???).Do anybody know what's the meaning and how can ...

Hi, I have configured a VPN tunnel from a PIX to a Cisco 3640. The problem is I can only initiate the tunnel from the PIX side. Once the IPSec SA is created I can ping from either side, but I can only ping from the PIX side initially.I've triple ch...

Cisco.com has 3rd to 5th edition migration tools, but none for 4 to 5.How is this done? What tool? Where obtained? What URL?Thanks!!

I have a customer that wants to upgrade from a GUI based platform to a 515. My understanding is that Checkpoint policies are GUI based. Is there an easy way to import them into a new box, or will I need to do a glare and stare and just manually type ...

Hi All,We have a number of Cisco 3000 Concentrators which are doing VPN beautifully. But at a couple sites we want to enable NAT for the PCs inside. I've tried everything to get NAT working out and the best i can get is to ping out. No surfing and...

need a configuration sample on pix to let IDS traffic go though pix. The director is inside a pix firewall and the sensor is outside the pix.

Hi,I'll be doing a "conduits" to "access-list" conversion for some PIXs with version 6.2. I`ve looked in the documentation and technical tips and there`s not much configuration examples and guidelines. Has anybody found a good document on the subje...

I have jsut setup a new PIX-515 (moving away from proxy). The internet rtr is a bay router.We noticed that for any existing outside IPs that we migrated to PIX, will not be accessible from the Internet. We can access it if we are locally attach to th...

I just upgraded a clients' pix from 6.0.1 to 6.2.2 sw and just for kicks, we went to a few online scan services such as grc and sygate to run a few scans against the PIX. Prior to the upgrade, any port showeed up as stealth or blocked. After the up...

I need to design a VPN network around a PIX 515E hub site and IOS routers at the remote sites. In the past, I have designed VPN networks using only IOS routers. I like to use IPSec encrypted GRE tunnels so that I can run RIP over the VPN and also s...