Network Security

I'm trying to permit traffic from a lower security interface (i.e. DMZ) to a higher security interface (i.e. Inside). I want Servers on the DMZ to connect to Servers on the inside network using the inside Servers IP address, not a NAT'd one.I can do ...

I am trying to load pix611.bin on my 520. It has 192MB of memory and the upgraded Flash card. It times out everytime. I did not have any trouble loading 5.x versions. Does anyone have any idea?

Before you even start in on me, I know the PIX can be used as the VPN device but I prefer the management options for the Concentrator. My question is, how hard would it be to have a 3005 with a public IP address sit BEHIND a PIX 506 as opposed to par...

I have a PIX515, with three interfaces: outside, DMZ, and inside. Their is a current configuration in place with the exception of the DMZ, will install shortly. A new webserver will sit on the DMZ with nat to the server. Do I setup the DMZ interface ...

We have a Cisco Pix Firewall ( 2.7 we think ) that is limited to 256 connections from the inside to the outside. We have occasionally seen it run out of connections. For a moment or two you just can't get out to your favorite web site. In the last fe...

I am curious to find out how other users are managing their PIXs for your PIX to PIX VPN tunnels to remote sites. What are you using to access the remote PIX if the VPN tunnel is down? We're trying to find a secure solution. Any suggestions would be ...

We are using the IDS capabilities built into the pix. I know this is a limited set of signatures but my question is: Is there a way to enable only the 4000xx syslog messages on the PIX so the syslog server only receives those messages without getting...

I currently have a stateful failover PIX-525 solution deployed using 5.2(5) code. I would like to upgrade to 6.2, has anyone tried this yet...is it a straight forward upgrade or is it more involved.

Has anyone had success installing one Exchange Server on a Pix DMZ? Cisco has examples of installing two exchange boxes through a Pix, one inside, one outside but is it possible to install one exchange box on the inside? This would save on cost of du...

Our Database group is asking me if our PIX supports SQL*Net Proxy? I dont know what is it. Document says Checkpoint Firewall-I, Eagle, Raptor, support it.Thanks.

Hi , I am seeking PIX 501 specific info on Port forwarding with the 501 where the outside address is configured via DHCP. I can't work out from available Cisco documentation how to allow outside access inside to specific ports. It all discusses stati...

HiWhat i need to run a Pix Failover 525 series into a Pix, i need another activation key?, can i do it with software?thanxDas caibil

by sniffing network traffic i realized that my PIX firewall 515-(software version 6.0(1) ) sends TCP Reset packets to the connection requests that are denied by the access-lists. Does anyone know how to change this feature? I want the firewall to dro...

Just incase people dont bother looking at the PIX site, 6.2 is out yay!!!But it doesn't fix the RPC bug *sigh*--Dave

I've seen several references to the use of MS IAS as a RADIUS server for PIX VPN authentication. I think this would be a good solution for us, but I'm wondering if anyone has followed Cisco's instructions and could relate their experience with instal...