Network Security

Hi,I have a scenario where I don't want to do any address translation. Is it sufficient to use only a static command e.g.:static (inside,outside) 10.40.2.0 10.40.2.0 netmask 255.255.255.0 0 0for traffic both ways (outside to inside, inside to outside...

I have a pair of redundant PIX firewall 515E, running unrestricted and failover license respectively. I would like to purchase a spare PIX for immediate replacement during failure while waiting for RMA. What license should I get ? Can I get a restric...

I have a fully functional PIX environment utilizing the VPN and DMZ functionality of the PIX. I now have to allow Exchange traffic via the internet. I started off making our users use the vpn client to connect to our exchange server, but it does not ...

Hi, I would like to know if is possible install the IDS host sensor v2.5 on the same machine where i previously installed the VMS 2.1 bundle (CDone,RME,IDSMC,PIXMC...),and also will the IDS host sensor integrate with it?Will also integrate with monit...

My customer has a C3640 with IOS 12.1(5)T9, Is it possible to configure Class based Queuing on a IPSec tunnel(ESP mode) using this IOS, if this is not possible would it be possible to configure a Priority Queuing on a IPSec tunnel. Or do i need to up...

Hi, I installed PFSS on an NT machine, so the PIX is able to send logging information to that syslog server.Is it possible to send the output of debugging also to that syslog server and if so, how should this be done?I want to debug the setup of an I...

Hi, Does the output of "show connections" command show the active connections or a history of connections established through the pix? For the purpose of trouble shooting i wanted to see the live connections through the pix firewall on a real time ba...

I have configured failover PIX520 with public addresses for both inside, outside and failover. Also with not natting for the addresses. But I have not configure static mapping ie static (inside, outside).Please, can this be the problem?

Hi there,How can I edit an existing ACL entry on a Cisco PIX.Do I have to remove the existing line first ie,no access-list acl_one permit tcp any host 20.1.1.1 eq wwwand then put the new entry in?Thanks for your timeDaniel,

Hi I have a PIX 515 UR IOS version 6.1(1). I installed PDM 112 and it went ok. I tried to connect to the device via https://IP_address and i was not able. what would be the problem? do i have to restart PIX? or i am missing somethingthx for your time...