Network Security

Hi. Looking to nat DNS messages flowing across a PIX.Seen the "alias" command, but this seems to be for DNS servers on the outside only: (ie. DNS reply is NATed on a transition from a Low -> High interface)whereas I have a DNS server on the inside, w...

Scenario: 1.Multihomed router having Serial 0 and 1 terminated into 2 diferent ISP 1 AND 2(1 for Failover). FastEthernet 1 and FastEthernet 2 has 2 different valid IP addresses A.B.C.D and M.N.O.P. We have to connect the PIX Firewall with only one Fa...

Hi, I have a setup where a PIX is installed between router and call manager. The router is connected to PSTN. But when I make a call from outside to inside only one way traffic is there, ie I can here voice from ip phone but not the other way. I trie...

When creating access-lists on the PIX is it true that the order doesn't matter?I thought I read somewhere that it handles access-list different from a router.

Hidoes PIX can only source static NAT or destination static too. Situation is that costumer networks use the same subnets which should translated like on routers with inside local-global and outside local-global to hide the real addresses of both sid...

Is it possible to upgrade flash on PIX 520? I need flash upgrade, in order to install PIX software version 6.x.Thanks in advance,Sasa

This might seems a dumb question but I'm wondering about the followings :- Given a out-of -the-box configuration of a PIX which has been upgraded to 6.11 and that is configured to allow only outgoing traffic , with no statics or access lists allowing...

Good dayi have a Pix installed in my network and it is up and running perfectly. I assigned a password for the telnet and yet can not telnet the device from the internal network. Is there any additional command to enable telnet on it from the inside?...

Is there any method to prevent unauthoried mail relay on a PIX 515 ?

We've been assigned only one IP from our ISP , which has been set on the outside interface.When I try to use the global command to enable the nat withglobal (outside) 1 pix-ip pix-subnetI get the error message that the NAT overlap the PIX IP.So how c...

Can someone tell me if the PIX ethernet will do a proxy arp?

Hi,Im running Pix 535 with failover box. I have 5 perimeter segments and in/out segments. Approximately how many servers can a segment carry? My Pix535 port has 100Mb speed. Any idea is of great help.

We try to implement PIX Failover using the existing LAN - both boxes are located in two different rooms which can NOT be reached via this serial cable (which is about 1.5 meters)Can anyone give me a good advice how we could realize the failover scena...

I am going to install a 4th nic in my pix classic and want to know if there are any issues I need to worry about. I currently have an inside, outside and dmz interface and am adding this 4th card for a 2nd dmz. The pix will auto detect the card and t...

Does anyone know what the commands are to allow inside access to pix firewall via a web browser.thanks in advance.mlj