Network Security

Hi.How can i implement connection tracking acl on pix firewall?Like cisco ios "access-list permit ip any any gt 1024 established".Thanks.

Hi!Is it possible to change the default TCP SYN timeout from 2 minutes in PIX?Oleg Tipisov,REDCENTER,Moscow

I have two problems around LAN based failover which I would be grateful for help with I have 2 PIX 535s , 1 with full license, 1 failover license. I have upgraded both IIXs to 6.22 and are configured for LAN based failover, which seems (superficially...

Hello,I have a pix 501 with 50 hosts license. How can I see how many of those inside hosts are using the firewall in a given moment?Thanks

Our school has purchased a 525 with version 6.1(4) code on it and it will replace a pix 520 with version 5.0(1).When I installed the exact same config on the new pix, email and our proxy server were not working. Both are natted. All other non natted ...

I am facing some problem with the configuration management.From last few days the configuration management is not picking up the configurations from the routers,if i update manually then also it is not doing so.Help needed!!

(Head Office Network) <-> VPN 3030 <-> (Internet) <-> PIX 501 / PPPoE / VPNC <-> (Branch Network)I can ssh and pdm to the dynamic public address of the PIX.How can I tunnel to the PIX inside address? i.e. Use telnet to the known private address inste...

Hi everyone,We're having problems downloading POP3 mail from our ISP and I'm trying to look at all avenues. It appears that during the retrieval process, there is a timeout and the message fails to download. The only messages we are having problems w...

Have a situation wherby a server and client exchange data on tcp ports 3299 (client) and > 1023 (server). They are hosted by different service providers with a gre tunnel serviced by static routing running between the two provider's border routers.Th...

I have a Pix 525 running 5.2(5) code in production. We purchased another 525 with failover license only, to create a failover set. The problem is that this pix is running 6.1(2) code. I don't believe I can configure them in failover mode unless they ...

Hi, does anyone has a sample configuration on how to configure bi-directional NAT for overlapping private ip address using PIX firewall version 6.2 ?ThanksDavid

Anybody has any input on how to keep a VPN tunnel up and running even though there's no interesting traffic ? I'd like to get the IPSec and ISAKMP always up. Is that possible ?

Hi,we have a PIX 515 - Version 6.1(2) - in use with one external und 2 internalinterfaces. Because of our technical structure, there are connections from outside, which go trought one internal interface in but the answers go throught the other intern...