Network Security

When PIX is using nat for H.323, PIX changes source IP address of packet header in order to send it to the host in the internet. But H.323 protocol has source ip address in the data portion of incoming packet to PIX. And the destination host in the i...

Hi,I have seen pix 520 in the past but interested to know how the 501 is as a small office FW.Any others of recommendation. I know this is Cisco but does anyone sell other typoe as good.cheersPat

Can anyone give me an opinion on the PIX vs. the Symantec Enterprise Firewall? I prefer the PIX but I need to convince some others why it's better...

Hello All,I have a dmz interface running on network 192.168.2.0 and inside network running on 192.168.1.0. I want all of my devices on dmz to connect to devices on inside network. What conduit commands I could use in conjuction with the command below...

Is it possible to create lan to lan tunnels from a pix to a CVPN? Fromt a 3640 router to a CVPN 3030? Can you point me to the configuration guide for this? Thanks.

How do I generate an RSA key-pair for the PIX Firewall 520 V6.1(1).This seems to be required in order to use ssh to the PIX instead of telnet.I tried ca gen rsa key 1024 , which I found in this forum, but it did not work at all -> ca is not known.Wha...

I have a shiny new Pix 501/10 user/3des. I have a remote site with a dsl connection that has a dynamic ip address from the ISP. I want to do a site to site ipsec 3des ike preshared keys tunnel to connect to my Concentrator 3015. I have the Cisco samp...

i am running pix 5.3(1) and i recently changed all conduit permit statements to access-lists. the problem i am now having is that when i try to access my ftp server on my internal network from outside i can not get through the pix. this setup was wor...

Hello all.I'm trying to configure a Pix 520 with 4 interfaces, 2 of them connected to different Vlans, and the other 2 connected to different ADLS routers atached to the internet.We pretend to 'save' firewalls by means of using less firewalls with mo...

Has anyone ever had success setting up authentication with the MS Win2K IAS service for PIX remote access VPN? If so, could you point me to any docs? Thanks. Alex

I upgraded pix 525 IOS ver 5.2(3) to IOS 6.0(1).The DES feature was disabled on the PIX.The show version commands shows the activation key to be activated to enable the DES.During upgrade of the IOS I was not prompted to enter the key.Now i have IOS ...

Is there a way you can configure the pix to ping the outside interface? Not that you wouldwant to do it..Thanks

Anyone knows when this will be relased, so we can have LAN-based failover....and thereby have real redundancy ?

Here is the scenerio I need some 'eyes' on...I've got a Pix 515 with the following ip addresses:ip address outside 192.168.0.171 255.255.240.0ip address inside 172.16.22.170 255.255.240.0I have an ISP provided router with an assigned ip address (inte...

I do I restrict the services, protocols, and host addresses that inside users can assess on the DMZ interface?