Network Security

Does anyone know if Cisco has a recommendation for the number of rules/access list lines per firewall? I know within Check Point, there is a recommendation for no more than 50 rules per firewall within the Security Policy Rule Base. Looking for an ...

We have a subnetted class C as our inside network on a pix running 6.1. We are attempting to communicate with another subnet of that same class c on the outside, with no success. Does the pix recognize classless routing? If not by default, how do ...

I am trying to figure out the spare parts required to maintain a PIX 525 firewall.If we order PIX 525 chassis, what are the items included in that ( ie power supply, main system board etc ) ?

Hi,the cwsi-start failes with the message: "could not reconnect to osagent". The Installation contains the following Software: WindowsNT4-Server (SP6a), HP Network-Node-Manager 6.2, RME2.2 / CWSI 2.4. The information from osfind.exe is: osagent works...

In a situation where a WAN router sits on the LAN (Inside I/F of PIX), is it valid to make the PIX the gateway for the network and define internal routes to other sites. I've tried this on a number of occasions with mixed results, and usually end up ...

Hi All,Does anyone have any problems of accessing their remote PIX via the VPN or even remote PIX outside interface while the L2L VPN taken place ?I'm currently having this problem. I can't ping nor SSH, PDM at all to the interfaces of the remote PIX...

We are running into a problem between our Pix and internal website. Internal users will suddenly lose the ability to resolve the website. You can do a clear xlate and everything will go back to normal. Has anyone ran into this before? Is this a globa...

Is it possible to permit/deny more that one tcp/udp port on the same line in an access-list. For example, could I state:access-list acl_out permit tcp any host X.X.X.X eq 22 23 80to permit SSh, Telnet, and HTTP. (PIX software version 6.1.4)

I am learning how to setup a PIX failover configuration using two PIX 515 and was wondering, on average, how long it should actually take me to configure this?

I confiugred DHCP server on VPN3002 and clients successfully learing the IP address but cannot get DNS address even manually configured...connectivity,VPN3030--internet--Firewall--VPN3002--clients.(**VPN3002=Rel3.6.1K9).If I configure DNS on the VPN3...

I would like to disable the HTML interface on the outside or public interface on the 3005. However, I would like to still be able to reach the HTML interface on the inside or private address. I tried filters/rules, etc without any luck. I'm using ver...

Hi all,I have a VPN3015 at central site and a PIX501 at remote office. I have no problem of establishing LAN to LAN IPSec connection between two devices using either VPN client or the conventional way.The problem is when the VPN is established, I can...

.We have multiple wirleless segments behind PIX firewalls and would like our mobile VPN users to utilize DHCP assigned addresses rather than have to manage static IP addresses and to minimize exposure and harware we would like the PIX to handle the a...