Network Security

Hello,I have a pix firewall that protects servers from the internet. Each server has local ip address that is staticly mapped on he PIX to Internet address.I wonder if PIX performance improves if I assign real ip addresses to the servers ?Thanks

Hi all. I have a relatively easy question regarind how to block Instant Messaging programs. I've tried a few things like:access-list inside deny tcp any any eq 1863 access-list inside deny tcp any any eq 5000 access-list inside deny tcp any any eq ...

We have several clients that allow us to vpn into their systems and it has come to the point that we are getting software incompatabilities. What I am trying to do is set up "compatable" connections on a Terminal server box and let our people access ...

PIX 525 6.2(1)In the case where connections should NEVER be 'timed-out' such as remote database connections, what timeout config values should be used?Documentation suggests setting 'timeout conn 0:0:0' to 'never timeout a connection', but this does ...

Hi,I have 2 wan links terminating on a cisco 2621 router with 2 different subnets.How do i configure pix firewall to integrate the 2 different subnets of isp's andimplement the security policies between the internal lan and outside world.Regards,n.s....

I have two PIX520 with failover configured.And now I want to add a 4-port ethernet module to the active PIX.Can I still implement failover between the two PIX for those identical hardware ports and leave the new added module running without failover?...

Hi everybody,I'm searching a solution to refresh the topology services map when a LINKUP/LINKDOWN message is received. In CW2000, by default, it takes the map 5 minutes(!) to refresh and change the color of the links. I want to do this immediately, i...

Hello everyone!My name is Antoni need to completely exclude one device from getting dhcp address, which is configured on pix i am suspecting this device is an intruder to my network, i know ip address and Mac address of this device and it looks like...

I must admit that i am not an expert on PIX...but i have a question..Can you have 2 outside interfaces on the PIX??? I have a PIX with an outside interface connected to a router with a link to an ISP. Can i have another outside interface ex.Outside1 ...

Hi I have a Pix 506, I am looking to block AIM and the other services like it. Since the services load balance I cannot just enter an IP address. I would like to block the services using there domain names. Is the possible? If so can you give me some...

Our LAN segment consisted of two public IP subnets. The second was added because more IP addresses were needed. We have since implemeted NAT (with overload) on our perimeter router, and are in the process of migrating all hosts to a private subnet....

Hi,I have pix 535 with 6.2(2). I have the inside with address as 172.20.10.0/24, with 172.20.10.1 as the pix interface. One of the DMZ's that is DMZ-corporate, with network 172.20.30.0/24, and 172.20.30.1 as the pix interface address.I have configure...

Hi,I have PIX 535 running 6.2(2) with 8 interfaces. The ip at the inside is 172.20.10.0/24 and one of the dmz-corporate is 172.20.30.0/24.And the PIX interface in the respective networks have ip *.*.*.1.I can ping from any host or device from these n...

My PIX 520 restart automatically several times a day. what's the possible reasion?previously ,we use aaa authentication include any any , it authentication tcp only , it work well , now we use aaa authentication match and access-list to authenti...