Network Security

Hi,Is it possible to log the output produced by "debug" commands to syslog? I do succeed in sending debug level information (%PIX-6-*) to the syslog, but what I would really need is low level output. (e.g. for a "debug fixup tcp" I want the "tcpseq: ...

Hi everyone, I have a quick question, i have two pix 501, both has a 10 user license, i'm going to create a LAN to LAN tunnel between them. Just want to make sure, how the pix going to count how many user conneting, by session? source IP or by MAC ad...

I have any server ( DNS, SMTP, www) in inside interface with private IP address.With static command i traslate public address in private address:static (inside,outside) 200.21.225.243 mail netmask 255.255.255.255 0 0 static (inside,outside) 200.21.22...

Would appreciate feedback, I have configured a couple of pix configs before with little difficulty. Im running into problems. First of all, I've read conflicting articles......Can you have one public ip on the outside then nat on perimeter then have ...

How do I keep a log of the PAT/NAT translations running on a PIX for a future analysis?I have tried to log it with syslog and SNMP MIBs but I couldn't find the right object or line in the syslog.The informations that I am trying to get are the same a...

I was wondering if there is a power failure, will the PIX 515 fail opened or closed?

It is my understanding that you can NOT use the PIX to route between two subnets connected on the same inside interface. The PIX will not take receive packets and send them out the same interface that it receives them on. In other words, the PIX will...

I have a need to monitor the internet usage of a single workstation with a static ip address. Is there an easy way to do this? I have a PIX 515e. Any help would be greatly appreciated.

Hi,We are currently testing a PIX 515E with 6.2(2) software.Now i have had this problem 3 times that PIX "inside" and "outside" interface would be shutdown automatically without any SYSLOG message being logged.If i look physically at the link , both ...

We are getting ready to deploy 6 VPN 3000 in sets of 2 for fail-over. As part of this product we purchased VMS 2.1 under the impression that it provided a centralized management console for multiple VPN 3000 concentrators. However, I cannot find any ...

I'm trying to make the IDS shun. In Administration>Manual Blocking I can see that the Net Device is in "Password Sent" state. On time to time I see some ip addresses as it they were being blocked in that url. But, a "show shun" or "show shun statisti...

I have a situation where I utilize CacheFlow devices to serve up web content for a high traffic web site. In considering new secure architecture - I have two options, creating two seperate DMZ segments - one for the redundant CacheFlows and another ...