I'm implementing a PIX 525 (2 interfaces only) and forcing all net and internally untrusted traffic through it ("PIX on a stick")--Is this feasible? How many users can I (NA) translate efficiently on a PIX?
according to PIX Installation Guide, you can have up to 8 interfaces on a PIX 525 (see Note at URL : http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_61/pix_ig/pix525.htm#xtocid11according to PIX Configuration Guide, you can have up to 6...
In a failover configuration, if I do a show fail on the active PIX, I see thisfor the cable status for the insideinterface on the secondary host:Interface Inside(10.0.0.2):Testing.On the active PIX the status is normal and if I look on the secondary ...
We have a solaris box behind a pix firewall. We would like to not allow port 80 traffic to the server for security reasons and only allow 443. But if users in advertently go to the http:// URL instead of the https:// - they get a page not found err...
I am trying to get my PIX to NAT addresses from a DMZ interface out the outside interface. If I use a block of addresses from the subnet of my outside interface it will not NAT them. Here is my pertinent config info:ip address outside 10.1.116.2 25...
My Cisco 3005 VPN Concentrator keeps timeing out for some connections. When I look through the logs the only thing I see is:626 07/03/2002 00:06:30.890 SEV=5 IP/50 RPT=192 Headend received TCP ACK pkt from client 68.38.72.43, TCP source port 1195627...
If I remove that line what will happen?I want to be able to have an ACL applied to the inside interface of the PIX to control what type of unencrypted traffic is allowed inside. Do I need to remove the 'sysopt connection permit-ipsec' command in or...
I noticed that 2 of our PIX firewalls have a difference in the configuration; one has the "names" command, and the other has "no names". What is this used for?
