Network Security

I have upgraded to CSPM 2.3.2f (actually a fresh install), rebuilt my topology, setup my static mapping, NAT, globals, etc. I then recreated my policies for access to the mail and dns servers - exactly the same as they were in CSPM 2.2. Unfortunately...

I have a client that has a cable modem connection and was provided with up to 5 dhcp addresses. I need to NAT them to static internal machines and was also hoping to get them secured with a firewall and was wondering if a PIX firewall would provide t...

some of our pc's need to run winipcfg every now and tehn when they can't get on the internet. after that they can pass through the pix po problem, but without releasing and renewing the winipcfg info they are stuck on the local segment. any suggestio...

Does PIX firewall run tranperant mode with user by default. I mean that does PIX firewall open all the Internet port ? and can we deny by the domain name?

I have two dns servers (win2k), one hosts primary zones (outside) and the other hosts secondary zones(dmz). I am unable to get them to transfer zones between the primary and secondary server. I get a "denied" error message in the event logs (NT) on t...

Hi,I put 2 PIX in stateful failover and did a simple test : during the download of a big file with FTP, I shutted down the master. The second PIX took the connection and the FTP resumed. I powered on back the master and after several seconds I manual...

Hi,I´m a little bit confused about acccess-lists on the ix.My questions:a) Does an access-list on an inside (higher security interface contain a implicit (not viewable) "deny any any" statement?b) Assume IPSEC clients are terminated on the outside in...

I'm installing a firewall for a WISP and am trying to find a list of limitations of using PAT on the PIX525. The safe decision is NAT however, many public IP's are needed. If I choose PAT, how am I limiting Internet access?

Are there any plans to support VLAN interfaces on the PIX? Boy this would solve a lot of problems!!

If the PIX is setup with a failover then afetr a defined poll interval if any of the links of the active PIX goes down , then the failover detects this and takes over as the Active.Is there any configuration by which i can restrict this to some of th...

We want to run a PIX 520 FW (V6.1.1) within our intranet (not to the Internet).Like this, both interfaces, inside and outside, are RFC1918 addresses which we can maintain ourselves and therefore there is no need of any address translation.We want to ...

Hi, I have Cisco Pix 5.15 with Version 5.1(2). I have three ethernet interface. One for the inside and two for outside. The outside interface is connected to the Fast ethernet interface of 3640 which has two ip address one primary and another seconda...

I Have 2 Cisco secure IDS formerly Netranger current 3.0(1)S8 and PIx 525 ver 6.1 am USING CSPM 2.3.2When I set up the signatures to shun they appear to do so but not in a very fast manner and then not throughly. As I look at my logs I am getting man...

Currently I found my network unstable and want to narrow down the problem.Is that any way to downgrade my PIX from v6.0 to v5.3?

I know that when using HSRP for routers and switches that the HSRP that will use a virtual IP and MAC address that it uses in case of hardware failure. With a PIX 520 how exactly does he failover work?Is it similar to the way HSRP functions-i.e. virt...