Network Security

Does anyone know if it's possible to route traffic based on type (ie HTTP, SMTP) to a specific interface. We have one ISP connection connected to the Outside interface and another ISP connected to the DMZ interface. We'd like to force all out/inbou...

I want users to be able to surf the Internet, but not be able to download files.Is this possible?? Is there a protocol I can block?

I'm implementing a PIX 525 (2 interfaces only) and forcing all net and internally untrusted traffic through it ("PIX on a stick")--Is this feasible? How many users can I (NA) translate efficiently on a PIX?

I want to block users from using internet radio stations. What is the most efficient way to do this with a PIX?

How can I enable CDP Protocol over aPIX firewall ?

according to PIX Installation Guide, you can have up to 8 interfaces on a PIX 525 (see Note at URL : http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_61/pix_ig/pix525.htm#xtocid11according to PIX Configuration Guide, you can have up to 6...

In a failover configuration, if I do a show fail on the active PIX, I see thisfor the cable status for the insideinterface on the secondary host:Interface Inside(10.0.0.2):Testing.On the active PIX the status is normal and if I look on the secondary ...

We have a solaris box behind a pix firewall. We would like to not allow port 80 traffic to the server for security reasons and only allow 443. But if users in advertently go to the http:// URL instead of the https:// - they get a page not found err...

Is is possible to block http downloading on a pix 515 or do I need a 3rd party prorgam??

I am trying to get my PIX to NAT addresses from a DMZ interface out the outside interface. If I use a block of addresses from the subnet of my outside interface it will not NAT them. Here is my pertinent config info:ip address outside 10.1.116.2 25...

My Cisco 3005 VPN Concentrator keeps timeing out for some connections. When I look through the logs the only thing I see is:626 07/03/2002 00:06:30.890 SEV=5 IP/50 RPT=192 Headend received TCP ACK pkt from client 68.38.72.43, TCP source port 1195627...

If I remove that line what will happen?I want to be able to have an ACL applied to the inside interface of the PIX to control what type of unencrypted traffic is allowed inside. Do I need to remove the 'sysopt connection permit-ipsec' command in or...

Anybody knows about PIX firewalls Syslog server?

What is the maximum memory I can put on a PIX515?

I noticed that 2 of our PIX firewalls have a difference in the configuration; one has the "names" command, and the other has "no names". What is this used for?