Network Security

I have a PIX with two "external" interfaces (outside and client). All internal connections originate from 10.x.x.x addresses. I need to apply a different NAT pool depending on which external interface is used. (ie 65.120.74.64-65.120.74.254 if hea...

Can I connect PIX 501 with 10 users license to a Network wih more than 10 PC and all accessing internet. But any time only 6-7 users will be surfing. If yes then I have a PIX which allows only the first 10 PC's which surf the net and the other PC's a...

I am trying to do policy routing with a PIX Firewall. The case is that i am trying to identify the source IP and depending on it I know that throw the packet to one router or other.I know that in a router there is a command that do this (route-map).D...

Changing the Internal int IP on a PIX 515 ver 6.2 from x.x.x.1 to 192.168.1.1 to coincide with the lan... what issues should I be prepared for? Can I export the config through tftp/PDM v2, make all mods, and import?Could I be so lucky to change the ...

I have a PIX 501 with 10 users license. How can I timeout the users which are idle and are not accessing the outside interface, so that new users can be given access

The PIX ascertains the trustworthyness of the traffic, based on the interface it is coming from, defined by the security value.When I have LAN-to-LAN or RA VPNs terminated on the PIX, how is the traffic from VPN peers measured ? It is the lowest secu...

We found that we needed to set our PIX time to our time+6 hours in order to get the PDM graphs to indicate correct time. Assuming we in CST are UTC-6, California, PST, would be UTC-8. How does the pix determine which time zone it 'lives in' ?

I have Pix 520 running 6.2(1) and am trying to implement some outbound filtering. Basically I want to deny any host on the inside interface the ability to do pop3 or smtp connections on the outside interface. I have a mail server on a DMZ that the...

Can I use a PIX but without using NAT?

How would you explain to a client the benefits of using a PIX instead of the Cisco IOS Firewall when they have already purchased the Cisco IOS Firewall with a 2600? Other than the layered approach recommended by Cisco what would be the benefits?Thank...

I need to route traffic from a PIX to 2 routers, so the traffic is balanced on two path. I think to use two static routes with same metric and different next-hop (2 routers).Have you any idea if this configuration works? Do you already configured it?...

On Pix 506 I configured three public IP's as static convertion for Private address ex: the inside address are 10.0.0.201-203 aqnd public address is 207.49.24.50-52The public IP's are not registered even after configuring the Alias command the public...

Can anyone explan this message from the PIX syslog? The 208.*.*.* address is my DNS server on the outside network. The 63.*.*.* address is a client address on the inside network. The client seems to resolve DNS with no problem. What does this me...

Actually one of our customer is shifting from ISDN to LEASED LINE and the problem is the service provider here provides different ip addresse range for each type of service.But for our customer it is vert difficult to tell all of his users that from ...

How can I find out my activation key. In sh version I can't find this in theIOS version 4.4(4)RegardsRoland