Network Security

Hello,I try to ping all PIX's interfaces from the inside network.I've got an acl which permit all trafic from inside interface (permit ip any any).I allow icmp echo and echo-reply from inside network to inside interface (icmp permit <inside_IP_addres...

Hi community,We got a Cisco Secure PIX Firewall 535 release 6.0 (1) witha a failover configuration. We configured ssh but sometimes it appens that we're no more able to get access to it, seemly without any explanation. With the Pix Device Manager we ...

Hi Cisco gods,I have successfully blocked all chat services at the PIX firewall, I think. As I walk around and find people using MSN or Messenger I find that public proxy they are using and kill it too. BUT, I am having a hell of a time with ICQ. I d...

I feel like an idiot for this one. What the hell - I'm new. We just purchased a PIX 515 and I do not have the slightest idea how to connect to it. I can't get to the command line via the console cable. I have it connected to the rs232 but don't know ...

Hi,I have an access-list that consists of around 100 elements. Would it make sense to use "Compiled Mode" for this access list ? I know that it is supposed to improve performance for ACLs above 19 elements but it also says on Cisco Website that it sh...

Hi All,I will appreciate if anyone can help me...I have a question regarding to PPTP on PIX. Is it possible If I want to use the same subnet with the internal network for the pptp pool ???Lets say the IP for internal network is 10.0.0.0/24...and the ...

i have a cisco as5300 with 4 PRIs.Each PRI is alloacted a number.When calls are terminated using the PRIs, the calling number displayed at Fone receivers End is the PRI allocate number.Say if some one calls from US to India, the displayed number is n...

Hello,I have a customer with following conditions:Internet..DMZ with 172.18.x.xLAN with 10.x.x.xThere is a Proxy in the DMZ 172.x.x.x. The proxy see's all client with the DMZ Interface Address. The guys who config the pix says it comes from NAT and t...

Hi,I have a scenario where I don't want to do any address translation. Is it sufficient to use only a static command e.g.:static (inside,outside) 10.40.2.0 10.40.2.0 netmask 255.255.255.0 0 0for traffic both ways (outside to inside, inside to outside...

I have a pair of redundant PIX firewall 515E, running unrestricted and failover license respectively. I would like to purchase a spare PIX for immediate replacement during failure while waiting for RMA. What license should I get ? Can I get a restric...

I have a fully functional PIX environment utilizing the VPN and DMZ functionality of the PIX. I now have to allow Exchange traffic via the internet. I started off making our users use the vpn client to connect to our exchange server, but it does not ...

Hi, I would like to know if is possible install the IDS host sensor v2.5 on the same machine where i previously installed the VMS 2.1 bundle (CDone,RME,IDSMC,PIXMC...),and also will the IDS host sensor integrate with it?Will also integrate with monit...

My customer has a C3640 with IOS 12.1(5)T9, Is it possible to configure Class based Queuing on a IPSec tunnel(ESP mode) using this IOS, if this is not possible would it be possible to configure a Priority Queuing on a IPSec tunnel. Or do i need to up...