Network Security

Hi,I have an access-list that consists of around 100 elements. Would it make sense to use "Compiled Mode" for this access list ? I know that it is supposed to improve performance for ACLs above 19 elements but it also says on Cisco Website that it sh...

Hi All,I will appreciate if anyone can help me...I have a question regarding to PPTP on PIX. Is it possible If I want to use the same subnet with the internal network for the pptp pool ???Lets say the IP for internal network is 10.0.0.0/24...and the ...

i have a cisco as5300 with 4 PRIs.Each PRI is alloacted a number.When calls are terminated using the PRIs, the calling number displayed at Fone receivers End is the PRI allocate number.Say if some one calls from US to India, the displayed number is n...

Hello,I have a customer with following conditions:Internet..DMZ with 172.18.x.xLAN with 10.x.x.xThere is a Proxy in the DMZ 172.x.x.x. The proxy see's all client with the DMZ Interface Address. The guys who config the pix says it comes from NAT and t...

Hi,I have a scenario where I don't want to do any address translation. Is it sufficient to use only a static command e.g.:static (inside,outside) 10.40.2.0 10.40.2.0 netmask 255.255.255.0 0 0for traffic both ways (outside to inside, inside to outside...

I have a pair of redundant PIX firewall 515E, running unrestricted and failover license respectively. I would like to purchase a spare PIX for immediate replacement during failure while waiting for RMA. What license should I get ? Can I get a restric...

I have a fully functional PIX environment utilizing the VPN and DMZ functionality of the PIX. I now have to allow Exchange traffic via the internet. I started off making our users use the vpn client to connect to our exchange server, but it does not ...

Hi, I would like to know if is possible install the IDS host sensor v2.5 on the same machine where i previously installed the VMS 2.1 bundle (CDone,RME,IDSMC,PIXMC...),and also will the IDS host sensor integrate with it?Will also integrate with monit...

My customer has a C3640 with IOS 12.1(5)T9, Is it possible to configure Class based Queuing on a IPSec tunnel(ESP mode) using this IOS, if this is not possible would it be possible to configure a Priority Queuing on a IPSec tunnel. Or do i need to up...

Hi, I installed PFSS on an NT machine, so the PIX is able to send logging information to that syslog server.Is it possible to send the output of debugging also to that syslog server and if so, how should this be done?I want to debug the setup of an I...

Hi, Does the output of "show connections" command show the active connections or a history of connections established through the pix? For the purpose of trouble shooting i wanted to see the live connections through the pix firewall on a real time ba...

I have configured failover PIX520 with public addresses for both inside, outside and failover. Also with not natting for the addresses. But I have not configure static mapping ie static (inside, outside).Please, can this be the problem?