Network Security

Hi,I want to deploy certificate at PIX for IKE negotiation. In the Cisco dokumentation it is not mentioned which type of certificate I need. Should this be a server oder a user certificate just like a personal email certificate? Which type certificat...

Hi !Can anyone tell me how to enable SNMP on a PIX 525 ?I am sitting on VLAN203 and configured the following:snmp-server host vlan203 xxx.xxx.203.254snmp-server community x26193ROsnmp-server enable trapsbut using "snmpwalk" (from 172.23.203.254) I do...

I have a PIX firewall that needs two default routes pointing to two separate HSRP addresses. Can I configure two default routes in the PIX and is it possible to do per-packet load balancing?Thanks in advance.....

I have 3 3030's that I load balance. Do any one know of any way I can create one group and spread them across the 3030's without creating them on each concentrator

Dear reader'sI am trying to move a TCP load sharing functionality from an 2600 router to an pix525 running 6.2. On the router I used an Nat pool type rotary. Doe anybody know if this is possible on an PIX ???Regards Dohan

Hi,I need to have telnet access through our Pix. I have set up the following:access-list acl-out permit tcp any host x.x.x.22 eq telnetstatic (inside,outside) x.x.x.22 10.0.0.1 netmask 255.255.255.255 0 0where 10.0.0.1 is the internal ip I need telne...

Is there a way to telnet into PIX frewall through the outside interface?SSH is a valid method to access in, however I wonder if there is another way of doing it. PDM is another tool for the access and changing the configuration.Any help will be usefu...

Hello,I have a pix firewall that protects servers from the internet. Each server has local ip address that is staticly mapped on he PIX to Internet address.I wonder if PIX performance improves if I assign real ip addresses to the servers ?Thanks

Hi all. I have a relatively easy question regarind how to block Instant Messaging programs. I've tried a few things like:access-list inside deny tcp any any eq 1863 access-list inside deny tcp any any eq 5000 access-list inside deny tcp any any eq 50...

We have several clients that allow us to vpn into their systems and it has come to the point that we are getting software incompatabilities. What I am trying to do is set up "compatable" connections on a Terminal server box and let our people access ...

PIX 525 6.2(1)In the case where connections should NEVER be 'timed-out' such as remote database connections, what timeout config values should be used?Documentation suggests setting 'timeout conn 0:0:0' to 'never timeout a connection', but this does ...

Hi,I have 2 wan links terminating on a cisco 2621 router with 2 different subnets.How do i configure pix firewall to integrate the 2 different subnets of isp's andimplement the security policies between the internal lan and outside world.Regards,n.s....

I have two PIX520 with failover configured.And now I want to add a 4-port ethernet module to the active PIX.Can I still implement failover between the two PIX for those identical hardware ports and leave the new added module running without failover?...

Hi everybody,I'm searching a solution to refresh the topology services map when a LINKUP/LINKDOWN message is received. In CW2000, by default, it takes the map 5 minutes(!) to refresh and change the color of the links. I want to do this immediately, i...

Hello everyone!My name is Antoni need to completely exclude one device from getting dhcp address, which is configured on pix i am suspecting this device is an intruder to my network, i know ip address and Mac address of this device and it looks like ...