Network Security

Does anyone know if a PIX 520 and PIX 525 running the same code version can be connected together in a failover pair?Thanks,Kevin AndersonSystems ConsultantUNIS LUMIN Inc.

In my previous firewall I was able to DNS records which was helpful as we only have a few names to provide publicly. But now that I am setting a pix525 I realize this service is not available. I do not want to want to have my service providor adverti...

Does anybody know if is possible to add a secondary ip address to a Pix interface?Thank in advance

Hi Guys!Question:2 routers with 2 FE interfaces each and PIX between them. Flow is unidirectional. Firewall is neccessary at this point.>--FE--R--FE--PIX--FE--R--> According to the document:http://www.cisco.com/univercd/cc/td/doc/cisintwk/ics/cs006.h...

Hi I have three leased lines to the Internet and just bought a PIX 515UR. The vendor told me that one PIX unit would be enough to handle all three lines (each with different IP addresses) and supplied me a PIX with three Ethernet interfaces.Now, he t...

I would to connect two pix 520 in a failover configuration.When I ignite the secondary, both secondary's and primary's configuration was resetted. The cable's primary end was inserted in the primary.I premise to have modernized the version of the sec...

Does anyone know how to interpret the output of "show conn" command, specifically the "flags"?Here is an example:SNIFF# sho conn local 192.168.120.189 net 255.255.255.255TCP out 192.168.225.30:80 in 192.168.120.189:1510 idle 0:00:02 Bytes 375 flags U...

hi.....my network config is that..A(network)-Router-router1-------pix-router2-internet..................................................| ......... server(Unix,linux,win200server)config pix open some tcp and all icmp,and using nat0pix sec100:public, ...

Hello Forum,Can I place a 1750 Behind a PIX 520 and have the PIX NAT a Public IP Address on the Outside Interface (Internet) to a Private IP Address on the pix/inf2 and have a IPSec Tunnel come up and pass traffic? My guess is that it won't work.If N...

with this config, I cann't ping 192.168.1.253,the debug trace indicate:192.168.10.101>212.99.175.60>192.168.1.253how can I direct the traffic go to DMZ no go to outside.following is my pix 520 6.0(1)'s config list : Saved:PIX Version 6.0(1)nameif eth...

Does enyone know why there is a version 2.3i of CSPM for CSIDS and one for the firewall.my problem is that i have a network with pix and CSID to administer with CSPM and i don't want to have to stations to do it. how can i install the both version on...

Hello,I have PIX 6.0 with IPSec support. I have nat 0 statement with access lists between dmz and inside interface. Now, I want to introduce VPN client configuration. In order to do that, I need to have nat 0 statement. Is it possible to have more th...

I have encounter a security access problem.One PIX 520 with four NICs.It has a enet interface with security value 10 and a hbnet interface with security value 20 besides the inside interface with security value 100 and the outside interface with secu...

Is it possible for the system administrator to configure the PIX in such a way that a certain set of users on the internal network who are duly authorized by the PIX to be able to access only one site (say, www.abc.com) while other users could get to...

I have two sites with problems with the arp cache and the alias command.It seams like when I use pix 6.0(1) and the alias command it sometimes respond to an arp broadcast so the clients on the network get the pix mac adress and makes it inpossible fo...