Network Security

I am experimenting with a Cisco PIX 501. In the future I want to connect about 35 to our central (now 3600) router using VPN tunnels.First I want to understand the basic functions. (I will ask the tunnel questions later)This is what I want::1. Do nat...

I have been told the PIX isn’t able to do stateful inspection on packets before passing them to the internal interface when terminating an IPSec VPN. I have also heard the packets are decrypted first then statefully inspected before being handed to t...

Hi,I need an advice regarding access-list used altogether with alias command.There are two hosts: host A in internal segment - real IP is 10.1.1.2 and host B in DMZ segment - real IP is 172.16.1.3. Both alias and static commands are being used here:a...

Okay. So I'm in a bit of a bind.Trying to get the Linux 3.6.2 (A) client to connect to our PIX 515, running 6.2(2) code, without the 3DES option.Client platform is RedHat Linux 8.0. Compile worked fine.Windows XP/2000 clients work fine. But the Linux...

how could i permit the SQL service though a pix firewall and router though access-list if the server is in the inside? Can sb give a sample?Thanks

HI, I swapped out a 515 running 6.0 (1) and replaced it with a 506 running 6.1 (4).I copied over the config ( cut and paste) and everything copied over ok. Now I cannot send or receive email, but www access is ok. When i put the 515 back in everythin...

Hello;Anyone successfully upgraded a Pix 520 to firmware v6.x? When attempting to upgrade from v5.1(2), I receive an error 'Obsolete FLASH card. Upgrade required" The 520 has 32mb ram & 2 mb flash - do I need extra RAM, etc.?Thank you

Can I set the PIX 525e I have to use IAS within Windows 2000 to Authorise users to access the Internet?I have the PIX between my network and an ADSL router, but I would like to be able to control who can access the internet from the network.Any help ...

Hi,we have setup a PIX 506e to connect to an unknown Cisco concentrator in the US (managed by a third party). The VPN is up and working, however occasionally the VPN drops out and we get the following error:IPSEC(key_engine): got a queue event...IPSE...

We currently have 2 cisco PIX 520 in a failover arrangement. We have been asked to implement an additional layer of PIX firewall behind our current arrangement. So effectively the inside interface of the existing firewall now becomes the outside inte...

I have several SMTP services running on the same Server using MCIS. Therefore, there are SMTP services listening non-standard port (25). If I want to send a mail from one server to the other I cannot use the public address (the PIX does not allow it)...

Hi all,I've got a Pix that is statically mapping an internal ip to a global. Now my question is when I'm sitting inside the network. I can only reach that equipment with the private address and not with the public. But when I'm on the outside, I curr...

I am trying to troubleshoot an FTP problem. In diagnosing the syslog messages, I am looking at:%PIX-4-106019: IP packet from a.b.c.d to e.f.g.h, protocol 6 received from interface "inside" deny by access-group .........What is protocol 6 referring to...

I want to be able to write a script that will shutdown a PRI on a 3640 so that no one can dial in when work is taking place on a production server. I would like to give the script to a group of operators but I don't want them to have the password for...