Network Security

PIX Current setup:-Inside :- 10.32.0.0 /16DMZ :- 10.112.3.0 /24alias (inside) 54.10.10.62 10.112.3.62 255.255.255.255access-list acl_in permit tcp host 10.32.0.242 host 54.10.10.62 eq ftp access-list acl_in permit tcp host 10.32.0.242 host 10.112.3.6...

AM unclear on advantages of firewalling with PIX, rather than with a router,thx-charlie

Hi everybodyI'm trying to configure a Exchange Server in the interface "server" of a 515E and I have several problems. Let's imagine the following scenario (not real adresses):Interface "Outside" 10.10.10.1 (Pool of public addresses 10.10.10.1 - 10.1...

What exactly is the USB Port on a PIX 501 used for? We have a remote site that will be connecting to the internet via a satelite connection (Starband), we would like to setup a hardware VPN between that site and our main corporate site, however the ...

my PIX515E have a problem.The inside-Interface is the Defaultgateway of the Clients in inside-LAN.At the inside-LAN is another Router connected with an important LAN (Manufactur-LAN) behind.The Clients cannot reach this Manufactur-LAN over The Defaul...

We can establish a tunnel between the VPN client 3.5.1 and the PIX firewall from a remote address.If we include split-tunnel functionality, connectivity with the internal network is lost. Removing split-tunnel from the config restores connectivity t...

We can establish a tunnel between the VPN client 3.5.1 and the PIX firewall from a remote address.The Pix is behind a 800 series router configured for NAT, with a static conversion to the Pix outside interface for all ports.The Pix translates inside ...

We have been very successful with the 3.5 vpn client to pix 515 with IAS (w2k) radius authentication except for 1 user.His profile is exactly like all the others in his OU, but for some reason, he cannot auth via the vpn. We have tried connecting fro...

Hi,I have configured 2 PIX using 6.2 with failover features. When I look at the syslog file, I noticed that both PIX are sending syslog msg to the syslog server.My question is ,why is the standby PIX also sending syslog msg like "built-up connection"...

I have a smtp bastion host on a DMZ in a PIX 515. The DMZ needs to be able to send mail to a host on the inside network. Assume the following scenario: nameif ethernet0 outside security0 nameif ethernet1 inside security100 nameif ethernet2 dmz securi...

We are running CSPM 2.3.2 f to manage 3 pix 525 pairs configured in stateful failover. We are experiencing a lot of problems with the cspm. The database crashes on a frequent basis (once a week). The only recovery option that we have found that works...

I currently use an IOS ACL which contains the network/wildcard mask pair X.X.1.160 0.0.254.31 to match hosts X.X.1.[160-191], X.X.3.[160-191], X.X.5.[160-191], etc. If the IOS router is replaced by a PIX firewall, will the PIX subnet mask behave in ...

will my dlsw+ traffic pass thorugh my PIX firewall can someone send me some configuration help

Does any one knows if the Cisco PIX Firewall supports IS-IS Traffic.

I have a PIX 520 with a 16MB flash memory card in it. I need to remove the config from flash. Sounds Easy, right?One Problem:I don't have the enable passwords, and the PIX appears to be using AAA authentication to a non-existent server.I have already...