Network Security

I am curious to find out how other users are managing their PIXs for your PIX to PIX VPN tunnels to remote sites. What are you using to access the remote PIX if the VPN tunnel is down? We're trying to find a secure solution. Any suggestions would ...

We have been trying to use a PIX with two DMZ's in addition to inside and outside connections.One is a DMZ containing customer test equipment, The second contains an mailserver and a DNS server.We wanted to keep them in separate DMZ's because we plan...

I am trying to config my PIX 501 OS 6.1(1) to allow only http traffic to go out with the following acl and applied to the inside interface.access-list acl_in permit tcp x.x.x.x x.x.x.x eq www anyaccess-group acl_in in interface inside.Once I apply th...

I'm trying to permit traffic from a lower security interface (i.e. DMZ) to a higher security interface (i.e. Inside). I want Servers on the DMZ to connect to Servers on the inside network using the inside Servers IP address, not a NAT'd one.I can do ...

I am trying to load pix611.bin on my 520. It has 192MB of memory and the upgraded Flash card. It times out everytime. I did not have any trouble loading 5.x versions. Does anyone have any idea?

Before you even start in on me, I know the PIX can be used as the VPN device but I prefer the management options for the Concentrator. My question is, how hard would it be to have a 3005 with a public IP address sit BEHIND a PIX 506 as opposed to p...

I have a PIX515, with three interfaces: outside, DMZ, and inside. Their is a current configuration in place with the exception of the DMZ, will install shortly. A new webserver will sit on the DMZ with nat to the server. Do I setup the DMZ interfa...

We have a Cisco Pix Firewall ( 2.7 we think ) that is limited to 256 connections from the inside to the outside. We have occasionally seen it run out of connections. For a moment or two you just can't get out to your favorite web site. In the last fe...

I am curious to find out how other users are managing their PIXs for your PIX to PIX VPN tunnels to remote sites. What are you using to access the remote PIX if the VPN tunnel is down? We're trying to find a secure solution. Any suggestions would be ...

We are using the IDS capabilities built into the pix. I know this is a limited set of signatures but my question is: Is there a way to enable only the 4000xx syslog messages on the PIX so the syslog server only receives those messages without gettin...

I currently have a stateful failover PIX-525 solution deployed using 5.2(5) code. I would like to upgrade to 6.2, has anyone tried this yet...is it a straight forward upgrade or is it more involved.

Has anyone had success installing one Exchange Server on a Pix DMZ? Cisco has examples of installing two exchange boxes through a Pix, one inside, one outside but is it possible to install one exchange box on the inside? This would save on cost of d...

Our Database group is asking me if our PIX supports SQL*Net Proxy? I dont know what is it. Document says Checkpoint Firewall-I, Eagle, Raptor, support it.Thanks.

Hi , I am seeking PIX 501 specific info on Port forwarding with the 501 where the outside address is configured via DHCP. I can't work out from available Cisco documentation how to allow outside access inside to specific ports. It all discusses stati...

HiWhat i need to run a Pix Failover 525 series into a Pix, i need another activation key?, can i do it with software?thanxDas caibil