Network Security

Can I assign two different IP addresses from two different subnets to the same interface on PIX?ThanksS.

How can I timeout idle local hosts in pix 501 with 10 users license so that the new connections in the network can be given access.

I issued the show failover command on my primary pix box. It showed two of the three interfaces in normal mode, but the third ( a vpn tunnel) was in test mode. I was able to ping, and send traffic successfully going through the third interface; but ...

Does anyone know if it's possible to route traffic based on type (ie HTTP, SMTP) to a specific interface. We have one ISP connection connected to the Outside interface and another ISP connected to the DMZ interface. We'd like to force all out/inbou...

I want users to be able to surf the Internet, but not be able to download files.Is this possible?? Is there a protocol I can block?

I'm implementing a PIX 525 (2 interfaces only) and forcing all net and internally untrusted traffic through it ("PIX on a stick")--Is this feasible? How many users can I (NA) translate efficiently on a PIX?

I want to block users from using internet radio stations. What is the most efficient way to do this with a PIX?

How can I enable CDP Protocol over aPIX firewall ?

according to PIX Installation Guide, you can have up to 8 interfaces on a PIX 525 (see Note at URL : http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_61/pix_ig/pix525.htm#xtocid11according to PIX Configuration Guide, you can have up to 6...

In a failover configuration, if I do a show fail on the active PIX, I see thisfor the cable status for the insideinterface on the secondary host:Interface Inside(10.0.0.2):Testing.On the active PIX the status is normal and if I look on the secondary ...

We have a solaris box behind a pix firewall. We would like to not allow port 80 traffic to the server for security reasons and only allow 443. But if users in advertently go to the http:// URL instead of the https:// - they get a page not found err...

Is is possible to block http downloading on a pix 515 or do I need a 3rd party prorgam??

I am trying to get my PIX to NAT addresses from a DMZ interface out the outside interface. If I use a block of addresses from the subnet of my outside interface it will not NAT them. Here is my pertinent config info:ip address outside 10.1.116.2 25...

My Cisco 3005 VPN Concentrator keeps timeing out for some connections. When I look through the logs the only thing I see is:626 07/03/2002 00:06:30.890 SEV=5 IP/50 RPT=192 Headend received TCP ACK pkt from client 68.38.72.43, TCP source port 1195627...

If I remove that line what will happen?I want to be able to have an ACL applied to the inside interface of the PIX to control what type of unencrypted traffic is allowed inside. Do I need to remove the 'sysopt connection permit-ipsec' command in or...