Network Security

hi.....my network config is that..A(network)-Router-router1-------pix-router2-internet..................................................| ......... server(Unix,linux,win200server)config pix open some tcp and all icmp,and using nat0...

Hello Forum,Can I place a 1750 Behind a PIX 520 and have the PIX NAT a Public IP Address on the Outside Interface (Internet) to a Private IP Address on the pix/inf2 and have a IPSec Tunnel come up and pass traffic? My guess is that it won't work.If N...

with this config, I cann't ping 192.168.1.253,the debug trace indicate:192.168.10.101>212.99.175.60>192.168.1.253how can I direct the traffic go to DMZ no go to outside.following is my pix 520 6.0(1)'s config list : Saved:PIX Version 6.0(1)nameif eth...

Does enyone know why there is a version 2.3i of CSPM for CSIDS and one for the firewall.my problem is that i have a network with pix and CSID to administer with CSPM and i don't want to have to stations to do it. how can i install the both version on...

Hello,I have PIX 6.0 with IPSec support. I have nat 0 statement with access lists between dmz and inside interface. Now, I want to introduce VPN client configuration. In order to do that, I need to have nat 0 statement. Is it possible to have more th...

I have encounter a security access problem.One PIX 520 with four NICs.It has a enet interface with security value 10 and a hbnet interface with security value 20 besides the inside interface with security value 100 and the outside interface with secu...

Is it possible for the system administrator to configure the PIX in such a way that a certain set of users on the internal network who are duly authorized by the PIX to be able to access only one site (say, www.abc.com) while other users could get to...

I have two sites with problems with the arp cache and the alias command.It seams like when I use pix 6.0(1) and the alias command it sometimes respond to an arp broadcast so the clients on the network get the pix mac adress and makes it inpossible fo...

The web server is on the DMZ zone,but inside user cann't access the web server,I try to use the alias command to solver this problem. alias (inside) 192.168.1.252 211.99.175.50 after doing so, when I ping our domain name I can see the domain name...

I have a pix 520 with 3 ports, at the DMZ there is a web server,I use the static command to allow outside user access the web server,To allow inside user access the web server correctly,I use the alias command to resolve the domain name to DMZ IP add...

If you don't need the new features, are there any other good reasons / arguments to upgrade from 4.4(5)to 6.0(1)?Thanks,Ted

Our MS Proxy 2.0 Server is sitting between our Internet router and our internal router. It appears that the proxy server is performing NAT and HTTP proxy services. How do we ascertain whether the proxy server is performing NAT, since we are not tha...

I have a 515 configured to pass port 25 from the DMZ to a mailserver on the inside interface. I am able to telnet(port25) into a mailserver in the DMZ from the outside and inside interfaces.My issue is that I have a problem connecting to the mailser...

Is it possible for PIX to filter the TCP/IP traffic while functioning as a bridge? To clarify, I have a client that uses Watchguard firewall. The firewall is setup where the outside and inside IP interfaces have the same IP address. Also, all client...

i have a DNS server on DMZ, i want inside users to ping DNS server with his public address