Network Security

I have a 515E and I've created a rule to allow a outside /32 host https access to the pix interface (inside). It's not working... I do get a:Deny inbound tcp src outside:x.x.x.x/42368 dst inside:x.x.x.x/443.Do I need to move the PIX interface to the...

anyone knows how to stop the PIX from generating the PDM location entries in the configuration file by configuration. use 'clear pdm location' manually clearing is troublesome and the entries will come back again later. pls advise, thanks.

Does anyone know of a Windows syslog utility that can run under W2K and be started as a service? My customer is running the Kiwi Syslog Daemon, which is an excellent package, but apparently cannot be started as a service - they don't want to leave ...

I am having a 512Kbps leased line and am using VPN 5000 for connectivity.At present this line carries both data and voice.How many VPN users can I support comfortably without any performance issues?

I am curious to find out how other users are managing their PIXs for your PIX to PIX VPN tunnels to remote sites. What are you using to access the remote PIX if the VPN tunnel is down? We're trying to find a secure solution. Any suggestions would ...

We have been trying to use a PIX with two DMZ's in addition to inside and outside connections.One is a DMZ containing customer test equipment, The second contains an mailserver and a DNS server.We wanted to keep them in separate DMZ's because we plan...

I am trying to config my PIX 501 OS 6.1(1) to allow only http traffic to go out with the following acl and applied to the inside interface.access-list acl_in permit tcp x.x.x.x x.x.x.x eq www anyaccess-group acl_in in interface inside.Once I apply th...

I'm trying to permit traffic from a lower security interface (i.e. DMZ) to a higher security interface (i.e. Inside). I want Servers on the DMZ to connect to Servers on the inside network using the inside Servers IP address, not a NAT'd one.I can do ...

I am trying to load pix611.bin on my 520. It has 192MB of memory and the upgraded Flash card. It times out everytime. I did not have any trouble loading 5.x versions. Does anyone have any idea?

Before you even start in on me, I know the PIX can be used as the VPN device but I prefer the management options for the Concentrator. My question is, how hard would it be to have a 3005 with a public IP address sit BEHIND a PIX 506 as opposed to p...

I have a PIX515, with three interfaces: outside, DMZ, and inside. Their is a current configuration in place with the exception of the DMZ, will install shortly. A new webserver will sit on the DMZ with nat to the server. Do I setup the DMZ interfa...

We have a Cisco Pix Firewall ( 2.7 we think ) that is limited to 256 connections from the inside to the outside. We have occasionally seen it run out of connections. For a moment or two you just can't get out to your favorite web site. In the last fe...

I am curious to find out how other users are managing their PIXs for your PIX to PIX VPN tunnels to remote sites. What are you using to access the remote PIX if the VPN tunnel is down? We're trying to find a secure solution. Any suggestions would be ...

We are using the IDS capabilities built into the pix. I know this is a limited set of signatures but my question is: Is there a way to enable only the 4000xx syslog messages on the PIX so the syslog server only receives those messages without gettin...

I currently have a stateful failover PIX-525 solution deployed using 5.2(5) code. I would like to upgrade to 6.2, has anyone tried this yet...is it a straight forward upgrade or is it more involved.