Network Security

I am looking for a way to provide a consent page or acceptable usage page initially to users when they access the Internet. I want to show them this page the first time that workstation access the Internet each day, but not the rest of the time. I ...

We are running a PIX 515 v6.2(2) with Cisco VPN Client 3.5.2C. I was very glad to find a new feature called split-dns.I tried to implement it similar to checkpoint's split dns but without any success.Since that feature is very helpful but nearly not ...

Hi to all of you!Have anybody informations about "realworld" connection limits on a PIX?We experienced high cpu utilization (99%) if we reached connetion counts above 70000. Our highest counts are about 135000 connections. (!!! No yoke, and no DOS/DD...

I have a PIX 520, running 5.3(1) with the webserver in a DMZ and SQL server on the inside Interface. Everything was working fine until yesterday, no changes were made, but traffic trough the PIX was spotty at best. I can now access the Internet fro...

Issue - according to the Cisco PIX Hardware manual, once memory is added to a PIX, it can not be removed or downgraded otherwise the firewall will be "unusable".I have a situation where I need to do just that. Testing the downgrade by removing the 1...

I have a Pix 520 running v6.2(1) Inside network is 172.16.x..x with about 500 users accessing a mail server on the dmz at 192.168.1.2. Everything works fine, but after a while, I will start to get reports that random hosts on the inside network ca...

I have a router sending multiple subnets into the DMZ interface of my PIX (10.1.x.0/24), and a static route on the DMZ interface (10.1.0.0/16) sending all replies back. This works fine, but any access-lists applied to the DMZ interface are ignored if...

Hola.Tengo un Pix 506 con version 6.2(1) y estoy intentando hacerlo funcionar para filtrado de las URL con el Websense.No he podido hacerlo funcionar, segun la documentacion que hay en cisco por lo menos 2 comandos se deben configurar en el Pix:url-s...

Hi,when i restart my pix firewall (failover unit ) its boots in the ROMMON mode which means there is a problem with the IOS but the problemis when i try to install the IOS on it which is 6.2(1) it gives me the following error message ...................

My existing pix (failover unit) has IOS of (5.3) veersion and i want to update it to 6.2(1) but when i try to copy tftp flash it shows !!!!!!!!!!!!!!!!!! these marks as its tranfering image but at the end the following message appears.Received 164613...

Hi,i would like to know the percentage i can use for on ethernet interface in qos.for PPP, the L2 header is 6 bytes and i use the interface command : max-reserved-bandwidth 90 to fix the L2 overhead at 10 percent instead of the 25% default.My questio...

Why am I seeing this 3 "Deny"s considering that : a) The pix should store the state b) The src/dest should kill the session (1st and 3rd Deny) not the firewall - unless the state has obviously timed out, which in this case you can see with the timest...

I want to download the pix image from my existing firewall to the newly bought failower firewall so that both of them would have the same IOS image and i can setup failover.

Does PIX support IIOP? If yes, from which version onward and how to confgure the same?Thank you all learned people for the feedback.Warm regards

Hi,I am getting the following Warning message when I reload my PIx 501 running ver 6.2"start and end addresses overlap the broadcast address" I am not sure where I did a mistake. Did anybody ever get this sort of error, if so In what are the possibe...