Network Security

Hello All,I have a dmz interface running on network 192.168.2.0 and inside network running on 192.168.1.0. I want all of my devices on dmz to connect to devices on inside network. What conduit commands I could use in conjuction with the command bel...

Is it possible to create lan to lan tunnels from a pix to a CVPN? Fromt a 3640 router to a CVPN 3030? Can you point me to the configuration guide for this? Thanks.

How do I generate an RSA key-pair for the PIX Firewall 520 V6.1(1).This seems to be required in order to use ssh to the PIX instead of telnet.I tried ca gen rsa key 1024 , which I found in this forum, but it did not work at all -> ca is not known.Wha...

I have a shiny new Pix 501/10 user/3des. I have a remote site with a dsl connection that has a dynamic ip address from the ISP. I want to do a site to site ipsec 3des ike preshared keys tunnel to connect to my Concentrator 3015. I have the Cisco s...

i am running pix 5.3(1) and i recently changed all conduit permit statements to access-lists. the problem i am now having is that when i try to access my ftp server on my internal network from outside i can not get through the pix. this setup was w...

Hello all.I'm trying to configure a Pix 520 with 4 interfaces, 2 of them connected to different Vlans, and the other 2 connected to different ADLS routers atached to the internet.We pretend to 'save' firewalls by means of using less firewalls with mo...

Has anyone ever had success setting up authentication with the MS Win2K IAS service for PIX remote access VPN? If so, could you point me to any docs? Thanks. Alex

I upgraded pix 525 IOS ver 5.2(3) to IOS 6.0(1).The DES feature was disabled on the PIX.The show version commands shows the activation key to be activated to enable the DES.During upgrade of the IOS I was not prompted to enter the key.Now i have IO...

Is there a way you can configure the pix to ping the outside interface? Not that you wouldwant to do it..Thanks

Anyone knows when this will be relased, so we can have LAN-based failover....and thereby have real redundancy ?

Here is the scenerio I need some 'eyes' on...I've got a Pix 515 with the following ip addresses:ip address outside 192.168.0.171 255.255.240.0ip address inside 172.16.22.170 255.255.240.0I have an ISP provided router with an assigned ip address (inte...

I do I restrict the services, protocols, and host addresses that inside users can assess on the DMZ interface?

I recently setup a PIX 515 for a customer on a DSL line. Their e-mail is hosted by someone other than their ISP. Internet browsing is fine but when they try to access e-mail, there is a 20 - 30 second delay before the mail is displayed. I tested t...

My apologies. I accidentally posted this in the VPN forum. This is where it should be.*********************************************I have two networks connected together via Frame-Relay. One network has a PIX on it. There is an Access-list bound to...

Hello, I am probably missing some finer point of either NAT or routing here. Here's the setup : (Internet)---T1---(1601)---192.168.1.0/24---(pix)---172.16.1.0/24---(3com Netbuilder II router)---10.x.x.x/16 customer subnetsHere is the problem: look ...