Network Security

hi,Everything fine when DNS is Outside.If i place a DNS in INSIDE, i cant able to even browse and does not reslove.i have enabled fixup protocol domain 53, static mapped, access-list for UDP configured..where i am wrong?.I am using alias command for ...

Hi,Both CQ and CBWFQ is to allocate bandwidth to traffics defined by the access-list, how do I choose which one to use?Thank you.Fujin

Hi, I have a PIX-525 with the followingLicensed features:Failover: EnabledVPN-DES: DisabledVPN-3DES: DisabledMaximum Interfaces: 8Cut-through Proxy: EnabledGuards: EnabledWebsense: EnabledThroughput: Unli...

When I do SHOW CONFIG command on the PIX the configuration file is displayed with lots of PDM LOCATION statements in it. Every network address including some addresses that are ourtside the private network. When I do a Clear PDS all of the stateme...

Hi,I have setup a DHCP server, using the private 10.0.0.0 subnet. Unforunately it does not work. I have the Ip helper address defined on the router which is attached to the pix. Does the Ip helper address have to be entered on the pix ?If the same is...

I can not seem to receive a Certificate from an Enterprise CA from MS. If a standalone CA is used, I can issue the Certificate. Is it possible for the PIX 506 to receive a certificate from an enterprise CA, and if so, How?

Does any body have an idea how to connect up a PIX with two ISP connections and setting up two default gateways. Of course without involving an external router. For example, if I have a PIX with 4 NICS and have two Ethernet feeds from two providers, ...

I am trying to decide if a VPN 3005 is going to be worth it. We currently have Pix-to-Pix VPN tunnel setup between 520 and 515. We are going to be having people connect to the 515's over VPN multiple times daily. What would buying a 3005 Concentra...

We are in the process of installing a Websense server in our network and wanted to ask for opinions/recommendations on the location that would be best for installing a Websense server. Should it by on the inside of my firewall or in the DMZ? From wha...

My PIX-515-R-BUN support one aditional ethernet card to install DMZ? I have only 2 integrated ethernet interfaces. Thanks.

Hello....very new to using the Pix 525. I would like to block a range of private ip address within my private network blocking them from going to the interenet. I work for a school and have virtual networks setup with private ip addresses for each b...

I have a PIX 525 with 5 interfaces. When test it in our lab with connecting each interface to a separate hub, everything is working fine.However, as soon as put it in actual network which is 5 VLANs in an Enterasys SSR8000 switch router, it stop to l...

Dear all, Does traffic engineering in cell mode mpls (BPX- LSC network) work.If not why?Is it a problem with RSVP on atm vc's.Will it be supported in the future? Thank you in advanceKostas

I know there is a 'write net' command for saving the config onto a tftp server, and there is 'copy t ftp:... ' command for copying an image onto flash, but is there a command that does the reverse of 'wri net'? i.e. download a config, or portion of a...

Dear ALL,I have a PIX 515 F/W with one interface connected to the Internet and other to the inside network(172.16.0.0).Things are working fine.Now I want to put a Database server which would be on a different network (10.1.10.0) and would be protecte...