Network Security

by sniffing network traffic i realized that my PIX firewall 515-(software version 6.0(1) ) sends TCP Reset packets to the connection requests that are denied by the access-lists. Does anyone know how to change this feature? I want the firewall to dr...

Just incase people dont bother looking at the PIX site, 6.2 is out :) yay!!!But it doesn't fix the RPC bug *sigh*--Dave

I've seen several references to the use of MS IAS as a RADIUS server for PIX VPN authentication. I think this would be a good solution for us, but I'm wondering if anyone has followed Cisco's instructions and could relate their experience with instal...

Hi,my network has a default gateway, the inside interface of a pixfirewall.There is a workaround to permit the pix to route traffic, incoming in its inside interface, vs a destination outbound the same interface???e.g: the pakets come into inside...

I have a 501 and am trying to connect it to the net via a DSL Line.IP address information is entered staticly, and the route command for the outside interface is "route outside 0.0.0.0 0.0.0.0 Outside 1" As far as I can tell everythingis entered in c...

Maybe anyone can give me a hint where my mistake is here.I configured the following:"ip audit name test info action alarm"When I try now to configure the same audit name for attack signatures the pix blocks this command."ip audit name test attack ac...

I have configured this remote VPN solution per CCO article: http://www.cisco.com/warp/customer/110/pix3000.htmlThe client connects and establishs the secure channel and gets assigned the first address in my pool configured on the PIX. But I cannot ...

I have an old PIX 520, and want to do encryption with it. I did upgrade to 5.1 and properly entered activation key for DES encryption, but after reload, I don't see in show version that DES encryption is available. Furthermore, if I enter the command...

Am i right to say that PIX does not have IDS capability?

I have a pix 501 and am trying to connect it to the net via a DSL Line.IP address information is entered staticly, and the route command for the outside interface is "route outside 0.0.0.0 0.0.0.0 Outside 1" As far as I can tell everything is entered...

Here's the info:I have a wireless network that has 30 laptops. They get their IP address via DHCP from the VPN Server (Win2k). VPN box has two nicsExternal 192.168.101.xInternal 192.168.100.xPIXExternal: 192.168.101.xInternal: 192.168.100.xCorp ...

on my two DMZ i am setting up. the line is up but the protocol is down. I can not figure out how to get it up. This is a new setup. one is staight to a server and the other to 6509 switch. Any help would be very nice. My head is going to go boom.Jaso...

will the new 515E work in a failover environment with the "now-replace" 515??

I'm configuring CSPM3.0f and noticed that after adding a existing PIX535 firewall with several interfaces with the same security level CSPM3.0f doens't allow this. Is this so... or has anybody a suggestion how to solve this problem

Main Goal: To have a PIX 501 get a CA from MS CA server.. How does PIX or a router get a CA from the MS certificateserver? I understand the lines of code you have to type in on a PIX / routeri.e.path to get to the CA server but How does t...