Network Security

Hi, I find it is very difficult to upgrade code from down level code to high level code when I need download config . In pix code upgrade precedure , I know pix can upload config to PC using tftp. But in that , it have no download config from pc...

I have configured a 10.10.1.0 255.255.255.0 as a private address for NAT translation on the PIX515 which running ios version (5.1.2).Every so often the outbound connection to the internet stops working. I use the clear xlate command to fix the proble...

I have deployed several PIX501s and PIX506s, all connected via IPSec VPN to a 3005 Concentrator. I would like to telnet over the VPN tunnel directly to the PIX inside interface, but can't seem to make it work. Is there a way around this? Or what i...

I'm running ver 6.0(1) with stateful failover and the standby has continuous 210006 errors.The "write standby" commands succeeds and "show failover" looks good with the exception of high tcp conn receive errors on the standby.Any suggestions?

hello together, has someone experiences or suggestions for a contentfilter for PIX Firewall? I heard from eSafe 3.0 (Aladdin Corp.) and Websens, whereby Websens is not to support smtp filter (Relay). My target is against a Checkpoint-1 to offer a P...

I have installed a pix 501 to protect my web and mail servers inside a network divided in two lan192.168.1.0/24 (the secure one-inside)192.168.2.0/24 (outside)I have many client on 192.168.2.x (outside) and I want to control access to my web and ma...

Hi All,Did someone ever encounter PIX problem when the pix configured for the syslog server with tcp port ?I encountered this problem when I configured the pix for syslog server with tcp port..the command is logging host (in_if) (host_ip) [tcp/port_n...

Can the Pix redirect http request and forward to a Surfcontrol box like it does with Websense

IGRP does not have a clue about 0.0.0.0 (default route) created by the PIX firewall. The scenario is that my PIX firewall is attached to the internet and is running NAT inside (135.50.0.0). I need to propagate the default route in my IGRP domain. ip ...

I have a situation with an office attached to our internal network via a T/3 and sharing the same internal IP address space. Both offices have different ISP's. I also have a test web server on our internal network and it is being static assigned an e...

My external DNS servers are on a PIX DMZ interface and they support multiple Web and Application servers on the same phyical subnet. When one of these servers attempts to access a site ON THE SAME PHYSICAL SUBNET, the DNS query resolves to an extern...

Can someone indicate if a Preshared keys and also CA authentication is allowed in the same config of PIX. We have a customer with PIX configured for preshared keys. They want to add a new VPN with CA auth. Can we just add all CA related commands in t...

Using 4.4(7) code on a pix 515, default fixup statement for ftp, and both NAT and PAT configured. FTP requests for large files hang after a seemingly random amount of time. I reviewed the field notice regarding PTR records in the DNS, but I don't t...

Being that I need CSPM to manage numerous firewalls, I would like to find out if there is a way to implement, and maintain, separate ACL(s) for each firewall. Aside from that, When I try to actualy implement a rule through the policy tab, that invol...

Hi,I have pix 6.1 firewall in the corporate office,I have pix 3.1 client in the remote network,I have setup the VPN access,I am able to connect to the pix from the remote network and be able to ping outside ip address of the PIX,I am not able to ping...