Network Security

I have my firewalls installed with ver 6.1(1) and I dont use pdm to manage them. I have also disabled logging history debugging. All works fine until the firewall is rebooted ( ie for software upgrades or whatever). After the reboot I find that the l...

what are the differences between a router/or high end catalyst switch like cat6500 and pix like pix 515, as far as security concerns.

I have a PIX 515 setup and in use. The ISP provides 16 public addresses and routes them to the Ethernet LAN between the PIX and the Internet Router. The ISP manages this router so it is difficult or impossible to get changes made to it. The ISP ro...

Here is the problem:I am testing CSPM 3.0. In user manual of CSPM 3.0 it is described that it is possible to create Remote Access tunnels. For creating rule, Cisco says that Internet can be used as a source, or modelled Cloud network that corresponds...

Has anybody managed to get a VPN working between PIX 6.x and Raptor Ver 6.5? My experience is that ISAKMP fails after successfully negotating phase 1. I've attempted configuration using manual keys but without success.

I have a pix with and address of 192.168.2.250 and have just installed a Cisco 760 to route to a WAN address 192.168.0.0. I can ping everything on the other side of the WAN link from the 760 and the pix but not from any pcs. I have the following on...

I have a problem setting up a pix for one of our customers.The network i'm dealing with consist of a 1602 router on the outside, the pix, an inside network and a DMZ.The DMZ is my problem. The following is connected to the ports of the pix:Outside po...

Is there anything special I have to do to allow a windows 2000 server using w32 time service (SNTP) to access a time server through the outside interface of a PIX? I would like to accomplish this using only PAT on the outside interface's IP address,...

I have a PIX to PIX tunnel running from Head Office (515) to a branch office (520). I have second tunnel running from another branch office's router (1710) to the Head Office PIX. Most of the time, performance of these two tunnels is good/reliable. H...

When PIX is using nat for H.323, PIX changes source IP address of packet header in order to send it to the host in the internet. But H.323 protocol has source ip address in the data portion of incoming packet to PIX. And the destination host in the i...

Hi,I have seen pix 520 in the past but interested to know how the 501 is as a small office FW.Any others of recommendation. I know this is Cisco but does anyone sell other typoe as good.cheersPat

Can anyone give me an opinion on the PIX vs. the Symantec Enterprise Firewall? I prefer the PIX but I need to convince some others why it's better...

Hello All,I have a dmz interface running on network 192.168.2.0 and inside network running on 192.168.1.0. I want all of my devices on dmz to connect to devices on inside network. What conduit commands I could use in conjuction with the command bel...

Is it possible to create lan to lan tunnels from a pix to a CVPN? Fromt a 3640 router to a CVPN 3030? Can you point me to the configuration guide for this? Thanks.

How do I generate an RSA key-pair for the PIX Firewall 520 V6.1(1).This seems to be required in order to use ssh to the PIX instead of telnet.I tried ca gen rsa key 1024 , which I found in this forum, but it did not work at all -> ca is not known.Wha...