Network Security

I just got a PIX 506 (5.1) and I was wondering if it worthwhile to install the PIX Firewall Manager or should I get (and probably pay for) PFSS?I understand the basic difference of both but I am not sure in term of logs, which one is better consideri...

Can you overload an external IP address on the PIX 525?

I have heard that the "conduit" statement will not be in future versions of the PIX IOS. I also heard that it would be replaced by the access list command set. Does anyone know this for certain or have I just heard gossip?I am not all that good wit...

what is the proper placement of pix considering im natting all my internal web servers, and the arrow point want to see the public address on the outside interface, where do i place my pix as to avoid problems and avoid haveing to add a million rules...

Hello,I need to conduct a security audit on ourinfrastrcuture based on PIX and Cisco Secure IntrusionDetection System.Does someone know where I can find some usefullinformation to test and try to pen-test this kind ofcomponents.I want first to check ...

Hi ,I want to block chat service to a particular user.I am using PIX FW 515 U ver 5.3(1)I have used the fllowing commond to do so:outbound 50 deny (IP addrs) (255.255.255.255) irc tcpapply (inside) 50 outgoing_srcBut it is not taking effect, I mean t...

Has anyone run a project like this ? My concern iswhat needs to be done on the server hosting ms -proxy.right now, a station not in the NT domain gets throughthe pix, but those folks that log on to the domain fail.

I've configured my PIX to allow H.323 traffic. After read the reference from Netmeeting, I understanded that I have to allow secondary dynamic TCP port traffic after H.323 port is connected so I used "Establish" command to do so. Then I found the n...

my dailup user cannot access the internet after they connect to the vpn

I have an ISP that will only give out one ip address per MAC address. I am using PAT for outbound traffic but need to add a static mapping for incomming SMTP traffic. The static map command will not let you use an address in the PAT pool. Any ideas o...

Is there a way to prevent a user from logging out when using virtual telnet? I've setup virtual telnet so that users who are behind a proxy server with their ISP can authenticate. Otherwise the PIX sees their proxied address as their source address a...

PIX 520 Version 4.2(3). I would like to have anyone on the inside establish a Microsoft PPTP client based VPN connection to outside devices through the firewall. What configuration commands are required? Thanks. Don Williams

I have a PIX 506 that is blocking MS Terminal Services which uses port 3389 tcp/udp. Whenever I apply the conduit or access-list statements to allow full access using these ports, they are still being filtered by the PIX even after the clear xlate c...

Hello,I have two pix conneting to ISP. I do not have NAT configured so I am using public address for my servers. Network is redundant per se.Problem is when user trying to access a web site on a server that is behind the PIX 2, incoming traffic is...

I have tried to set up a PIX 515 UR with DCHP client on outside (ip address outside dhcp setroute) and a DHCP server on the inside without success.Is DHCP support limited to PIX 506 ?I found this on CCO:DHCP ClientDHCP client support within the PIX F...