Network Security

I need to separate a OSPF area 0 with a firewall, becouse now some WAN connection are provided by a carrier in MPLS. I would like connect this WAN router outside the firewall, however I need also to extend the routing protocol OSPF to WAN. How I can ...

Will priority or custom queuing work along with an ipsec tunnel? Does the encryption occur prior to the queuing process?

i want to Purchase one Pix Firewall . now thing is i am design one 16 network in there i use cisco 1750 series routr , presently all the network is connected with each other by x.25 PSTN media ... but the group of company want to go for Radio link . ...

I am not able to ping the PIX outside interface from the inside network.Pinging from inside network to outside host works fine.Pinging from outside network to outside interface works fine too.For testing purpose I put in a access-list acl_out permit ...

I have a IPSEC/IKE tunnel successfully up between an IOS router (2600 series) and a PIX 520 firewall. The ISAKMP SA's show up fine, and the IPSEC SA's show correctly, with the correct peer, etc. A ping initiated from the IOS side gets to the PIX, and...

When using the VPN client 3.5 on Win 2k machine, I am not able to access DUN entries using the DUN check button.It can be made to work by using the third party option. The option is use is: rasdial <DUN entryname> <number> <name> <password>This works...

My company has not switched over to W2k yet. I'm trying to establish a VPN connection for our outside sales reps. Most of them are using either cable modem or DSL to get internet access. I am unclear on getting the VPN set up. Currently I have our fi...

Hello,everyone: I have a question : How many access-lists can apply to a pix interface? I know that a router interface can only apply one access-list to it in one direction(in or out).

Does anyone know of or heard of how to save the PIX config to a tftp server.Unlike the routers where you can directly save the running or startup config to a tftp server. Thanks in advance.

I am trying to find a way to have multiple hosts inside a DMZ be able to access my entire internal network. Does anyone know of a way to do this without creating individual statics for every device that may be accessed?

I have a PIX 515 with inside, outside, and DMZ interfaces. I want to install a proxy server on the DMZ and have all my inside hosts go to the proxy first, before accessing the internet. If I don't want to configure a proxy-server address on each of m...

Hi All, I put this thread in the remote access area as well because of the port I am having trouble forwarding through the PIX.What I'm trying to do is forward port 3389 (windows terminal services) to a W2k server. I tried using access list settings ...

Hello,everyone: I have a PIX-535-R-BUN and a PIX-535-FO-BUN, I want to know whether the two pixs can configure as failover mode ? I read the doc of pix, It say that The PIX 515, PIX 525, and PIX 535 can only be used for failover if you have the optio...

how to setup VPN group client to logon to a win2k domain via Pix 515

Hi,I am trying to set up a VPN connection from a PIX 501 to a Linux FreeS/WAN using IPSEC and 3DES (another consultant handles the Linux-server).From the Linux-side, they can export their public key and send it too me.My question is if I manually can...