Network Security

I have a IPSEC/IKE tunnel successfully up between an IOS router (2600 series) and a PIX 520 firewall. The ISAKMP SA's show up fine, and the IPSEC SA's show correctly, with the correct peer, etc. A ping initiated from the IOS side gets to the PIX, and...

When using the VPN client 3.5 on Win 2k machine, I am not able to access DUN entries using the DUN check button.It can be made to work by using the third party option. The option is use is: rasdial <DUN entryname> <number> <name> <password>This works...

My company has not switched over to W2k yet. I'm trying to establish a VPN connection for our outside sales reps. Most of them are using either cable modem or DSL to get internet access. I am unclear on getting the VPN set up. Currently I have our fi...

Hello,everyone: I have a question : How many access-lists can apply to a pix interface? I know that a router interface can only apply one access-list to it in one direction(in or out).

Does anyone know of or heard of how to save the PIX config to a tftp server.Unlike the routers where you can directly save the running or startup config to a tftp server. Thanks in advance.

I am trying to find a way to have multiple hosts inside a DMZ be able to access my entire internal network. Does anyone know of a way to do this without creating individual statics for every device that may be accessed?

I have a PIX 515 with inside, outside, and DMZ interfaces. I want to install a proxy server on the DMZ and have all my inside hosts go to the proxy first, before accessing the internet. If I don't want to configure a proxy-server address on each of m...

Hi All, I put this thread in the remote access area as well because of the port I am having trouble forwarding through the PIX.What I'm trying to do is forward port 3389 (windows terminal services) to a W2k server. I tried using access list settings ...

Hello,everyone: I have a PIX-535-R-BUN and a PIX-535-FO-BUN, I want to know whether the two pixs can configure as failover mode ? I read the doc of pix, It say that The PIX 515, PIX 525, and PIX 535 can only be used for failover if you have the optio...

how to setup VPN group client to logon to a win2k domain via Pix 515

Hi,I am trying to set up a VPN connection from a PIX 501 to a Linux FreeS/WAN using IPSEC and 3DES (another consultant handles the Linux-server).From the Linux-side, they can export their public key and send it too me.My question is if I manually can...

there is a command for split tunneling for the IPSEC clients... but what about PPTP? can you do it? Or is the only option to uncheck "use default gateway on remote network" on the client..Thanks!

I have one PIX515 with two interfaces. In the inside interface is my Primary Domain Controller PDC with windows 2000 advanced server and in the outside interface are all my users running windows 2000. I have openened all the necesary ports in the PIX...

Can you telnet "from" a PIX?

Hello,I have a exchange 5.5 server behind the PIX 501 and would like to open port 110 and 25 on the PIX and have the pix redirect traffic to the exchange server on private IP 192.168.0.222How do you achieve this? If anyone have done this before, can ...