Network Security

Here at our company we sell a lot of LANtoLAN VPN solutions using 506,515R and 515UR hardware. In the past everything has worked very well and our clients have been extremely pleased with the results. But the last four 515's (3 515R's, 515UR) are hav...

Please reply to: carolyne@cbic.comWe have a PIX firewall, ver 5.3, a DMZ (192.168.0.0) and an internal (token ring) 140.100.1.0 network. One of our applications needs to have two servers in our DMZ have the ability to communicate via email. Both serv...

I have 2 devices sittingon my DMZ and I am unable to ping,tracert any Internet related device. Out of these two devices I only have one ACL from (outside,DMZ). The scond device is used as a cache server for port:80.Any sugestions?

We are replacing our current Guardian firewalls with Cisco Pix firewalls and I am having a hard time coming up with a strategy that works for us.What we do currently is define access by machine name. This way, a PC can be allocated a dynamic address ...

I've come across a problem w/ a home-grown application on a DMZ opening a connection to an internal SQL server through a PIX. The app seems to want to open a connection and keep it open forever. The Pix, as per default, drops the connection after a...

Hello!I am a rookie on PIX configuration, I just want to know if it is possible to filter a website without having a websense?If possible please teach me how, I need to filter some websites. How about filtering "Morpheus", ICQ and the likes?Your inpu...

Anyone have this working...PIX (6.1.1) with static IP, and Sonicwall firewall (6.2.0) with a dynamic (dsl) ip address? I've sort of got it working by disabling Mode-config and XAuth on the 0.0.0.0 crypto-map. It makes it through Phase 2 and sets up t...

I am curious if I have a correct understanding of the two. I am new to CBAC.PIX does the following:1. Uses access-lists to allow outgoing and incoming traffic at layer 3 and layer 4 (port redirection).CBAC does the following:1. Augments access-lis...

Some users can access the internet while some users cannot thru the pix.In the pix we find out that some of these users are having there addresses patted several times,while some users have there connection flagged.For instance we have flag r,flag s ...

Hi, I'm running a 515 with 6.1 code. RIP v2 is working fine with MD5 authentication to an internal 2600 router. Via debug on the 2600 I can see the routes recieved (just a default from the pix) so I know communication & RIP authentication is good. ...

When I tried to access the PIX firewall using the external IP address (from the Internet), I noticed that the PIX did not created a syslog entry to report this attempt. Does someone know how to setup the PIX that attempts to access the pix are logged...

Has anyone had any success in passing DCOM/COM through a PIX or any other firewall for that matter. I have one host (Web Server) in a DMZ off the PIX and the other host (Middle Tier)is inside. I have tried NAT'ing the (MIddle Tier) out to the DMZ and...

I am setting up the PIX with inbound connections to several different hosts on my internal network. I am confused on using the static command because I have eight internal hosts that receive connections from the outside world. Do I have to use a ...

how do you enable SSL port 443 on the pix 506

Hi All,I have a mail server on my LAN , PIX on the outside, and then the ROUTER and then the rest of the WORLD :).The users can access Mail , send and receive mail , but when they try to log on to the mail server from their house Using outlook expres...