Network Security

IN the PIX documentation it doesnt give any guidelines as to what the flags on the end of the message mean. In the syslog message below. The tcp session is reset and any packets following this are denied because of no connection in connection table.F...

In the Microsoft KB num.:Q307888 there is a statement about the messenger v4.x :"If you are on a local area network (LAN) behind a firewall (for example, if you are on a corporate network), you can call another computer to talk to a person who is beh...

I am having SAP servers on my network which I need external users to use , what access-list command should I be using for that. SAP uses tcp port 3200.access-list 111 tcp ??? Also how can I can check if my firewall is stopping all unauthorized access...

Has anyone gone the route of freeradius for AAA authentication?I am just starting out with VPN configs and have gotten as far has having the PIX communicate with the freeradius server, but my authentications are failing...

Hi all, I am new to PIX and VPN...Everything seems to be working when connecting to the PIX 501 using a Windows 2000 remote access laptop however, the syslog gets full of errors like this one:Local4.Error 192.168.0.1 %PIX-3-106011: Deny inbound (No x...

I have used PIX525 with failover unit. Traffic passed PIX 525 drops from 1.5M/s to 300k/s. Is it normal ?If not, please suggest how to troubleshoot and possible cause of problem.Thanks.

I need to set up a 506 located in a branch office out of state. My question is this.Can I hook a modem to the console port and dial into the router and access the console remotely?If so how do I do it? I have setup an external modem set for auto answ...

I am having a problem that stems from trying to set up a WebSense server in our DMZ. It seems as though the DMZ servers cannot ping the DMZ interface of the PIX, and the PIX cannot ping (or contact of any sort) any of the DMZ servers. The servers in ...

what is the minmum number of public ip address required to allow inside - outside internet browsing through a Pix firewall. (not using DHCP from ISP)(1) for outside interface&(1) for PAT addressThe way I see it is (2) static public I.P address.Please...

Is the only limiting factor behind using a PIX 506 its capabilitity for throughput? Is it limited any way by number of connections?

Hello,I want to translate telnet and/or FTP sessions to a public ip adress. Other types of sessions like HTTP don't have to be transalated because they a proxied by a proxy server (squid). Can somebody tell me how to configure this on a PIX.RegardsAa...

Correct me if I'm wrong,PIX doesn't support VLAN right?Even the simplest setup?Consider the following scenario:A 12Port Catalyst Switch split into 2 Vlans,VLAN1 is for dmz1 network which connects directly to dmz1 interface on the PIX,VLAN2 is for dmz...

One of our customer already has a VPN function in office and for remote users. They are using VPN-SW-DES-100=. Now they would like to upgrade their OS to WinME, Win2000 and XP. But VPN-SW-DES-100= seems cannot support ME and XP. Since the VPN client ...

Can one site pass DHCP requests through a VPN to a Server on the other side that is not the Cisco device. The problem I see is getting accepted on the VPN before you have an IP address.

Can someone explain why I need this for my ADSL connection. I have a ADSL modem configured which I am about to change for a ADSL Router.What's the reason for PPPoE in my firewall ? Thought authentication was done via the Modem/Router.Also what versio...