Network Security

I have configured NAT (range) on PIX, and everything was OK. Sudendly, my inside clients could not go outside. I have no restriction for inside users going outside. If I use PAT, still does not work. If I use PAT with PIX outside interface, everythin...

Quick question,,,I'm reading that when you bind an access list to an interface with the access group command, the list is applied to traffic inbound to the interface. Just to clear this up, lets say I have a 506. I apply the access group the inside ...

I'm trying to block certain ports for inbound and outbound traffic on the PIX. What command will allow me to do this.Thanks.

Hi All,Which PIX Image Version supports for IDS feature set... ? How can I update the IDS signature in the PIX ??thanks

After upgrading pix firewall to 6.01 or 6.11, I get the following message: Error: can not add name attribute. I think it is a cosmetic message. Anyone can explain this error?

Which IOS is best for PIX: 5.3.2, 6.0.1 OR 6.1.1

I have a user that keeps getting disconnected while connected to and ICA server. I checked the PIX syslog and found the following:Built outbound TCP connection 3463853 for faddr 12.33.114.144/1494 gaddr 209.227.21.3/58769 laddr 10.1.6.152/1370Teardow...

We have Internet feeds from two isp's. Routers running BGP and two Pix 525s configured with statefull failover. I would like to use both the links for load balancing and not use hsrp. All the notes I have read point to placing a router in front of th...

Hi,Would anyone be able to confirm or give me some hints for what I need to do to get an exchange server functioning ok through a pix (I have a 506 but I assume its same for all).Is it just a case of allowing it access out through nat/global and then...

I want to allow inside users to access internet(outside) unrestrictedly. but I need to restrict inside users's access to dmz. But default PIX allow all from high security to low security.

We have 2 PIX 515s, each with 4 ifs - outside, inside, dmz, and private connected between the two. If we run the primary PIX by itself, it works fine. When we connect the secondary and bring it up, both may work for a while, but then it will hang. An...

I am setting up a Pix 515 to a client that has cable Internet access. They have 1 IP address assigned to them that I will be using on the Outside (eth0) interface. I have researched PAT on CCO and other resources and it seems that I cannot use this ...

Hi,Is there a command line for PIX 515-UR v6.1 Firewall to send the syslog trap to multiple workstations (trap destinations). These destinations are on the same local subnet. If so, please provide a detail command line so I can test with. Thank yo...

I am new to the forum, looking for some help on several problems. First, my toughy...We recently replaced a PIX Classic (ver 4.4(7) with a PIX-520 (ver 6.1(1), and also changed ISPs at the same time. One of our internal servers pulls weather web page...

I have upgraded to CSPM 2.3.2f (actually a fresh install), rebuilt my topology, setup my static mapping, NAT, globals, etc. I then recreated my policies for access to the mail and dns servers - exactly the same as they were in CSPM 2.2. Unfortunatel...