Network Security

Hi All,Did someone ever encounter PIX problem when the pix configured for the syslog server with tcp port ?I encountered this problem when I configured the pix for syslog server with tcp port..the command is logging host (in_if) (host_ip) [tcp/port_n...

Can the Pix redirect http request and forward to a Surfcontrol box like it does with Websense

IGRP does not have a clue about 0.0.0.0 (default route) created by the PIX firewall. The scenario is that my PIX firewall is attached to the internet and is running NAT inside (135.50.0.0). I need to propagate the default route in my IGRP domain. ip ...

I have a situation with an office attached to our internal network via a T/3 and sharing the same internal IP address space. Both offices have different ISP's. I also have a test web server on our internal network and it is being static assigned an e...

My external DNS servers are on a PIX DMZ interface and they support multiple Web and Application servers on the same phyical subnet. When one of these servers attempts to access a site ON THE SAME PHYSICAL SUBNET, the DNS query resolves to an externa...

Can someone indicate if a Preshared keys and also CA authentication is allowed in the same config of PIX. We have a customer with PIX configured for preshared keys. They want to add a new VPN with CA auth. Can we just add all CA related commands in t...

Using 4.4(7) code on a pix 515, default fixup statement for ftp, and both NAT and PAT configured. FTP requests for large files hang after a seemingly random amount of time. I reviewed the field notice regarding PTR records in the DNS, but I don't thi...

Being that I need CSPM to manage numerous firewalls, I would like to find out if there is a way to implement, and maintain, separate ACL(s) for each firewall. Aside from that, When I try to actualy implement a rule through the policy tab, that involv...

Hi,I have pix 6.1 firewall in the corporate office,I have pix 3.1 client in the remote network,I have setup the VPN access,I am able to connect to the pix from the remote network and be able to ping outside ip address of the PIX,I am not able to ping...

interface on standby pix shows in 'testing' state from primary. but shows as normal when logged in from standby pix. what is the problem and what can I do to correct it?

I run the following commands to copy PIX config file to TFTP and got error message:tftp-server aa.bb.cc.dd /pix01102002write net aa.bb.cc.dd:pix01012002building configuration...TFTP write at 'aa.bb.cc.dd' on interface 1Timed out attempting to connect...

I have a client with multiple ISPs who would like to host web internally (off one isp) and mail internally (off the other isp).DMZ (Mail)172.16.11.1 /24-------+(WWW)172.16.11.2 /24 | |Inside 172.16.10.X /24----PIX 515----+(provider1) | | +--------+ (...

Hi All,I know it is not documented anywhere but I was wondering if it is at all possible to make a PIX boot from a tftp server. I know it can be done with routers, but have not heard it done with a PIX.Thanks in advance.Willie

I have a Pix 515 running 6.0(1) software. I'm trying to give split-tunnel access to a vpngroup, but am having difficulty with the implementation.Here are my configuration entries:vpngroup 2000clients split-tunnel webaccessaccess-list webaccess permit...

i have configure the remote client/w cisco VPN client 1.1 to dial into my 1720. The VPN tunnel is builded successfully. i can ping both remote client IP and internal IP. now , i would like to know how to i configure my win98 client to logon to my Dom...