Network Security

Hi,I´m a little bit confused about acccess-lists on the ix.My questions:a) Does an access-list on an inside (higher security interface contain a implicit (not viewable) "deny any any" statement?b) Assume IPSEC clients are terminated on the outside in...

I'm installing a firewall for a WISP and am trying to find a list of limitations of using PAT on the PIX525. The safe decision is NAT however, many public IP's are needed. If I choose PAT, how am I limiting Internet access?

Are there any plans to support VLAN interfaces on the PIX? Boy this would solve a lot of problems!!

If the PIX is setup with a failover then afetr a defined poll interval if any of the links of the active PIX goes down , then the failover detects this and takes over as the Active.Is there any configuration by which i can restrict this to some of th...

We want to run a PIX 520 FW (V6.1.1) within our intranet (not to the Internet).Like this, both interfaces, inside and outside, are RFC1918 addresses which we can maintain ourselves and therefore there is no need of any address translation.We want to ...

Hi, I have Cisco Pix 5.15 with Version 5.1(2). I have three ethernet interface. One for the inside and two for outside. The outside interface is connected to the Fast ethernet interface of 3640 which has two ip address one primary and another seconda...

I Have 2 Cisco secure IDS formerly Netranger current 3.0(1)S8 and PIx 525 ver 6.1 am USING CSPM 2.3.2When I set up the signatures to shun they appear to do so but not in a very fast manner and then not throughly. As I look at my logs I am getting man...

Currently I found my network unstable and want to narrow down the problem.Is that any way to downgrade my PIX from v6.0 to v5.3?

I know that when using HSRP for routers and switches that the HSRP that will use a virtual IP and MAC address that it uses in case of hardware failure. With a PIX 520 how exactly does he failover work?Is it similar to the way HSRP functions-i.e. virt...

When compare Netscreen Firewall vs. Cisco Firewall PIX 535, The Netscreen Company said that:"While the PIX 535 does support gigabit firewall performance, this does not hold up under normal traffic activity. With just a few thousand sessions active on...

Hi..what are the differences between the PIX firewall (software v6.1) and IOS ENTERPRISE/FW/IDS PLUS IPSEC 56 in terms of firewall functions ??If my customer needs firewall features, how should I propose to him ? How to choose a best solution for him...

Hi,Every now and again my PIX 515 freezes completely and stops responding on the network completely. However, the failover unit doesn't kick in unless I physically switch off the box. Sometimes this is after a bunch of packets arrive from our perimit...

We have a PIX 515 and we are trying to control privilege levels when our admins login to the console port or Telnet. we have the following configaaa-server RADIUS (inside) host 192.168.x.x MySecretKey timeout 4aaa authentication telnet console RADIUS...

Hello,I just update to PIX 6.0.1 on a PIX 515UR (6 interfaces) and now I received messages like this :106011: No routing to arrival interface.I check the configuration and I don't understand this messages... I have read tons of documentation about th...

Does anybody know if is it possible to define local users with levels of privilege in cisco pix firewalls like in cisco routers ?