Network Security

Does PIX firewall run tranperant mode with user by default. I mean that does PIX firewall open all the Internet port ? and can we deny by the domain name?

I have two dns servers (win2k), one hosts primary zones (outside) and the other hosts secondary zones(dmz). I am unable to get them to transfer zones between the primary and secondary server. I get a "denied" error message in the event logs (NT) on t...

Hi,I put 2 PIX in stateful failover and did a simple test : during the download of a big file with FTP, I shutted down the master. The second PIX took the connection and the FTP resumed. I powered on back the master and after several seconds I manual...

Hi,I´m a little bit confused about acccess-lists on the ix.My questions:a) Does an access-list on an inside (higher security interface contain a implicit (not viewable) "deny any any" statement?b) Assume IPSEC clients are terminated on the outside in...

I'm installing a firewall for a WISP and am trying to find a list of limitations of using PAT on the PIX525. The safe decision is NAT however, many public IP's are needed. If I choose PAT, how am I limiting Internet access?

Are there any plans to support VLAN interfaces on the PIX? Boy this would solve a lot of problems!!

If the PIX is setup with a failover then afetr a defined poll interval if any of the links of the active PIX goes down , then the failover detects this and takes over as the Active.Is there any configuration by which i can restrict this to some of th...

We want to run a PIX 520 FW (V6.1.1) within our intranet (not to the Internet).Like this, both interfaces, inside and outside, are RFC1918 addresses which we can maintain ourselves and therefore there is no need of any address translation.We want to ...

Hi, I have Cisco Pix 5.15 with Version 5.1(2). I have three ethernet interface. One for the inside and two for outside. The outside interface is connected to the Fast ethernet interface of 3640 which has two ip address one primary and another seconda...

I Have 2 Cisco secure IDS formerly Netranger current 3.0(1)S8 and PIx 525 ver 6.1 am USING CSPM 2.3.2When I set up the signatures to shun they appear to do so but not in a very fast manner and then not throughly. As I look at my logs I am getting man...

Currently I found my network unstable and want to narrow down the problem.Is that any way to downgrade my PIX from v6.0 to v5.3?

I know that when using HSRP for routers and switches that the HSRP that will use a virtual IP and MAC address that it uses in case of hardware failure. With a PIX 520 how exactly does he failover work?Is it similar to the way HSRP functions-i.e. virt...

When compare Netscreen Firewall vs. Cisco Firewall PIX 535, The Netscreen Company said that:"While the PIX 535 does support gigabit firewall performance, this does not hold up under normal traffic activity. With just a few thousand sessions active on...

Hi..what are the differences between the PIX firewall (software v6.1) and IOS ENTERPRISE/FW/IDS PLUS IPSEC 56 in terms of firewall functions ??If my customer needs firewall features, how should I propose to him ? How to choose a best solution for him...

Hi,Every now and again my PIX 515 freezes completely and stops responding on the network completely. However, the failover unit doesn't kick in unless I physically switch off the box. Sometimes this is after a bunch of packets arrive from our perimit...