Network Security

I am curious if I have a correct understanding of the two. I am new to CBAC.PIX does the following:1. Uses access-lists to allow outgoing and incoming traffic at layer 3 and layer 4 (port redirection).CBAC does the following:1. Augments access-lists ...

Some users can access the internet while some users cannot thru the pix.In the pix we find out that some of these users are having there addresses patted several times,while some users have there connection flagged.For instance we have flag r,flag s ...

Hi, I'm running a 515 with 6.1 code. RIP v2 is working fine with MD5 authentication to an internal 2600 router. Via debug on the 2600 I can see the routes recieved (just a default from the pix) so I know communication & RIP authentication is good. Th...

When I tried to access the PIX firewall using the external IP address (from the Internet), I noticed that the PIX did not created a syslog entry to report this attempt. Does someone know how to setup the PIX that attempts to access the pix are logged...

Has anyone had any success in passing DCOM/COM through a PIX or any other firewall for that matter. I have one host (Web Server) in a DMZ off the PIX and the other host (Middle Tier)is inside. I have tried NAT'ing the (MIddle Tier) out to the DMZ and...

I am setting up the PIX with inbound connections to several different hosts on my internal network. I am confused on using the static command because I have eight internal hosts that receive connections from the outside world. Do I have to use a sepe...

how do you enable SSL port 443 on the pix 506

Hi All,I have a mail server on my LAN , PIX on the outside, and then the ROUTER and then the rest of the WORLD :).The users can access Mail , send and receive mail , but when they try to log on to the mail server from their house Using outlook expres...

configuring Pix 506 using IOS 6.1 I'm able to access the internet inside out, and I can access my web site from the outside only by IP address not by name ie. www.mydomain.com. Also I'm not able to recieve mail. Config lines that I'm using any sugges...

I found that there are only host objects and network objects in PIX. Therefore, if I have ten machines such as 10.1.0.1, 10.1.0.3, 10.1.0.5,...... 10.1.0.19 and each of them needs to access 100 subnets such as 10.0.1.0/24, 10.0.3.0/24, 10.0.5.0/24, ....

I have a PIX 525 running PIX 6.01. I'm trying to setup a SuperScout email filtering server to scan for viruses and such. I had a static address translation from the public IP address of our mailserver to the actual private IP address of the server. I...

In the configurator, it's possible to buy a 4 ports Ethernet card. With the bundle includind 2 ports, this give us 6 ports. Is it possible to use all those ports since in the doc, it's indicated only 3 ports. Which answer is right? (3 ports or 6 port...

In PIX 515 I have VPN clients configured, and crypto map vpnclient is applied to the outside interface.Now I want to configure site to site VPN and my crypto map is different, and the parameters are also different. how can I apply two crypto maps to ...

I had my PIX 515 FO setup with the PDM. I enrolled the primary with our internal Microsoft CA. Now my PDM doesn't work. The standby unit doesn't have a Cert and it's PDM still works. Anybody else had this problem or any suggestions.

Hi all,my customer has 1 PIX firewall with a CSPM 2.3.3f.Now we have to evaluate an IDS System.I've read that i need 2.3.3i to manage Cisco IDS Sensor. Do you know if a unique version exist?CSPM 3.0 solves my problem?Thank you