Network Security

Hi I have three leased lines to the Internet and just bought a PIX 515UR. The vendor told me that one PIX unit would be enough to handle all three lines (each with different IP addresses) and supplied me a PIX with three Ethernet interfaces.Now, he t...

I would to connect two pix 520 in a failover configuration.When I ignite the secondary, both secondary's and primary's configuration was resetted. The cable's primary end was inserted in the primary.I premise to have modernized the version of the sec...

Does anyone know how to interpret the output of "show conn" command, specifically the "flags"?Here is an example:SNIFF# sho conn local 192.168.120.189 net 255.255.255.255TCP out 192.168.225.30:80 in 192.168.120.189:1510 idle 0:00:02 Bytes 375 flags U...

hi.....my network config is that..A(network)-Router-router1-------pix-router2-internet..................................................| ......... server(Unix,linux,win200server)config pix open some tcp and all icmp,and using nat0pix sec100:public, ...

Hello Forum,Can I place a 1750 Behind a PIX 520 and have the PIX NAT a Public IP Address on the Outside Interface (Internet) to a Private IP Address on the pix/inf2 and have a IPSec Tunnel come up and pass traffic? My guess is that it won't work.If N...

with this config, I cann't ping 192.168.1.253,the debug trace indicate:192.168.10.101>212.99.175.60>192.168.1.253how can I direct the traffic go to DMZ no go to outside.following is my pix 520 6.0(1)'s config list : Saved:PIX Version 6.0(1)nameif eth...

Does enyone know why there is a version 2.3i of CSPM for CSIDS and one for the firewall.my problem is that i have a network with pix and CSID to administer with CSPM and i don't want to have to stations to do it. how can i install the both version on...

Hello,I have PIX 6.0 with IPSec support. I have nat 0 statement with access lists between dmz and inside interface. Now, I want to introduce VPN client configuration. In order to do that, I need to have nat 0 statement. Is it possible to have more th...

I have encounter a security access problem.One PIX 520 with four NICs.It has a enet interface with security value 10 and a hbnet interface with security value 20 besides the inside interface with security value 100 and the outside interface with secu...

Is it possible for the system administrator to configure the PIX in such a way that a certain set of users on the internal network who are duly authorized by the PIX to be able to access only one site (say, www.abc.com) while other users could get to...

I have two sites with problems with the arp cache and the alias command.It seams like when I use pix 6.0(1) and the alias command it sometimes respond to an arp broadcast so the clients on the network get the pix mac adress and makes it inpossible fo...

The web server is on the DMZ zone,but inside user cann't access the web server,I try to use the alias command to solver this problem. alias (inside) 192.168.1.252 211.99.175.50 after doing so, when I ping our domain name I can see the domain name is ...

I have a pix 520 with 3 ports, at the DMZ there is a web server,I use the static command to allow outside user access the web server,To allow inside user access the web server correctly,I use the alias command to resolve the domain name to DMZ IP add...

If you don't need the new features, are there any other good reasons / arguments to upgrade from 4.4(5)to 6.0(1)?Thanks,Ted

Our MS Proxy 2.0 Server is sitting between our Internet router and our internal router. It appears that the proxy server is performing NAT and HTTP proxy services. How do we ascertain whether the proxy server is performing NAT, since we are not that ...