Other Security Subjects

I have site to site connection as fallows;3005_A---> internet ---->3005_B----> internet ---->3005_C --->3005_DI can connect and ping from site 3005_A to 3005_B and from 3005_B to 3005_C , but can’t connect directally from A to C or from A to DDoes I ...

Hi,I have a problem with my pix. The situation : i must nat if the packets go to my vpn.i must nat if the packets go to the web.So i must define one rules of nat for each case. But i don"t know how says that to my pix. I think used an acl (same as w...

I'm assisting a school district with some network issues. Last Friday they had an accidental power failure, upon returning everything back to an up state no one seems to be able to get through the VPN 3000. We authenticate but can not get to any de...

I have a PIX-515(This product has reached end-of-sale),not PIX-515E.It have two slots,I have installed two ethernet cards.but when I reboot the PIX,I can use 3 interfaces only,why?

Hello - My Question is at what point do we decide to look at adding another 3030 Concentrator for Redundancy and to Load balance. We have 250 sites nationwide that connect via BB using the 3002 HW client and 100+ via dial up using the software clien...

Is it true that if Primary and Secondary DNS servers are either sides of PIX and PIX is using NAT the ZONE transfer will fail if the file is too long?ThanxVikas Khanduri

Hi,I need to open a session X between an inside interfaceand the dmz. I put a acl by opening the port xdmcp inside towards dmz but how to make for dmz towards inside and ports 6000 and 6063?thanks

I'm using a Cisco VPN Concentrator 3005 as a VPN Gateway for my remote users. Today we started using digital certificates to prove the identify of the remote users. The concentrator accepts the certificates from the remote users. But the users also h...

Hi,I have a corporate network protected from Internet through a Pix firewall. The corporate network is accessed by vendors who connect via IPsec VPNs on to the extranet arm of the firewall . Specific application layer ports are opened for traffic fro...

Will the new viewer work with an older sensor running v3 code?

I have a PIX 506e firewall. I have one public IP which is assigned to the outside interface.I have already allowed smtp traffic from the outside to my mail server in the LAN. To do this I created a static NAT translation and the appropiate access lis...

I have converted from CSPM to MC to monitor my IDS-4210’s. In CSPM you could choose what signatures not to report. How can I set MC to ignore certain signatures?

Hello, I have a 1720 with an IPSEC IOS and only 1 fastethernet interface I need to configure a VPN access. I purpose to active NAT on 2 sub-interfaces on the same physical interface (ip nat inside / ip nat outside). This design is it possible ? This ...

Dear List,I would like to find out if it would be possible to create a filter at the NIDS sensor that would allow filtering down to port levelSince most of the src IP addresses in the table below appear to be dns servers, I can only conclude that thi...