recently I noticed a udp flood attack, which was originated by a LINUX server on a DMZ of my pix, where the server sent udp packets at very high rates towards the Internet through my pix. How can we prevent that?
Hello,Just a quick question:I have CME 4.0 installed. My internal extensions are showing up on the PSTN. When I call from 555-555-8301, it's coming up to outside callers as 8301. I'd like it to come up as 555-555-8300. In other words, I'd like th...
HI!I have two local usersusername vty pasword blablablausername vpdn password blablablaaaa new-modelaaa authentication login default localHow to disable local login to vty-line for user vpdn(using just for vpdn-tunnel authentication) and enable this ...
Hi, I just upgraded a new unconfigured pix 515E from 6.3.5 to 7.0.4 to 7.1.1. On every reload I see this message:Need to burn loader....Erasing sector 0...[OK]Burning sector 0...[OK]during the bootup. I'm wondering why it needs to do that everytime. ...
As Cisco CSA license charges are signficantly different from between server and client agents, we need a method, report, SQL query to be able to determine the number servers and number clients used in a given group. This is to allow internal "charge...
I have a router who acts as a hub for other five spokes in DMVPN1,and also as a spoke in DMVPN2.It works well,except that after the first tunnel's lifetime,some tunnel's IKE will be deleted,and their vpn session will be active with no IKE.Is this nor...
I have a DMVPN network,currently I ran into a strange issue.For exampleother network --HUB---(GRE+IPSec)----[Spoke1 router--primary router]spoke and primary router are in the same site.All three run BGP,Hub in 65000,spoke and primary in 65001.Current...
how to stop the logging on the WARNINGS in CSAMC. Warnings do not have a wizard to create an exception to stop logging and I dont want to change the rule so do I need to copy the rule and uncheck logging, and if so, is it ok to have a copy of the sam...
hello,I am experiencing slow transfer rates through the PIX. What is the best way to troubleshoot this on the PIX. Are trnsfer rates configurable on the PIX for certain protocols, ie ftp? How is that accomplish?I am aware that slow transfer rates cou...
Haven't tried the new feature 802.1Q in PIX. I have a question that I can't figure out by looking at the table of interfaces for PIXIf I have PIX-525-UR in HA Pair and have the following;2 FE2 GE MMHow many Logical Interface I have in GE?Is the numbe...
HiI've inherited a firewall and I can see the following inside it. What I don't understand is why are there static maps in the config if the dmz is not using nat. Could someone please explain thei to me, the config is listed below. global (outside) ...
Hello,I've been trying to come up with different solutions for VPN backups to T1 connections. I originally would like to use VTI connections for a client but we need to look into other options since we won't be able to upgrade all of our equipment t...
I am trying to set up an l2l tunnel between 2 pix firewalls. I used sysopt connection permit-ipsec to bypass the acl on the outside int. The interesting traffic is set to permit any any. When I ping from one side to another the tunnel establishes wit...
i'd like to know how much bandwidth is loss if using a site-to-site vpn with cryptography.does anybody have an idea ?thank you very much and i'm sorry for my poor english. :)
