Other Security Subjects

I just start PDM on a production PIX that I had to take over and I can see a lot of objet with a _real and _real2 extension. Can't seem to find anything in the pdm doc about those objects that seem a duplication of existing object. What is it? Ple...

Hi guys, i'm going to install 2 blades FWSM on my cat6509 ( i have another 2 still installed ). My problem is syslog server becouse log sent by FWSM are not easy to see and understand ( we have also checkpoint and its logs are more readable ). COuld ...

First I can connect several PCs to a router, then connect this router to an ADSL modem, and finally via this model (which is connected to an local ISP), all the PCs on the LAN can access to the internet; Now, let's do this with a firewall, i.e., conn...

Hi, we have a pix 515e which has been in production for a year with 64 meg memory.We have noticed last week that users coming off this pix were reporting intermittent connectivity problems.All diagnosis pointed to extremely low values for free memory...

Is there a way to disable/remove this checkbox on client PC's?For the users that have the VPN client installed we want to make sure that they login to VPN first for group policy and login script purposes.Or if there is an alternate method that's fine...

I have net like in net-diagram. Vpn is working correctly. Thanks to command sysopt connection permit-ipsec on pixall traffic is permitted.(from 10.1.0.0/16 to 10.40.1.0/24)Every aplication is working OK excetp one. I using Avaya Ip office(inside 10....

On some of my internal machines requires a access to this ip address(203.13.163.xxx) in particular port access 4569 for IAX.Please advice how do i open. I request only expertise to answer my question.Thanks

Hi All,I am facing a strange problem with 501 firewall IOS 6.1(1) .. We have establishd a VPN connection to a network with address 156.135.0.0 and its working fine...the problem is that when i try to open the site that is on ip address 156.135.x.x th...

Setup: Static NAT for smtp a/v box in dmz is filtering mail in/out bound. Need to keep inbound NATing to smpt a/v box, but outbound smtp needs to NATed directly from the email servers to the same Public MX record . Thanks

Hi, on my pix 501, using static mapping i accessed one of our host remotely. Now we have two extra servers and i need to be able to access them from outside, how do i do that? Since the static has already mapped the public ip(of the pix) to a host in...

My netflow cache is showing a lot of packets with source/destination port 0000 0B00. And the source IP of these packet types seem to be originating from a directly connected (over Fast Ethernet) router interface.Is this an ICMP packet type? For examp...

Hi guys, I have a problem. I have a Pix 515e, with outside, inside, and dmz interfaces, the web side is in the dmz, from the outside the web site works fine, but from the inside I can't access to it using www.xxxx.com, only using http://10.2.2.3, whi...

Hi,how can I backup the isakmp key ***** stored in the PIX config ?Please send my the url of the document !!Thanks in advance

I would like to do a debug crypto isakmp... but I ONLY want to see messages for a specific crypto. Is this possible?

I have net like in net-diagram. Vpn is working correctly. Thanks to command sysopt connection permit-ipsec on pixall traffic is permitted.(from 10.1.0.0/16 to 10.40.1.0/24)Every aplication is working OK excetp one. I using Avaya Ip office(inside 10....