Other Security Subjects

I'm using PDM 3.0(2). Can I create NAT host in PDM under outside interface, then have the real host map to that (automatically) on inside interface? Or do I need to create host in CLI? E.g., host x.x.x.x NATHost

Could fragmented packets be used to defeat checks like DHCP Snooping? If a frame doesn't contain the full packet, how would the switch deal with it? A later fragmented frame might be the one that contains a phoney CHADDR (hardware address) field in t...

Site A = x.y.40.110/255.255.254.0Site B = x.y.41.70/255.255.254.0Site C = x.y.41.124/255.255.254.0All sites are from the same ISP and have the same gateway address.I host a web site at A in the DMZ of a Pix 515E a customer at B can not get to. We ha...

Hi all,I try to set op a LAN-2-LAN connection to a partner. We need to initiate the connection. When we initiate the connection this is what is displayed in the logging:44158 08/05/2005 11:27:07.390 SEV=4 IKE/41 RPT=1083 A.B.C.D IKE Initiator: New ...

On PIX-506, what's the command to copy startup-config from TFTP?

Hi,I need to be able to access from within my inside network DMZ services located behind my DMZ interface. The trick that I need to overcome is I need to hit this service from my inside networks using my public Nat'd (outside) address, which in fact ...

hi,I'm having a disconnection problems with one of my clients and in my debugs he is the only one that gives me alot ofx.x.x.x is HIS FWy.y.y.y is MY FWcrypto_isakmp_process_block:src:x.x.x.x, dest:y.y.y.y spt:500 dpt:500ISAMKP (0): received DPD_R_U_...

I am getting a HTTPS error when trying to connect to the PDM. Error is "Hostname Mismatch". The details in the error don't make sense becuase it say that the hostname I am entering is PIX.BLAH.COM and the hostname in the certificate is PIX.BLAH.COM...

Hi gurus, A customer is interested in setting up a LAN-to-LAN connection using a 3005 on each side connecting via SDSL. As far as I know, there are no other routers between the non-Cisco SDSL modems before the internet. How should I address the p...

When we swich to PIX501 firewall, we can't access for example, email server (by outlook) using its external ip but we can access it using internal ip (both access are from internal pcs).So we have to swich back to our old firewall which using IP tabl...

Backup 501 ezvpn from 3030 to 515?We have several dozen PIX 501's using ezvpn to connect to our Head Office 3030 vpn concentrator. We are about to create a backup / failover site, but it will have a PIX 515e, not a 2nd vpn concentrator.I have now fou...

I'm having problems setting up the ability to ping our Outside interface from our LAN? I've managed to configure pinging through the firewall to an website etc but have not been able to ping the outside interface from our LAN.How do I go about config...

Hi All Cisco Expert,I have a confusion while applying access-list on an interface.When i create an access-list and apply on an interface as in it works.Whereas when i apply as out it doesn't works.What is the usage of Out and does it actually works o...