Other Security Subjects

I've been looking over a PIX firewall that has version 4.4 of the OS. I'm confused as to what the following lines are allowing:static (inside,outside) pub.80.45.64 172.16.20.153 netmask 255.255.255.255 0 0conduit permit tcp host pub.80.45.64 pub.153....

Some lines from the running config follows:ip inspect name statefull-fw udp timeout 3600ip inspect name statefull-fw tcp timeout 3600interface FastEthernet0/0 description CityMan Trunk interface no ip addressinterface FastEthernet0/0.265 description ...

I have read the PDF on setting up the Email Proxy etc. Is there anyone out there who has actually gotten this to work? I have been trying, but am unable to using 2003 Outlook. Thanks,Frustrated.

I have setup successfully a VPN client (ver 4.0.5) to PIX dynamic link. This uses IKE aggressive mode which i'm led to belive is not secure due to the identity being passed in clear text. Is it possible to configure the vpn client to use IKE Main Mod...

Hi I am trying to troubleshoot a TCP attacks problem. Here is the following message: %TCP-2-TCP_MAXESTABLISHED:Possible TCP ACK attack. Maximum established connection limit 64 reached. Will drop unused connection.I know in LINUX there is a command to...

Hi,We've set up a windows server on the DMZ of a pix 525 and we are having issues with it querying active directory. The computer replies with an RPC error. We've let through everthing we think should be passed, but still it fails to work. Does an...

Dear All : Does FWSM support IPv6 ? thanks !B/RTed Wen.

I have an intermittent problem where I will see a WIN XP desktop sending continual ARP requests to the default gateway (as per DHCP scope) this causes the router CPU to start getting close to 100 %. Has anyone seen this before. is it a worm or badly...

Hello everybody,Usually we do a lot of troubleshooting based on the the debug packet command that was found on versions previous to 7.0. It helped us a lot determining if traffic was passing through the firewall or not. However, we noticed that this ...

I've been working on this for a few days and for some reason i cant seem to be able to block port 161.I'm able to block port 162 with no problem.I have an access-group 198 on my fa0/0.988and have the following access listaccess-list 198 deny udp an...

I was able to install CSA successfully on Windows XP SP1 with Netware Client4.90 SP1a. CSA peformed as it should.However, the user was unable to login (maybe after several excruciating attempts)or access any applications the very next day(after powe...

When configuring a new rule using the PDMSource -- port using TCP ports 1234 (Outside)Destination -- port TCP using ports 1234 (Inside)Access is not permitted; the user is trying to connect from the net to a nat’d IP address, when the service is cha...