Other Security Subjects

Hello,I am concerned that if these units failover, that the inside ip would change to 10.50.0.4. This would cause a problem as our dhcp to each workstation has 10.0.0.1 as the gateway. Do u see a problem here? Should I make the inside failover ip 1...

Has anyone seen an issue with the ALPs driver/process called apoint.exe? When CSA (any version) is installed, the apoint.exe process takes off and consumes the CPU. Writing a policy that ignores the process doesn't seem to resolve it; and when I un...

I am having problems accessing mail and web services from our internal clients using the translated ip address of our servers. Clients from the internet have no problems accessing them. All of our internal clients nat(pat) using the ip address of t...

hi allcan we change the port no. of global and local ip address while giving the static pat command.thanks aksher

We are looking at rolling out DMVPN at a location that will need to keep static VPN's to customer sites where we don't manage the remote VPN server. Has anyone had success with running crypto profiles on the tunnel0 interface along with a crypto map ...

I am pretty new to the PIX. We have a new vendor that we need to open a couple ports for. They cannot give an IP address as the servers are dynamic and update constantly. I tried using the same syntax as I did with IP addresses, but I am getting an e...

We are using static IP Addresses and tried to change the inbound address, but was unable to because it is on the same network as the outbound address. Is there a workaround for this. We can get to the PIX firewall, but not to the internet. We are ...

Hi,I have only one switch and I want to create a DMZ witch contain 2 http servers. For reason of security I opted to create an other VLAN which contain the 2 http servers.So, did I break the role of DMZ or the VLAN created will protect my intranet?Th...

Dear All, I am very new with this, I had a WAN connection between 2 branches(A & B) A is on 172.16.1.0 A has mail server on 192.168.1.9 (dmz) B is on 172.16.2.0 B has also mail server on 172.16.2.6 I can ping from any PC of network A (ie. 172.16.1.88...

Dear All,I am using PIX515E and I should have allow both ftp and ftp-date for both incoming and outgoing. However, I can connect to my internal ftp server from outside but couldn't initiate the data transfer. Is there anything I should pay attention ...

Hi,I've been using a couple of FWSMs instead of PIX535s since software version 1.1.3, and am now running 2.3.1 (and 2.3.2 in a lab).I quite often have to insert an ACE in the middle of an ACL, and since the FWSM doesn't support access-list line numbe...

i have make up a CA service on Windows 2000 Server and i try to install CA certificate from my VPN concentrator.in Administration/CertificateManagement/Install/CA Certificate/SCEP page of VPN 3005 i put the URL, http://ip of CA server/certsrv/mscep/m...

We wanted all Agent users to be prompted with our Network Policies. So I configured the User Agreement page, allowed access to the Network Policy for the role, and enabled the option in the General setup. However, the Agent never prompts for the link...

I am new to the PIX. I am trying to configure a new i/f for what I call a special purpose internet connection, only very specific sites will be accessible via this connection. I want to set up the onterface so there is NO NAT, NATting will be done ...