Other Security Subjects

I have read the article on this on the site.http://www.cisco.com/warp/public/63/showrun.shtmlI understand the security impecations.With that said does anyone know of a way to have a user view the entire router configuration (show run) with out having...

Hello,I would like to know how to configure the ACLin my PIX515 to can do active and pasive FTP's from a client that is in the outside interface to the Server that is in the DMZ.if it is not possible, should it work if I doa "permit ACL_OUTSIDE ip an...

Hi I have Pix515 between 2 Routers ,and local Ftp server ( 129.168.2.2) attached to pix (dmz zone). lntern Clients back r2 are able to access to my ftp server in the dmz zone. I have only one ip address address 80.x.x.16 ( ISP ip ) in Extern router (...

Hi,My LAN is behind a PIX 515 and we are doing PAT for accessing the Internet. When browsing the website http://www.auditmypc.com/acronym/CSIV2.aspm I see my LAN IP displayed on the site, this behaviour holds true when someone in my LAN enters MSN Ch...

I am trying to place public servers such as Web Server, DNS Server and Outside Mail Server in dmz zone using separate dmz interface for each one. I was able to put Web Server successfully in DMZ using static nat. But when I tried putting other server...

Hi Is it possible to set up a user group on VPN 3030 concentrator, so that the group only has accesss to certain windows 2000 servers.Clients will be using Cisco VPN client software (of whatever version could make this happen...)Thanks,Paul.

Since some of these are web implementations it seems difficult to block. Will this be easier in the PIX 7.0 code?

Hi,what does it mean "flags SaAB" in output of "show conn": TCP out <IP add> in <IP add> idle 0:00:50 Bytes 0 flags SaABI did not find SaAB on Cisco web.Thanks Peter

how can I limite the dns connections for specified IPon PIX.Regards,yuntao

I am using the firewall in failover mode.I would like to upgrade the Pix IOS.Presently I have six 10/100 ethernets and Can I add one ethernet ports.

Personally, I am not impressed cisco will not provide basic software updates by allowing download of the images for their products (even if its for a limited period).Anyway, anybody know what the cheapest support contract cost that will enable me ach...

I don't know why I have been struggling with this, but could you please hit me on the side of my head with some basic configs for setting up Nat/No Nat.I have 3 interfaces on a PIX (inside,outside,dmz).Inside is private address space 172.24.0.0.Dmz i...

Hi, I've seen several posts for SMS, and, I guess, based on responses, there is no one good way to deal with SMS at this time. I've tried to create numerous rules and exceptions, based on static rules, however, it just gets to bulky, as I am forced ...