Other Security Subjects

PIX 515e, configured for failover with v6.2Outside = 12.164.44.x/255.255.255.128DMZ1 (web and mail servers, sec=50) = 10.1.0.x/255.255.255.0DMZ2 (web servers, sec=75) = 172.30.2.x/255.255.255.0Inside = 192.168.4.x/255.255.255.0I have 3 web servers an...

Followed my PIX pppoe configuration under 6.3.4ip address outside pppoe setroutevpdn group mypppoe request dialout pppoevpdn group mypppoe localname xxxxxvpdn group mypppoe ppp authentication papvpdn username xxxxx password ********The pix works well...

hi all , we have to monitor performance in PIX ver 6.3 by snmp query from a netview station.All is ok if i query about traffic interface but i cannot query some MIB about cpu utilization , traffic , memory.It seams it doesn't answer for querying priv...

Dear ALL,i have done the following config now my requirment was, users to access Internet and Place the mail server in DMZ,now after doing the following config i observerd that NAT is not working at outside interface because i was able to ping till i...

Dear Sir,We have a lan network 192.168.10.0/24Topology of our network is LAN-PIX(506E)-Internet Router-ISP...We hv configured the router and pix firewall as per our requirement.Requirement is to allow lan users to access internet.we are able to ping ...

hi all , how can i identify the process that cause pix 515's percent of cpu to increse from a normal 5% to 75% slowing down the connection ?I have tried with sh cpu usage , sh proc but i cannot look at which process for a 5 minute every hour (more or...

Hi all,Is it possible to have a nat pool of a single global address? The reason why I ask is that we have PIX 6.1(5) on a machine and I cannot do the following:global (outside) 2 192.168.0.10 netmask 255.255.255.255The current config is simple and lo...

Which of the following actions can you take to prevent newly configured commandsfrom being sent to a target router?A. deleteB. removeC. undoD. clear-commandsE. refresh

I have access lists accepting connections from specific IP address with the following structureaccess-list outside_inbound_acl permit tcp host xxx.xxx.xxx.xxx host xxx.xxx.xxx.xxx eq wwwI need to keep those but also add a couple of ranges.How do I al...

I Have a problem with my Router Cisco and Firewall Netscreen, I dont Know if i may configurating an IP Public in my firewall? or the IP Public in my router is succeded....

Hallo,At customer side we have DDoS. It's a massive TCP SYN Attack with bandwith up to 500 MBit/s. Maybe future can bring more than that bandwith, who knows?My question regarding that Attack is: What is the best strategie against that attacks? We hav...

I'm building a small hub-and-spoke IPsec VPN that has a 2611XM as the hub and 1760s for the spokes, all running the advsecurityk9 image of 12.3(11)T3.I'd like to configure ISAKMP so that each spoke has its own pre-shared key. Some of the spokes will...

Running PIX515What do I need to look for in determining why port 21 is open to the public on both my Outside and DMZ interfaces (like it's a general setting or something)? I found this out when I was doing some port scanning (from home) on both inter...

helloI AM TRYING TO UPGRADE MY CISCO PIX OS FROM 4.2(5) TO 6.3(4) BY INSTALLING THE NEW OS IN A NEW 16MB FLASH MEMORY IN THE ISERT ACTIVITION KEY STEP IT DIDN'T ACCEPT THE NEW KEY ALTHOUGH I GET IT FROM LICENSING@CISCO.COM BY THE SERIEL NUMBER OF THE...