Other Security Subjects

We want to put a router in a unsecured area. I have configured the switch for port-security so only valid mac-addresses can use the network and I have disabled password-recovery on the router. How can I stop someone plugging directly into the router...

Hi!I'm trying to setup LAN-to-LAN IPSec tunnel from remote office VPN3k concentrator to the central site with two VPN3k concentrators connected to different ISPs. The remote office L2L tunnel is defined as "Originate-only" and two IP addresses of cen...

I want to implement a DMVPN but my spoke routers are SOHO series running 12.3(8)T3 and it seems like none of the images available support NHRP.Are there any alternatives that would allow mGRE with IPSec?Any idea if NHRP will be included in a future r...

Happy Holidays everyoneI'm in the process of migration from a pix 535 to the FWSM. The pix uses conduits and the FWSM uses ACLs. I've moved the format but have found an issuewith access from the DMZ to the inside interface. Isthere something I'm miss...

I am using a pix 501 6.3(1) withfixup protocol sip 5060fixup protocol sip udp 5060The pix is doing nat/pat on the inside sip pbx. When calling a sip phone on another network, the fixup works just fine and privatePbxIp is replaced with with publicPbxI...

Hi,I have installed PDM 3.2. Once i have logged in into the PIX via PDM it has added so many enteries of my local and remote networks into the PDM database.I want to access the PIX via PDM from particular hosts only.I removed all the enteries manuall...

Hi,VPN configured on a PIX 515e firewall, using PPTP.Is there anyway to assign static IPs to the client-side, so that you know what IP they will have every time they log onto the VPN? Right now, it is setup to use a local access pool provided in the ...

Hello. I would like some opinions on how to secure my core site from my other MPLS sites. We currently have a pix in front of the MPLS router to protect us from our other remote locations which connect via MPLS. However it was configured to allow ...

I've got an internal web server that is configured correctly to accept clients that are on the Internet. However, no internal clients can connect successfully.I've applied the command Alias (inside) 10.x.x.26 xx.x.x.26 255.255.255.255 But it doens't...

Hi,I have a Cisco 837 router with IOS v12.3T(11).I can't establish connection to https server as WindowsUpdate for exemple (When I check updates, an error appear). I think that the problem is on inspect rules because the problem not appear on my bank...

Hi,I have a Cisco 837 router with IOS v12.3T(11).I can't establish connection to certain https server as WindowsUpdate for exemple (When I check updates, an error Ox80072EE2 appear). I think that the problem is on inspect rules because the problem no...

hi,I will like to know which is the simplest solution to deploy distant connections on a pix501.(I have only one fixed address IP and my distant stations are in winXP sp2)the final goal is to have access to the internal network and to make tse... 1/ ...

Hi, does anyone know what the "most used" means in the show xlate o/p.. thanks in advance.PIX189# sh xlate136 in use, 305 most used

I have several web apps running on servers in the DMZ that access "back-end" SQL 2000 servers through a PIX515 to my internal network. I know that web servers initiate a connection to the SQL server via a dynamically assigned source port between 102...