Other Security Subjects

HiI recently upgraded my PIX from 6.1.4 to 6.3.3. Ever since then Ive been getting these messages:- %PIX-3-106011: Deny inbound (No xlate) tcp src inside:192.168.0.112/721 dst inside:192.168.1.1/515The bizzare thing is that the 2 hosts are on the pri...

Hi,I would like to know how could I block access to the ssh port by IP range. Lets say the IP range is 172.24.65.0 - 172.24.66.111 with netmask 255.255.255.0Thank you.

I have IDS 4230 sensor , a postoffice based IDS running 3.0 (1)S4.Whereas I have installed Ciscoworks VMS 2.2 for managing it.I have added it to IDS MC security monitor but it's showing as "not connected".I have checked all communication stuffs.Still...

I have posted this previously..hoping to get some feeback..I an trying to get downloadable acls working on a PIX 506e 6.3 with IAS with VPN client 3.5. Radius works with login, so fundementals are OK. Vendor specific attribute set as id:acl=120 confi...

what's the difference bet. the ff:stackable switchcascadetrunklink aggregationin terms of physical connection, management and advantages/disadvantages

I need to create a PIX config dedicated to using a Polycom Viewstation FX. Only two Polycoms will need to pass through. Can someone suggest a config for this purpose. I do know the polycom should only need TCP port 1503TCP port 1720TCP port 1731port ...

After installing the CTR software I try to start the application and I get the following error:Application Error We're very sorry that you've encountered a problem using our website. If you'd please report this error to our web...

hi,i would like to ask if i'm missing something in my config. i could not ping it after doing this. i also tried doing permit ip any host 202.x.x.x it doesn't work also. what i would realy like to do is enable telnet to this ipaccess-list out permit ...

I currently have isakmp nat-traversal working fine on one of my pixes (6.3.2) with NAT, so users can setup vpn tunnels back to their offices. I thought I would ask first if it can work with PAT (so I can reclaim some public addresses) before I try i...

When ever we have a virus on one of our customer sites it loads the firewall up with NAT translations. Is it possible to limit the number of nat translations the firewall allows for one IP? Or the number of connections per IP. We want to stop the ...

hiis there any possibility on cisco pixes to give access to the server, based not on IP but on FQDN ?regardsprzem

Hello,First off, what a great resource! Forgive me for my ignorance, as I am not very familiar with the Cisco PIX firewall. I have a new PIX 501 6.3 version. I have set the inside IP to a specific IP, whenever the power is shutoff, the inside IP chan...

Is it possible to set up auditing within a PIX (or using a PIX and another device) so that a company can limit access to the internet? How about tracking access to the internet? Not necessarily the sites visited, but the usage of the web.

Have a web server in a dmz that needs to access the internal SQL server. Thought an extended access listsomething like permit tcp host x.x.x.x host 10.1.1.93 eq 1433 would do the trick, but is does not seem to allow the connection. Any advise on port...

Hi,wondering if you could clear my doubts on thisinterface e4 172.16.25.0 255.255.255.128 sec10interface e1 172.16.25.193 255.255.255.224 sec100if i disabled translation bet the two interfacesstatic (e1,e4) 172.16.25.0 172.16.25.0 netmask 255.255.255...