Other Security Subjects

Can I use object-groups in static statements?I see examples with object-groups in conduit statements but from what I know, conduits are leaving the PIX IOS and I would like use object-groups.From Cisco's Config examples:The following are two examples...

HiWould anyone be able to suggest why a 2610 router running 12.3(1a) which I have configured in a lab environment is failing to enroll to a Windows2000 Server running Certificate Services and SCEP?Upon issuing "crypto ca enroll securitylab" I receive...

I cannot figure out the correct syntax for the conduit command to employ an object-group service.the object group is like this:object-group service Netmeeting TCP port-object eq h323 port-object eq 1731 port-object eq 1503I need the conduit to all...

I think I am overlooking the answear. What is the command to reset the hitcnt to 0 on an access-list on a Pix firewall to get a point of reference?We have a 520 Pix.

Can anyone point me to a sample configuration combining DMVPN and V3PN? The V3PN white paper says that this can be done, but does not address it. I'm beginning to put one together, but am on a tight timetable and would love to have an example to wo...

I installed PDM two days ago. I entered one pdm location address on the inside and for some reason I have over thrity pdm location entries now for inside, outside and the dmz.Why did this happen?

Dear Forum,why shoud the trafic profile be 80% spoke to hub and only 20% hub to hub using DMVPN?Is there a reason? We plan to have 220 spokes. Some will do windows terminal servies between each other (sometimes), but the most of them (190) will only ...

Hi everyone !I configured policy NAT and access PDM then I can see following message " PDM does not support 'Policy NAT' commands in your configuration "Cisco will release New PDM Version supporting 'Policy NAT' ?If will release, when ?thanks in adv...

Hi,did anybody found a clear document how packets are processed by pix firewall.I mean, a packet (ay kind of) came on the outside interface. What is first process that "take" the packet? What is the second process and so on....

We are using VMS 2.2 and IDSMC 1.2 for management. Some of our Cisco IDS devices are in remote networks which are not directly accessible from VMS hosts. There is a proxy host in between which can listen on a high-TCP-port and port-forward SSH and SS...

We have both Internet routable addresses and RFC1918 addresses throughout our network. Currently we are using WCCP and Cisco CE550's to proxy http/https/ftp access to the Internet. Our CE's are at EOL and have become temperamental. What I would li...

Hi,I want to define priority for ICMP packets on the cisco 7200 on fast ethernet interface.what's best solution ?I would be appreciate if you advise meKind Regards,M.Arshad Rad

I detected heavy traffic on the outside interface of my PIX that indicated an attempt to spoof with 127.0.0.1. I set up ACLs on my gateway routers to deny spoof attempts. On one router I had over 1 million matches for 127.0.0.0 I am also seeing in...

While trying to install new PDM my TFTP server timed out. Now I am not able to install it at all. I keep getting a "TFTP: Timed out during transer. Erasing partial PDM file." Did I hose myself once the first install failed?Thanks!