I'm trying to combine a static (inside,outside) mapping for a machine, and also use the same outside address for PAT. Originally I made the mistake of using the old form of the static command, which I guess allocated all the ports from the start, and...
I've been searching for days now, and even started a TAC case. I have found very little documentation, mostly consisting of the same documentation that came in the box and other very basic stuff. My TAC engineer can't seem to find anything I haven'...
I am attempting to do a port redirection on the outside interface of the Pix with the new commands that v6.0+ provides.Any tcp traffic on port 3000 that comes to my outside interface is statically translated with the static(inside,outside)command an...
hi,I am seeing the old IDS internal architecture from cisco website, the one with the Director module.Wondering when the 4.1 internal architecture is available?If not any time soon, how to relate the old one that i am seeing against 4.1 version?
Hi,can anyone tell me if Cisco IDS sensors provide High availability or failover capabilities? If yes, how and where to set?Will there be any form of packet drop notification when sensor starts dropping packets under full load?
All,This may seem inappropriate but my butt is on the line, so please read on.I have 2 developers who have domain admin rights in a windows 2000 environment. I discovered on Friday that these 2 have been creating a VPN tunnel to another companies ne...
We have a monitoring program that we want to run on a server that sits inside and monitor the the nat'ed outside address of our Web server that sits in the DMZ. We want to do it this way so it follows the same path our customers use to the get to th...
Hi,This box is capable of monitoring up to 5 network segments. Is it advisable to use the same appliance (due to budget constraint)to monitor the external, DMZ and internal network ? Thank you.Vince
Hi All,We want to implement the network based IDS in our organization Here is brief overview of our Network4 Core Switches Gigabit ethernet3 subnetsservers on Gigabit ethernetClients on fast ethernet.Can anybody tell me what ids is best for us.also...
Hi,We upgraded our PIX 515E from 6.2(2) to 6.3(3) and have started seeing this problem, where legitimate TCP flow packets are being denied by the Access-List.e.g. consider the following conversation.A host on inside interface initiated a connection t...
