Hi,We have a PIX static mappings for two blocks of IPs. The outside interface of the firewall is connected to a Cisco 2621 router. The router's Ethernet interface has the primary IP address in the same subnet as the PIX outside interface. We have als...
I have a client router that I have no control over that I want to put in my DMZ and give it access to only 1 device on the inside network. I'm having a mental block on how to make this happen. I already have static (inside,dmz) for the server this ...
Hi,We have PIX 520 in our organisation. When ever I do traceroute to any IP address, I wanted to see my firewall interface as one of the hop. Currently I am not getting my firewall interface's IP address in any traceroute hops. Is there any way to c...
Hi,Is it posible to configure PPTP tunnel to work over PPPoE tunnel in IOS router and how can that be done, or maybe over GRE tunnel ??I think this is not supported on Pix firewall.R.
I have a PIX 515 and was wondering if the Cisco PIX allows blocking of downloads from P2P sites like Kazaa, Morpheus as well as blocking MP3 downloads.If this is possible how can this be done? Are there specific rules, ports or access lists I have to...
Dear list,I have generated at report from the security monitor report generator. The report, entitled “IDS Top Alarms Report” includes an alarm description “TCP Upper Port Sweep” once the report has been generated. If the security event monitor is ch...
ciscoers,does anyone know how to implement command "username access class password ?I had tried to implement in line vty but it doesn't work as I want it to be.thx,-rusdi-
Hello,I have an application that uses exclusively UDP (port 25441). I've placed the server on the DMZ, but it initiates a connection back to the internal client that made the request (i.e. out of state). Is there any way I can use a fixup or someth...
WE have a hub and spoke vpn design with a PIX 515 at the main site and 501's at the spoke sites. The spoke sites are unable to commincate. I guess we could fully mesh them with tunnels but i was hoping there was someway to route spoke to spoke throug...
Is it possible to have a dynamic destination with a GRE tunnel? I have one end of a tunnel that is assigned a DHCP address by a service provider and I want to use a GRE tunnel to connect this router to another router on the Internet.
Hi,1. I already download the signature update, and read the instruction. But what is the user root password ? 2. Would you give me the instruction detail, how to update it ? (because I dont familiar with unix OS) 3. Should I update the Director Signa...
I'm having trouble getting the IDS MC to recognize that I've updated a sensor to S48. When I try to query the sensor it detects S48 installed (as does the CLI on the sensor itself) but when I click apply it states that "A lock can't be placed on Sen...
Is it possible to have the firewall terminating PPTP VPN and still have the capability of the user accessing the internet. Right now when connected, they cannot access anything other than the VPN LAN. Can you either have them surf through the VPN o...
