Other Security Subjects

Is it possible to translate destination ports traversing the PIX? I have a situation where I need to translate destination port 80/tcp to 30080/tcp on outside interface going to a DMZ (public IP range).Furthermore, this should only be done for specif...

What is the best way to configure an ACL in the router to let DNS traffic pass from the internet to the internal network? I emphasize that internal network uses private ip addresses and that the router is doing NAT overload.I have tried various confi...

I did a port scan on my router and it reported that the router is listening on ports 25 & 110. I don't have any mail services running behind the firewall. Why would the router be listening on these ports and how do I shut them off?I am using ACLs & C...

I have a client who we just put a new DMZ card in for on a 515. Moved a machine out to the DMZ and that server can be accessed from the outside no problem (web server). The problem is, that there is no access from the LAN to the DMZ. I have compar...

Hello,Is it ok to create static mappings for mutiple blocks of IPs on the pix, or do the static entries all have to be within the range of the pix's external interface IP?ThanksJeff

Suggestions?.2 and .3 are W2K servers with the correct mask and gateway (.1 the PIX)110001: No route to 192.168.161.2 from 192.168.161.3PIX configip address DMZ-slot:3 192.168.161.1 255.255.255.0Why would the PIX be picking up these packets when the ...

Is it possible to telnet to a pix 501 from the outside.

I am using the configurations given in the following linkhttp://www.cisco.com/en/US/partner/netsol/ns110/ns170/ns171/ns27/networking_solutions_white_paper09186a008018914d.shtmlBut i am not able to see the IPSec SAs in the routers.The output of sh ...

I have three questions here all related to the policy for a Cisco IDS appliance.1. For a new install, when I initialize a Cisco IDS sensor, does it have the default Cisco IDS policy? By default policy, I mean most signatures enabled, some signatures ...

Is there going to be any comprehensive documentation released on version 4.0 of the IDS sensor?The is no documentation on this new RDEP protocol or the architecture of the device. Quite honestly, the documentation is really shoddy for version 4.0.Qui...

I have a situation with a customer of ours who is running the Nortel Contivity VPN. I am having troubles connecting to them. In my logs I see the following error:2003-07-17 15:23:51 Local4.Critical 192.168.20.1 %PIX-2-106006: Deny inbound UDP from ...

Hi,I'm here again, I have a problem with the ping results I'm getting when I'm pinging from Inside host to DMZ host's private IP address, The ping reply is intermittent, sometimes the reply is from the DMZ server Public NAT IP and sometimes.Any idea ...

Hi everybody,We'd like to monitor multiple VLANs traffic from Cat5509 switch to its backplane (RSM).Is there possible to configure "set SPAN" on this switch for IDS appliance (not IDSM)? We tested to be found only native VLAN traffic (like as broadca...