Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Does anyone know how disable http management access on PIX inside interface while vpnclient mode is enabled ?What I found was that when vpnclient mode is enabled. PIX will automatically enable http server and add directly connected inside network for...
You should change syslog protocol to UDP in PIX config . Pix will stop all traffic if syslog server stops responding (for example disk full) when TCP is used for syslogging. You propably have line in config like logging host x.x.x.x inside TCP/1468T...
If you use static to original source address it should work. this will work fine static (inside,DMZ1) 192.168.0.2 192.168.0.2 but if you usestatic (inside,DMZ1) 192.168.1.3 192.168.0.2 , it will broke Kerberos ticket even you can get DNS working. We...
I'm not sure if you running Active Directory or not but if thats case and you're doing address translation (other than nat 0) it will brake kerberos authentication. That happens because IP header will change after translation and does not match anymo...
HiThis info can be found on RSA VPN3000 document:The Cisco VPN3000 has RADIUS support, yet does not work with ACE/Server RADIUS since it does not support RADIUS challenges, and therefore does not support new pin/next tokencode mode.Maybe that your pr...
