About atjniemi

atjniemi · 04-28-2004

Does anyone know how disable http management access on PIX inside interface while vpnclient mode is enabled ?What I found was that when vpnclient mode is enabled. PIX will automatically enable http server and add directly connected inside network for...

atjniemi · 11-01-2002

You should change syslog protocol to UDP in PIX config . Pix will stop all traffic if syslog server stops responding (for example disk full) when TCP is used for syslogging. You propably have line in config like logging host x.x.x.x inside TCP/1468T...

atjniemi · 11-01-2002

If you use static to original source address it should work. this will work fine static (inside,DMZ1) 192.168.0.2 192.168.0.2 but if you usestatic (inside,DMZ1) 192.168.1.3 192.168.0.2 , it will broke Kerberos ticket even you can get DNS working. We...

atjniemi · 10-27-2002

I'm not sure if you running Active Directory or not but if thats case and you're doing address translation (other than nat 0) it will brake kerberos authentication. That happens because IP header will change after translation and does not match anymo...

atjniemi · 02-06-2002

HiThis info can be found on RSA VPN3000 document:The Cisco VPN3000 has RADIUS support, yet does not work with ACE/Server RADIUS since it does not support RADIUS challenges, and therefore does not support new pin/next tokencode mode.Maybe that your pr...

Member Since	‎11-12-2001 08:54 AM
Date Last Visited	‎04-26-2024 02:32 AM
Posts	5

User Statistics

User Activity

PIX on vpnclient mode - http pdm access security

Re: Pix 515E locking all traffic when unable to contact syslog s

Re: Joining Windows 2000 Domain

Re: Joining Windows 2000 Domain

Re: RSA SDI using Radius (together) with VPN 3030