Seems obvious, but can't hurt to ask - where is the sniffing interface of your sensor located? Obviously, if your sniffing interface is located outside of the pix, then the undesired traffic will still reach the pix - it just won't get through it.Al...
Need a little more information. Maybe a simple stick topology diagram and fake ip's would be helpful. Are your internal users trying to access the webserver using the public ip address? If so, they should have internal dns or lmhosts or some other...
Martin,Keep in mind that when you apply an acl like this, it allows any external user to access host x.x.x.x on port x. It blocks ALL other traffic, including return traffic. You need to identify other traffic which you want to permit, including re...
By default, icmp echo-requests are permitted outbound through the firewall to your perimeter router, but, also by default, the echo-replies are not permitted.Consequently, if you have an ACL applied to your outside interface, then add an entry permit...
Short question, quick quick negative answer, but possible option buried in longer discussion :)Nope. EAP-MD5 is not compatible with the AD or NT Sam. Only supported to ACS DB.Other options include:1) using the local ACS db (I know, you lose the ad...