Hi,By design in PIX 6.3(x) and older versions, there is a simple rule: "no traffic entering a interface is allowed to come back on the same interface". In other words, ALL traffic has to traverse the PIX in order to be sent. (related to security leve...

Hi,Most probably you are running 6.3(1)The fixup protocol dns command is available from 6.3(2)... if I had to choose I would upgrade to 6.3(4)http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/63rnotes/pixrn633.htm#wp110415Regards

Hi,In rough estimates, the SSL vpn client is about 3 times the performance impact (cpu, memory) compared to the IPSec client, from the point of view of the concentrator. Taking this into account, yes, you can expect a slower performance...I also find...

HiYes, in the flash not only is the image, also you have the PDM, certificates for the device, crl, CA certificates, etc.When you do a upgrade, only the image itself is changed (after the downloaded image is verified)If you want to do a configuration...

HiTry "clear crypto ipsec sa peer X.X.X.X"As far, as I remember, you need to be in config mode...For more informatio, see:http://www.cisco.com/en/US/partner/products/sw/secursw/ps2120/products_configuration_guide_chapter09186a008017278c.html#wp102562...