Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi there,I've read the PIX 6.x to 7.x upgrade guides but we have corporate security standards that say the following commands must be configured with our existing PIX 6.x:- ip verify reverse-path <interface>- fragment chain 45- sysopt security fraggu...
LOL - the answer to YOUR question would be Security Architecture For Enterprises. SAFE: SMR stands for SAFE for Small, Medium Business and Remote Access.
This is posibble as I have recently done the same deal with our Security command blocks. Our internal corporate network connects to a routable 10.x address while the devices inside the dmz's talk back to the security block and all internal 10.x addr...
I wouldn't suggest allowing domain login's from a lower security interface to the inside. There are known vulnerabilities with ports 137 and 139, which are used by the feared SUB-7 trojan which would compromise the internal LAN.Use AAA with Cisco AC...