You really should take the advice of jerryd: "block the server login.icq.com"It's the only way, apart from handing off to a CVP server. I imagine you could probably halve your access-lists at the same time.Having 100 access-lists is just not going ...

The pix firewall does not support the secondary command used on their routers. You will either have to connect to the unit from the inside or console.

I've heard of a similiar issue with IOS software ver 12.Depending on the version you're currently running, you may just want to check for things like memory exhaustion (sh block); Stateful failover - lu allocation failure; Translation tables filling ...

From version 6 onwards only.Good explanation of static port redirectionhttp://www.cisco.com/warp/public/707/28.html#diagram2

Unfortunately not...Your best bet would be to have a look at the scripts available from www.phoneboy.com. I recall their being a script to dump the objects.c into a more readable format as well as one to view the nat objects. Although, it's been q...