Network Security

Just confirming that if I allow a TCP conversation to originate on the Internal Interface, that the reply traffic will be allowed back thru the PIX, to the original sender? What CLI command enables this, or how can I tell this is true?Now, with UDP,...

I have a pair of PIX 525 set for failover. Since upgrading to 6.3(3), we have been having periodic failures in that the active device loses its running config, it transfers the default config to the standby. The proper config remains in flash and ...

Hi,I just dropped in a pix 501 for remote access to an office and was wondering if the pix has an equivalent to the 'tunnel default gateway' in the vpn concentrators... I'm not going to do split tunneling, but would like users to be able to access t...

We have a small network of 25 users (running Win XP Pro and MAC OS 10) all connected to the Internet throught a PIX 515e firewall.We don't own any router or switches. The ISP leased line - well the ISP owns the router so I can't touch it. Also, we do...

If you are using (PIX Device Manager) PDM to configure a PIX, can you also telnet into the PIX and configure it via the CLI? I have read that if you are using PDM, the only other way to configure the PIX is via the Console or Cisco Secure Policy Man...

I have installed CSA MC 4.0.1. After finishing the installation, the systems behavior is very strange:- http access automatically changes to https (ssl).- I get no login fields for username and password.Any idea. It is a productive system (based on W...

Gentlemen, I really need your guidance. I have a situation whereas I cannot do DNS REVERSE LOOKUP thru my Pix 515E. There are sites on the .mil (Niprnet), which I have here, that require a DNS REVERSE LOOKUP. When I attempt to go to the site, it giv...

Can i give secondry address to the inside card of a pix. If yes then what will be the command

My understand is the Sup module only counts the packets that match the rate limit policy and packets dropped. Because we have no idea what size the packets are, we can't calculate bandwidth used per policy. Does anyone have a good way of measuring ...

My company isn't using a management system for analyzing the WAN traffic and we want to implement Cisco Netflow to analyse the network traffic on the backbone. We have a huge network with more then 100 sites across the world. We use 120x 2600 router...

Hi All,Is there any way to block Half-open Sync attack through PIX 515E with version 6.1 (2).Thanks

I am planning a network upgrade of a existing using Network which uses EIGRP routing. The upgrade calls for the introduction of a PIX Firewall to secure access to several subnets. The problem is the firewall will inhibit EIGRP routing between the exi...

tftp works well on Pix 515 for write net and config net.When I did the same on a Pix 506 and Pix 501, I can write net, neither one will let me do a config net, even with a configuration I write net 1 minute ago from the same Pix.Is there any special ...