Other Security Subjects

Coming from the checkpoint world I'm having some difficulty in understanding the pix. Any help would be great.I have a two pix firewalls in a failover configuration with 6 fast ethernet ports on each firewall. I have two of the interfaces at a securi...

I am trying to redirect different traffic type from one extenal public ip to multiple internal servers (each internal server serve different port). static (inside,outside) tcp 210.111.222.333 domain 172.16.1.10 domainstatic (inside,outside) tcp 210.1...

The interfaces are in testing phase.Also not able to ping the outside interface of sec. PIX from inside.

I was under the impression that to stop spammers from using our networks Messenger Service, all I had to do was block the UDP NetBIOS traffic and it should take care of it. I have done that, and I am still getting the messenger pop-up windows. Are th...

HelloI am new to IDS. I am experienced with Cisco security, though I have never worked with and IDS system. I was wondering if Cisco had an Example Config page like they do for the PIX firewall. I would like to see some examples on how to set it up a...

I am trying to configure a 2900XL and a 3640 running 10-0-25. I have referenced the CCO to look for a solution but I am unable to configure the F/E on the 3640 to pass the tagged traffic to the individual switchports.Does this sound familiar to anyon...

Hello.I have two Cisco Catalyst 2950 switches.I have configured two separate VLANs.Can I implement the following scenario:Vlan 2 could access VLAN1 but not vice versa?

Hi,I had a few messages logged in my firewall as%PIX-2-106017: Deny IP due to Land Attack from x.x.x.x to x.x.x.xI want to understand that how did these packets managed to get to our firewall, when the destination address of the packet is equal to th...

This is a VPN client to PIX connection, i have this connection without NAT-T, and it's connecting without any problem. VPN Client 3.5.2 and PIX506 ver 6.22Today, i upgrade PIX ver 6.22 to 6.31 for NAT-T conneciton. VPN client is only behind a PAT rou...

Can anyone tell me the difference between the CBAC and Reflexive Access-list. Their purpose look identical to me, but the commands are different.Any help would be highly appreciated. Thank you. Mohan

Hello, I'm trying to install the latest signature update IDS-sig-3.1-3-S42.bin. But on the release notes it stats that the update can only be performed on version 3.1(3)S31. I have downgraded the sensor to version 3.1(3)S33 but I can not uninstall ...

Some advice on blocking instant messenger ports would be very helpful. I believe that a deny on 1863 tcp and udp will handle MSN. Am I coreect on that and what other ports need attention for such as AOL IM?thanks

I have a 506e and I would like to forward all SMTP and POP3 traffic to our Exchange server. The IP Address of the unit is 192.168.1.1. Can someone explain to me how to set up a port forward for this unit.Thanks in advance,Tripp K.

I have a static mapping on my pix515 latest version,static ( inside,outside ) 194.x.x.112 194.169.x.112 netmask 255.255.255.255 0 0Am pretty certain all my pix config is right as regards interfaces , access-lists etc. but cannot get inbound nat mappi...

Hi,I've setup a schedule backup of MDC that occurs every day ( occurence of 999). I try today to stop the backup but there is nothing on the backup page that shows the current setting rule applied and how to stop it. I tought that setting a new rule ...