Questions tagged [cisco-pix]
The Cisco PIX line of products were devices that provided firewall and VPN functionality.
85
questions
0
votes
0
answers
2k
views
Postfix pix workaround for short mail work fine, but for long mail not worked
My postfix send email without problems. But one client domain enabled PIX workarounds. If mail message is short mail send without problems. But if mail is long - in log file I see " conversation with ...
1
vote
0
answers
168
views
Cisco Bridge and MAC address blocking
I have two locations connected with two Cisco 861 routers. They are connected using a bridge. The subnet is the same 192.168.100.x.The routers are on E-line connection from provider.
Location A is ...
1
vote
1
answer
781
views
Can I use Linux iptables to replace the functionality of a Cisco ASA/PIX?
I know iptables can route packets like a router. I've read tutorials where a Raspberry Pi can replace a home router. iptables can allow only specific ports through. However, in my enterprise ...
0
votes
0
answers
374
views
Cisco asa 8.4 PAT with static NAT
I am trying to make sense of the changes that Cisco has made to NAT on ASA > v8.3. I have a network which is being PAT'd to the outside interface address, and want to add a static NAT from the outside ...
0
votes
2
answers
52
views
Cisco PIX 501 and jumbo frames
We currently have a cisco pix 501 running in our office building and we just got word that our network is going to updated to run jumbo frames. I haven't been able to find much information, but from ...
0
votes
1
answer
248
views
Cisco PIX Firewall Version 6.3(5)
I am unable to ssh to any servers. I've exhausted every possible thing except the corporate firewall. Its an old cisco pix firewall.
[model]
Cisco PIX 501
I'm trying to figure out
1) how to ...
1
vote
1
answer
1k
views
How can I remove the ACL of PIX firewall?
I'm just trying to how PIX works. Anyway how can I remove the ACL from my GNS3's PIX?
PIX-SECU(config)# show access-list
access-list cached ACL log flows: total 0, denied 0 (deny-flow-max 4096)
...
0
votes
1
answer
873
views
Older PIX 515e running 8.0(4)28: Can't get internet access to work with DHCP on outside interface
Ok.. I admit it. I am probably missing something simple. A little help?
I have an older PIX 515e that I am trying to get running. The outside interface is connected to a cable modem and configured ...
3
votes
2
answers
2k
views
New IP addressing from ISP
We just got a new Internet fiber service. Our ISP gave us a /30 for WAN and /29 for LAN? I have never seen this when setting up a new ISP service. I was always given a block of ip addresses (if ...
0
votes
2
answers
2k
views
Cisco ASA/PIX Can't Access Internal Resources Behind NAT [duplicate]
My servers are natted 1:1 as follows, i.i.i.i maps to x.x.x.x where i is an internal IP, and x is the external IP.
From an i.i.i.i machine, I cannot access x.x.x.x resources...
What special ...
0
votes
1
answer
529
views
Route being ignored on core Cisco 6500 switch?
This is less likely a bug, and more likely a lack of my own understanding on routing.
I am having an asymmetric routing issue where return traffic is going out the wrong firewall. I have an explicit ...
0
votes
1
answer
222
views
How do you configure a Lan to Lan VPN on an ASA without using your outside interface IP address?
I have two /28 subnets A & B.
My PIX and ASA's outside interface addresses are both in subnet A.
I am in the middle of a migration from the PIX to the ASA and need to use the PIX outside ...
0
votes
1
answer
283
views
How Do I Access A PIX External Port-Forward From The Inside Network?
I have a PIX running 8.0(3).
I've got a port-forward to permit external users to hit a server on my inside network set up as so:
static (inside,outside) tcp interface 8080 192.168.168.100 8080 ...
0
votes
2
answers
326
views
Cisco PIX 515 ipv6
I know cisco pix 515 is an old and EOL device, but does anyone know if it supports IPv6 or is that completely out of the question?
1
vote
2
answers
298
views
Cisco and HP backups to Spiceworks TFTP occasionally creating .tmp files
We are backing up our ASAs and switches using some scripting. It works very well. I have noticed though, occasionally, the backups to the TFTP will come out not as plain "files" with no extension, ...
-3
votes
2
answers
4k
views
Hack Cisco Pix 501 to Run Linux [closed]
Can a Cisco Pix 501 be hacked to run Linux with a similar feature set?
Is this possible? Has it ever been done?
The pix seems like reliable solid-state hardware and it would be cool if I could run ...
1
vote
1
answer
97
views
set Cisco Pix back to default settings
Trying to wipe my Cisco pix back to factory default. i login to the pix as an admin then type "configure factory-default" this doesn't work though
0
votes
2
answers
150
views
Working with PIX firewalls [closed]
I have acquired a used Pix firewall. A PIX 506 to use as a firewall for my small home office, the netgear wi-fi was really not cutting it.
I'd like to get a pointer on where to start with it, like ...
1
vote
1
answer
818
views
Configure Cisco Pix 515 with DMZ and no NAT
I hope that someone could shed some light over my situation, as I am fairly new to PIX configurations.
I will be getting a new net for my department, which I am going to configure.
At my hands, I ...
1
vote
1
answer
3k
views
Juniper SRX1400 VPN
I have been trying to set up a client VPN on a Juniper SRX1400 without much success. All documentation I found from Juniper and elsewhere does a lot of other (difficult and wonderful) things other ...
1
vote
1
answer
556
views
Configuring a PIX to allow SMTP between DMZ and internal network
I have a Web Server (193.170.4.2) in my DMZ that needs to communicate with the our Exchange Server (10.77.51.87) internally via SMTP. I used access-list acl-dmz permit tcp host 193.170.4.2 host 10.77....
2
votes
1
answer
520
views
PIX Firewall Causing Packet Loss
I am currently in the process of modifying how internet reaches my front end servers and I am having a strange issue with one of the existing stacks.
There is one physical firewall which is above the ...
3
votes
1
answer
2k
views
PIX 506E, MTU, VPN Packet Fragmentation and Shoretel IP telephone system
We have two sites, a large Southern site and a small Northern site, that have a VPN between them defined on two Cisco PIX Firewalls. Over this VPN Shoretel IP phone traffic travels as well as all ...
1
vote
0
answers
93
views
Is there a way to have VPNC failover automatically to a second Cisco firewall?
I'm currently using VPNC on my Ubuntu machine to VPN to a remote Cisco firelwall. It's critical for this VPN connection to be up at all time.
Is there a way to have VPNC failover automatically to a ...
1
vote
1
answer
5k
views
Can the ASA 5505 use pptp as the VPN type? If so does anyone have a link to a config example?
I'm migrating from a PIX to a ASA and the PIX has the remote users PPTP to it. This is not pass though but the VPN type of the PIX. Does the ASA even support this? I have been trying to search around ...
0
votes
2
answers
76
views
Loss of inbound emails from external domains after replacing firewall with new ASA5510
To start, I'd just like to admit my lack of knowledge in setting up/maintaining critical hardware like firewalls and exchange servers. I am the Technology Coordinator for a small charter school and ...
1
vote
1
answer
1k
views
Configuring PIX 506 with NAT for multiple public addresses
We are setting up a streaming service to an external client and they need access to an internal workstation along with certain ports open on our firewall. I need to configure two public IP addresses ...
0
votes
1
answer
303
views
HTTP traffic through PIX VPN from outside site
I have a remote site with a website that only allows access from the outside IP assigned to our local PIX. I have users connecting to the local networking using a VPN that need to be able to view this ...
0
votes
3
answers
1k
views
Set up a GRE tunnel with Cisco PIX-506 v6.3
I'm trying to establish one half of a GRE tunnel, the other being configured by my service provider. I have a Cisco PIX-506-E running Firewall version 6.3(5).
Provider Router Public IP: 8.8.8.8
My ...
0
votes
3
answers
1k
views
What are tha main causes of slowness on Cisco PIX 515?
A couple of Cisco PIX 515 work in standby mode. But the active PIX (or the otherone) never uses more then 40% of the available bandwidth on the outbound LAN interface (10Mbps).
0
votes
1
answer
931
views
Disable VPN on Cisco PIX 506e (v6.3) and configure VPN pass through to a Windows 2003 DC/RRAS
The company I work for has a client that has a Cisco PIX 506e firewall running v6.3. The PIX is currently set up to manage PPTP VPN connections using the local Windows domain controller as a RADIUS ...
0
votes
1
answer
361
views
Cisco pix 501 setup with Mcafee
I am way out of my leauge on this but if someone could take the time to help me I would appreciate it. We renewed our Mcafee Saas Protection and I am trying to set up their required ip addresses in ...
1
vote
1
answer
270
views
Utilizing two outside internet subnets - routing or physical connection ideas?
I am looking for some ideas on how I might utilize a second 5 internet ip address subnet I have available from my isp.
Currently I have the isp cable modem which has 5 ethernet ports on it. It is ...
0
votes
1
answer
261
views
PIX 506E with multiple external /24 subnets
I've got two internet accessible /24 subnets, lets say 11.22.33.0/24 and 44.55.66.0/24 which I want to pass to servers using a private 10.0.0.0/24 subnet behind a PIX 506E
e.g. requests to 11.22.33....
0
votes
1
answer
517
views
Can a CISCO PIX tunnel SCTP traffic over an IPSEC tunnel
Can a cisco PIX 515e tunnel SCTP traffic over an IPSEC tunnel ?
I Know that the PIX doesn't support SCTP connection's but SCTP is still IP so i'm hoping the PIX has the capability to route SCTP over ...
2
votes
3
answers
241
views
Cisco ASA 5505 to replace a Cisco PIX
Is a Cisco ASA 5505 powerful / capable enough to replace a Cisco PIX 503 ?
The PIX runs about 10 site to site VPN's and 40+ individual users on vpn.
1
vote
1
answer
2k
views
Cisco Pix how to add an additional block of static ip addresses for nat?
I have a pix 501 with 5 static ip addresses. My isp just gave me 5 more. I am trying to figure out how to add the new block and then how to nat/open at least one of them to an inside machine.
So ...
0
votes
1
answer
84
views
IE halts loading HTML page abruptly, possible network issue
Understanding that my problem could have a very vast scope of possibilities, I'll accept the answer that points me to something that I might have missed.
My software's client is facing this issue of ...
4
votes
3
answers
12k
views
What might prevent IKE handshake success in building an IPSEC tunnel?
We use Cisco ASA for our IPSEC VPNs, using the EZVPN method. From time to time we encounter problems where an ISP has made a change to their network and our VPN stops working. Nine times out of ten ...
2
votes
1
answer
1k
views
Convert Site-to-Site VPN from PIX to ASA 8.2
I have been working on converting a config over from a PIX to a ASA 8.2 but I am running into some trouble with the site to site vpn part of it. The PIX has both a client VPN and site to site. Since ...
-1
votes
2
answers
752
views
Cisco PIX 515E Remote SSH
What configuration lines/steps are required to enable WAN side SSH for the Cisco PIX? In addition what considerations should be made to ensure your connections are secure?
3
votes
2
answers
2k
views
Cisco Pix 501 (and probably 506e) PDM web access and Java errors
Are there any nice options for using the PDM on an old Cisco Pix 501 or 506e with modern computers/browsers? I have an old 501 at a remote site and only have https access to it from my location. I can ...
0
votes
2
answers
438
views
Asterisk Sip trunk though a PIX 501 firewall
I'm using an asterisk VOIP server, and I'm able to make called though with my SIP client. The problem I get is one-way voice. I can hear the incoming voice but the caller can not hear me. I have no ...
0
votes
2
answers
248
views
Converting cisco PIX to cisco ASA
I am about to migrate PIX 515E, 6.3(4), configuration to Cisco ASA.
I do not have the PIX which is in Paris, I have the configuration on a notepad file. I do not know the Cisco ASA model yet either ...
0
votes
1
answer
479
views
Cisco Pix - how many clients or peer sites supported?
I read that a cisco pix 506e supports up to 25 vpn peers (sites), and unlimited clients (machines connected with the cisco vpn software?).
The lowest cost option would seem to be to install the vpn ...
0
votes
4
answers
329
views
Assistance with PIX 501 Firewall
This should be a simple edit, but for some reason I am stumped.
We switched the ISP at a worksite.
For these purposes I'll post the new static IP info as:
IP - 10.1.1.50
Sub - 255.255.255.0
GW - 10....
0
votes
2
answers
12k
views
What does fixup protocol http actually do on a Cisco PIX firewall?
I have a PIX 515E, running PIXOS 6.3, which has fixup protocol http 80 in the configuration.
Can anyone point me to documentation that describes exactly what this does to web traffic.
Cisco's own ...
1
vote
1
answer
294
views
trying to prevent ddos with cisco pix 501 [duplicate]
I'm getting dos on a dedicated server with windows+apache, ive asked support to install a firewall and got a cisco pix 501, the attacks are on port 80 to a certain site, what can I do to block it?
I ...
1
vote
1
answer
1k
views
Cisco pix - external interface goes down - is this the pix or network?
In December our Cisco PIX 501 appeared to hang taking the webservers behind it offline. It did this 4 times in the space of a couple of weeks and the "remote hands" engineer at the data-centre (where ...
0
votes
1
answer
512
views
Cisco PIX 515 doesn't seem to be passing traffic through according to static route
Ok, so I am having a spot of bother with a Cisco PIX515, I have posted the current running config below, now I am no cisco expert by any means although I can do basic stuff with them, now I am having ...