0
votes
2answers
366 views

Cisco ASA/PIX Can't Access Internal Resources Behind NAT [duplicate]

My servers are natted 1:1 as follows, i.i.i.i maps to x.x.x.x where i is an internal IP, and x is the external IP. From an i.i.i.i machine, I cannot access x.x.x.x resources... What special ...
0
votes
1answer
172 views

Route being ignored on core Cisco 6500 switch?

This is less likely a bug, and more likely a lack of my own understanding on routing. I am having an asymmetric routing issue where return traffic is going out the wrong firewall. I have an explicit ...
0
votes
1answer
151 views

How do you configure a Lan to Lan VPN on an ASA without using your outside interface IP address?

I have two /28 subnets A & B. My PIX and ASA's outside interface addresses are both in subnet A. I am in the middle of a migration from the PIX to the ASA and need to use the PIX outside ...
0
votes
1answer
187 views

How Do I Access A PIX External Port-Forward From The Inside Network?

I have a PIX running 8.0(3). I've got a port-forward to permit external users to hit a server on my inside network set up as so: static (inside,outside) tcp interface 8080 192.168.168.100 8080 ...
1
vote
2answers
143 views

Cisco and HP backups to Spiceworks TFTP occasionally creating .tmp files

We are backing up our ASAs and switches using some scripting. It works very well. I have noticed though, occasionally, the backups to the TFTP will come out not as plain "files" with no extension, ...
1
vote
1answer
46 views

set Cisco Pix back to default settings

Trying to wipe my Cisco pix back to factory default. i login to the pix as an admin then type "configure factory-default" this doesn't work though
0
votes
2answers
116 views

Working with PIX firewalls [closed]

I have acquired a used Pix firewall. A PIX 506 to use as a firewall for my small home office, the netgear wi-fi was really not cutting it. I'd like to get a pointer on where to start with it, like ...
1
vote
1answer
294 views

Configure Cisco Pix 515 with DMZ and no NAT

I hope that someone could shed some light over my situation, as I am fairly new to PIX configurations. I will be getting a new net for my department, which I am going to configure. At my hands, I ...
2
votes
1answer
321 views

PIX Firewall Causing Packet Loss

I am currently in the process of modifying how internet reaches my front end servers and I am having a strange issue with one of the existing stacks. There is one physical firewall which is above the ...
3
votes
1answer
1k views

PIX 506E, MTU, VPN Packet Fragmentation and Shoretel IP telephone system

We have two sites, a large Southern site and a small Northern site, that have a VPN between them defined on two Cisco PIX Firewalls. Over this VPN Shoretel IP phone traffic travels as well as all ...
0
votes
2answers
337 views

Set up a GRE tunnel with Cisco PIX-506 v6.3

I'm trying to establish one half of a GRE tunnel, the other being configured by my service provider. I have a Cisco PIX-506-E running Firewall version 6.3(5). Provider Router Public IP: 8.8.8.8 My ...
0
votes
3answers
594 views

What are tha main causes of slowness on Cisco PIX 515?

A couple of Cisco PIX 515 work in standby mode. But the active PIX (or the otherone) never uses more then 40% of the available bandwidth on the outbound LAN interface (10Mbps).
0
votes
1answer
580 views

Disable VPN on Cisco PIX 506e (v6.3) and configure VPN pass through to a Windows 2003 DC/RRAS

The company I work for has a client that has a Cisco PIX 506e firewall running v6.3. The PIX is currently set up to manage PPTP VPN connections using the local Windows domain controller as a RADIUS ...
0
votes
1answer
281 views

Cisco pix 501 setup with Mcafee

I am way out of my leauge on this but if someone could take the time to help me I would appreciate it. We renewed our Mcafee Saas Protection and I am trying to set up their required ip addresses in ...
1
vote
1answer
2k views

Cisco Pix how to add an additional block of static ip addresses for nat?

I have a pix 501 with 5 static ip addresses. My isp just gave me 5 more. I am trying to figure out how to add the new block and then how to nat/open at least one of them to an inside machine. So ...
-1
votes
2answers
439 views

Cisco PIX 515E Remote SSH

What configuration lines/steps are required to enable WAN side SSH for the Cisco PIX? In addition what considerations should be made to ensure your connections are secure?
2
votes
2answers
814 views

Cisco Pix 501 (and probably 506e) PDM web access and Java errors

Are there any nice options for using the PDM on an old Cisco Pix 501 or 506e with modern computers/browsers? I have an old 501 at a remote site and only have https access to it from my location. I can ...
0
votes
2answers
196 views

Converting cisco PIX to cisco ASA

I am about to migrate PIX 515E, 6.3(4), configuration to Cisco ASA. I do not have the PIX which is in Paris, I have the configuration on a notepad file. I do not know the Cisco ASA model yet either ...
0
votes
1answer
428 views

Cisco Pix - how many clients or peer sites supported?

I read that a cisco pix 506e supports up to 25 vpn peers (sites), and unlimited clients (machines connected with the cisco vpn software?). The lowest cost option would seem to be to install the vpn ...
1
vote
1answer
239 views

trying to prevent ddos with cisco pix 501 [duplicate]

I'm getting dos on a dedicated server with windows+apache, ive asked support to install a firewall and got a cisco pix 501, the attacks are on port 80 to a certain site, what can I do to block it? I ...
1
vote
1answer
776 views

Cisco pix - external interface goes down - is this the pix or network?

In December our Cisco PIX 501 appeared to hang taking the webservers behind it offline. It did this 4 times in the space of a couple of weeks and the "remote hands" engineer at the data-centre (where ...
1
vote
2answers
813 views

Cisco PIX 8.0.4, static address mapping not working?

upgrading a working Pix running 5.3.1 to 8.0.4. The memory/IOS upgrade went fine, but the 8.0.4 configuration is not quite working 100%. The 5.3.1 config on which it was based is working fine. ...
0
votes
2answers
604 views

Please help with Cisco PIX 501 firewall configuration

I have bought PIX 501 router for my home network (2 laptops and broadband cable modem). I am trying to configure it. I am able to connect to PIX via console and Hyperterminal. I used initial setup ...
1
vote
1answer
4k views

How do you open a port on a cisco firewall?

I'm sure this is simple but how do you open a port on a cisco firewall? I want to use fixup to alias a port and then actually open the port. But I don't know how to do it. Thank you.
2
votes
4answers
2k views

Un-failing over a Cisco PIX 515e

We had a power outage at our data center last week and when our dual PIX 515E running IOS 7.0(8) (configured with a failover cable) came back, they were in a failed over state where the Secondary unit ...
0
votes
1answer
126 views

Cisco PIX Port Fort Forwarding

I have the pix running on this network range 192.100.10.0 255.255.255.0 And my server which is on the network 192.200.10.0 255.255.255.0 And my servers IP: 192.200.10.11 I added these commands ...
3
votes
6answers
12k views

Cisco PIX to Juniper Netscreen Policy-based VPN fails Phase 2 Proposal

I've followed the instructions to configure a VPN between a netscreen device and a Cisco PIX as directed by Cisco's [netscreen to PIX ...
6
votes
7answers
950 views

Are there any good free Cisco router simulators out there?

I'm just starting some Cisco training and I would like to know if there are any freely available simulators available.
2
votes
2answers
1k views

Cisco PIX land attack

I am continouly getting errors log Deny IP due to Land Attack from IP to IP. Both source and destination IP address are same. Can any one please guide me what could be the issue and how I can fix ...
1
vote
1answer
198 views

How do I make a Cisco Pix forward to a specific port?

on a pix how do I make port traffic, port 25 for email in this case, usable by a specific ip address in my spread of IPs? I want to send email to someemail@192.168.0.1 and have the pix send it to ...
1
vote
1answer
622 views

Cisco VPN endpoints disconnecting from a VLAN

I have a number of Cisco ASA 5505 and PIX 506e around the world acting as VPN endpoints. They connect to a Cisco VPN Concentrator 3000 at HQ. I am using Easy VPN to set up the VPN (i.e. most of the ...
0
votes
2answers
817 views

Same VLAN, multiple interfaces on PIX?

I'm already pretty certain this is impossible, but it's at least the second time I've found myself in this situation and really wishing it could be done, so if for no other reason than to save others ...
0
votes
2answers
385 views

Change configuration of a cisco pix 515 via SNMP

I have a cisco pix 515 as firewall for some web servers. What I want to do is to automatically add banned ips to the firewall to block traffic at the network level. At the present time I have a ...
0
votes
2answers
759 views

pix 501 encryption license reduces inside hosts to 10 [duplicate]

Possible Duplicate: Can you help me with my software licensing question? I have an unlimted pix 501 with no encryption license installed. I have applied for and received a 3DES license. ...
0
votes
1answer
1k views

VPN and overlapping subnets

I have a number of Cisco site-to-site VPNs between using ASA and Pix devices established for my clients. This is a hosted application and I need for the entire address range on the client's network to ...
0
votes
2answers
417 views

Help Removing an IP from Cisco PIX (6.1)

I've got an aging (ancient?) PIX in front of a website that I need to move, and in order to do that I need to be ready to remove the IP serving that site from the PIX so that the main switches further ...
0
votes
3answers
1k views

Can Mac OS X interface with Cisco Pix 501 firewall?

Our office currently uses a dated Pix 501 to allow VPN connections. We have the option to upgrade to an ASA, but I'm wondering first if Pix are known to work with Macs? We've recently setup a Xserve ...
0
votes
2answers
885 views

Moving a PIX config from one device to another

I recently backed up our current PIX config to our TFTP server. We're getting a second internet connection and as such, we ordered the same PIX device as the one in production. So, what we want to do ...
0
votes
2answers
886 views

Cisco PIX and VPN: Copy config to backup devices

Cisco newb question here. My company currently has one PIX and one VPN concentrator at our colo site. We purchased duplicate devices for redundancy. I need to copy the configs from the running devices ...
1
vote
2answers
1k views

Why do they call it “inside_access_in”?

I am looking at some configurations for Cisco FWSM devices and I notice a common notation for an ACL name called inside_access_in. But I am commonly seeing ACEs that are for allowing internal machines ...
0
votes
4answers
545 views

Packet logging on PIX firewall

We have a Cisco PIX 515 firewall and I would like to set up a simple logging that would give us a traffic breakdown for billing by: source destination protocol port size time PIX is plugged into ...
0
votes
5answers
273 views

Are PIX firewalls still supported by Cisco?

I was told by a salesman at a hosting company to be wary of anyone trying to use a PIX firewall in my hosting solution because Cisco doesn't support them anymore or offer security updates. Is that ...
0
votes
3answers
384 views

Any advice on repairing a faulty power jack on a Cisco PIX 501?

One of my PIX 501 units has a power jack that is fairly sensitive to any movement of the chassis. If I so much as nudge the PIX, the power flow is interrupted and the PIX reboots. I remember reading ...
0
votes
5answers
325 views

Cisco PIX - What does this line do?

I found this line in among many other ACL lines in my PIX. It looks different than the rest of them. It's at the end of the rest of the ACL lines, including being after access-list acl-out deny ip ...