The Cisco PIX line of products were devices that provided firewall and VPN functionality.

learn more… | top users | synonyms (1)

6
votes
7answers
997 views

Are there any good free Cisco router simulators out there?

I'm just starting some Cisco training and I would like to know if there are any freely available simulators available.
4
votes
3answers
4k views

What might prevent IKE handshake success in building an IPSEC tunnel?

We use Cisco ASA for our IPSEC VPNs, using the EZVPN method. From time to time we encounter problems where an ISP has made a change to their network and our VPN stops working. Nine times out of ten ...
3
votes
2answers
243 views

New IP addressing from ISP

We just got a new Internet fiber service. Our ISP gave us a /30 for WAN and /29 for LAN? I have never seen this when setting up a new ISP service. I was always given a block of ip addresses (if ...
3
votes
2answers
201 views

Programmer configuring a new network [closed]

I'm in the process of expanding my home network from a couple of laptops on a wireless Verizon FiOS router to include: Linksys 24-port switch Cisco Pix 515 Cisco 3640 router One new development ...
3
votes
1answer
1k views

PIX 506E, MTU, VPN Packet Fragmentation and Shoretel IP telephone system

We have two sites, a large Southern site and a small Northern site, that have a VPN between them defined on two Cisco PIX Firewalls. Over this VPN Shoretel IP phone traffic travels as well as all ...
3
votes
2answers
413 views

add detailed authentication + logging to pix 515e

I have a pix 515e running pixos 6.3 w/ 64MB RAM, 3 ethernet interfaces, only 2 in use. I am using it as an internet gateway for ~100 devices, daily peak of about 6 Mbps (megabits per second) inbound, ...
3
votes
6answers
12k views

Cisco PIX to Juniper Netscreen Policy-based VPN fails Phase 2 Proposal

I've followed the instructions to configure a VPN between a netscreen device and a Cisco PIX as directed by Cisco's [netscreen to PIX ...
2
votes
3answers
210 views

Cisco ASA 5505 to replace a Cisco PIX

Is a Cisco ASA 5505 powerful / capable enough to replace a Cisco PIX 503 ? The PIX runs about 10 site to site VPN's and 40+ individual users on vpn.
2
votes
2answers
1k views

Cisco PIX land attack

I am continouly getting errors log Deny IP due to Land Attack from IP to IP. Both source and destination IP address are same. Can any one please guide me what could be the issue and how I can fix ...
2
votes
1answer
370 views

PIX Firewall Causing Packet Loss

I am currently in the process of modifying how internet reaches my front end servers and I am having a strange issue with one of the existing stacks. There is one physical firewall which is above the ...
2
votes
1answer
985 views

Convert Site-to-Site VPN from PIX to ASA 8.2

I have been working on converting a config over from a PIX to a ASA 8.2 but I am running into some trouble with the site to site vpn part of it. The PIX has both a client VPN and site to site. Since ...
2
votes
4answers
1k views

Un-failing over a Cisco PIX 515e

We had a power outage at our data center last week and when our dual PIX 515E running IOS 7.0(8) (configured with a failover cable) came back, they were in a failed over state where the Secondary unit ...
2
votes
2answers
1k views

Cisco Pix 501 (and probably 506e) PDM web access and Java errors

Are there any nice options for using the PDM on an old Cisco Pix 501 or 506e with modern computers/browsers? I have an old 501 at a remote site and only have https access to it from my location. I can ...
2
votes
1answer
1k views

Cisco Pix 501 - reaching local host limit, showing odd IP addresses

I am running out of licenses on my Pix 501, and the show local-host command lists a number of odd IP addresses that do not belong to my 10.10.1.* subnet. Any idea what they are? The only thing I could ...
1
vote
2answers
1k views

Why do they call it “inside_access_in”?

I am looking at some configurations for Cisco FWSM devices and I notice a common notation for an ACL name called inside_access_in. But I am commonly seeing ACEs that are for allowing internal machines ...
1
vote
1answer
252 views

trying to prevent ddos with cisco pix 501 [duplicate]

I'm getting dos on a dedicated server with windows+apache, ive asked support to install a firewall and got a cisco pix 501, the attacks are on port 80 to a certain site, what can I do to block it? I ...
1
vote
1answer
52 views

set Cisco Pix back to default settings

Trying to wipe my Cisco pix back to factory default. i login to the pix as an admin then type "configure factory-default" this doesn't work though
1
vote
1answer
325 views

Configuring a PIX to allow SMTP between DMZ and internal network

I have a Web Server (193.170.4.2) in my DMZ that needs to communicate with the our Exchange Server (10.77.51.87) internally via SMTP. I used access-list acl-dmz permit tcp host 193.170.4.2 host ...
1
vote
1answer
695 views

Configuring PIX 506 with NAT for multiple public addresses

We are setting up a streaming service to an external client and they need access to an internal workstation along with certain ports open on our firewall. I need to configure two public IP addresses ...
1
vote
1answer
204 views

How do I make a Cisco Pix forward to a specific port?

on a pix how do I make port traffic, port 25 for email in this case, usable by a specific ip address in my spread of IPs? I want to send email to someemail@192.168.0.1 and have the pix send it to ...
1
vote
2answers
199 views

Cisco and HP backups to Spiceworks TFTP occasionally creating .tmp files

We are backing up our ASAs and switches using some scripting. It works very well. I have noticed though, occasionally, the backups to the TFTP will come out not as plain "files" with no extension, ...
1
vote
1answer
3k views

Can the ASA 5505 use pptp as the VPN type? If so does anyone have a link to a config example?

I'm migrating from a PIX to a ASA and the PIX has the remote users PPTP to it. This is not pass though but the VPN type of the PIX. Does the ASA even support this? I have been trying to search around ...
1
vote
1answer
1k views

Cisco Pix how to add an additional block of static ip addresses for nat?

I have a pix 501 with 5 static ip addresses. My isp just gave me 5 more. I am trying to figure out how to add the new block and then how to nat/open at least one of them to an inside machine. So ...
1
vote
1answer
882 views

Cisco pix - external interface goes down - is this the pix or network?

In December our Cisco PIX 501 appeared to hang taking the webservers behind it offline. It did this 4 times in the space of a couple of weeks and the "remote hands" engineer at the data-centre (where ...
1
vote
2answers
905 views

Cisco PIX 8.0.4, static address mapping not working?

upgrading a working Pix running 5.3.1 to 8.0.4. The memory/IOS upgrade went fine, but the 8.0.4 configuration is not quite working 100%. The 5.3.1 config on which it was based is working fine. ...
1
vote
1answer
5k views

How do you open a port on a cisco firewall?

I'm sure this is simple but how do you open a port on a cisco firewall? I want to use fixup to alias a port and then actually open the port. But I don't know how to do it. Thank you.
1
vote
1answer
633 views

Cisco VPN endpoints disconnecting from a VLAN

I have a number of Cisco ASA 5505 and PIX 506e around the world acting as VPN endpoints. They connect to a Cisco VPN Concentrator 3000 at HQ. I am using Easy VPN to set up the VPN (i.e. most of the ...
1
vote
2answers
3k views

Cisco VPN Client dropping connection

Using Windows XP and Cisco VPN client version 5.0.4.xxx to connect to a remote customer site. We are able to establish the connection and start an RDP session, but within 1-2 minutes the connection ...
1
vote
1answer
243 views

How can I remove the ACL of PIX firewall?

I'm just trying to how PIX works. Anyway how can I remove the ACL from my GNS3's PIX? PIX-SECU(config)# show access-list access-list cached ACL log flows: total 0, denied 0 (deny-flow-max 4096) ...
1
vote
1answer
440 views

Configure Cisco Pix 515 with DMZ and no NAT

I hope that someone could shed some light over my situation, as I am fairly new to PIX configurations. I will be getting a new net for my department, which I am going to configure. At my hands, I ...
1
vote
0answers
89 views

Datacenter redundant hosting setup advice

We are moving our servers to a new DC and I am looking for a bit of advice with our new COLO setup. I have some knowledge of networking but I am an enthusiast more than anything so it gets a bit ...
1
vote
0answers
72 views

Is there a way to have VPNC failover automatically to a second Cisco firewall?

I'm currently using VPNC on my Ubuntu machine to VPN to a remote Cisco firelwall. It's critical for this VPN connection to be up at all time. Is there a way to have VPNC failover automatically to a ...
1
vote
1answer
228 views

Utilizing two outside internet subnets - routing or physical connection ideas?

I am looking for some ideas on how I might utilize a second 5 internet ip address subnet I have available from my isp. Currently I have the isp cable modem which has 5 ethernet ports on it. It is ...
1
vote
2answers
4k views

How Do i Add A LIne To A PIX Firewall's Access List?

I need to open a port on a PIX 515. Please can someone explain what I should be entering including the commands. For the purposes of the explanation (so I can understand it ) I've given the ...
0
votes
5answers
329 views

Cisco PIX - What does this line do?

I found this line in among many other ACL lines in my PIX. It looks different than the rest of them. It's at the end of the rest of the ACL lines, including being after access-list acl-out deny ip ...
0
votes
5answers
281 views

Are PIX firewalls still supported by Cisco?

I was told by a salesman at a hosting company to be wary of anyone trying to use a PIX firewall in my hosting solution because Cisco doesn't support them anymore or offer security updates. Is that ...
0
votes
3answers
294 views

Swapping out a hardware firewall does the mac address get cached?

We need to replace a hardware firewall (cisco pix) and have a spare that we will use (temporarily). The firewall sits in front of a couple of web-servers colocated at a data-centre. The replacement ...
0
votes
2answers
66 views

Loss of inbound emails from external domains after replacing firewall with new ASA5510

To start, I'd just like to admit my lack of knowledge in setting up/maintaining critical hardware like firewalls and exchange servers. I am the Technology Coordinator for a small charter school and ...
0
votes
2answers
203 views

Converting cisco PIX to cisco ASA

I am about to migrate PIX 515E, 6.3(4), configuration to Cisco ASA. I do not have the PIX which is in Paris, I have the configuration on a notepad file. I do not know the Cisco ASA model yet either ...
0
votes
2answers
402 views

Set up a GRE tunnel with Cisco PIX-506 v6.3

I'm trying to establish one half of a GRE tunnel, the other being configured by my service provider. I have a Cisco PIX-506-E running Firewall version 6.3(5). Provider Router Public IP: 8.8.8.8 My ...
0
votes
2answers
910 views

Same VLAN, multiple interfaces on PIX?

I'm already pretty certain this is impossible, but it's at least the second time I've found myself in this situation and really wishing it could be done, so if for no other reason than to save others ...
0
votes
2answers
979 views

Moving a PIX config from one device to another

I recently backed up our current PIX config to our TFTP server. We're getting a second internet connection and as such, we ordered the same PIX device as the one in production. So, what we want to do ...
0
votes
4answers
502 views

Replacing a Cisco Pix Firewall with a D-LINK DFL-CPG310 Firewall

Does anyone have any experience migrating from a Cisco PIX to a so-called non-enterprise grade firewall/router/vpn? I'm a non-networking professional (developer) that flunked the CCNA (only got a ...
0
votes
3answers
426 views

Any advice on repairing a faulty power jack on a Cisco PIX 501?

One of my PIX 501 units has a power jack that is fairly sensitive to any movement of the chassis. If I so much as nudge the PIX, the power flow is interrupted and the PIX reboots. I remember reading ...
0
votes
3answers
749 views

What are tha main causes of slowness on Cisco PIX 515?

A couple of Cisco PIX 515 work in standby mode. But the active PIX (or the otherone) never uses more then 40% of the available bandwidth on the outbound LAN interface (10Mbps).
0
votes
1answer
1k views

VPN and overlapping subnets

I have a number of Cisco site-to-site VPNs between using ASA and Pix devices established for my clients. This is a hosted application and I need for the entire address range on the client's network to ...
0
votes
2answers
35 views

Cisco PIX 501 and jumbo frames

We currently have a cisco pix 501 running in our office building and we just got word that our network is going to updated to run jumbo frames. I haven't been able to find much information, but from ...
0
votes
1answer
218 views

How Do I Access A PIX External Port-Forward From The Inside Network?

I have a PIX running 8.0(3). I've got a port-forward to permit external users to hit a server on my inside network set up as so: static (inside,outside) tcp interface 8080 192.168.168.100 8080 ...
0
votes
2answers
118 views

Working with PIX firewalls [closed]

I have acquired a used Pix firewall. A PIX 506 to use as a firewall for my small home office, the netgear wi-fi was really not cutting it. I'd like to get a pointer on where to start with it, like ...
0
votes
1answer
297 views

Cisco pix 501 setup with Mcafee

I am way out of my leauge on this but if someone could take the time to help me I would appreciate it. We renewed our Mcafee Saas Protection and I am trying to set up their required ip addresses in ...