The Cisco PIX line of products were devices that provided firewall and VPN functionality.

learn more… | top users | synonyms (1)

6
votes
7answers
936 views

Are there any good free Cisco router simulators out there?

I'm just starting some Cisco training and I would like to know if there are any freely available simulators available.
3
votes
2answers
107 views

New IP addressing from ISP

We just got a new Internet fiber service. Our ISP gave us a /30 for WAN and /29 for LAN? I have never seen this when setting up a new ISP service. I was always given a block of ip addresses (if ...
3
votes
2answers
196 views

Programmer configuring a new network [closed]

I'm in the process of expanding my home network from a couple of laptops on a wireless Verizon FiOS router to include: Linksys 24-port switch Cisco Pix 515 Cisco 3640 router One new development ...
3
votes
1answer
1k views

PIX 506E, MTU, VPN Packet Fragmentation and Shoretel IP telephone system

We have two sites, a large Southern site and a small Northern site, that have a VPN between them defined on two Cisco PIX Firewalls. Over this VPN Shoretel IP phone traffic travels as well as all ...
3
votes
2answers
401 views

add detailed authentication + logging to pix 515e

I have a pix 515e running pixos 6.3 w/ 64MB RAM, 3 ethernet interfaces, only 2 in use. I am using it as an internet gateway for ~100 devices, daily peak of about 6 Mbps (megabits per second) inbound, ...
3
votes
3answers
3k views

What might prevent IKE handshake success in building an IPSEC tunnel?

We use Cisco ASA for our IPSEC VPNs, using the EZVPN method. From time to time we encounter problems where an ISP has made a change to their network and our VPN stops working. Nine times out of ten ...
3
votes
6answers
11k views

Cisco PIX to Juniper Netscreen Policy-based VPN fails Phase 2 Proposal

I've followed the instructions to configure a VPN between a netscreen device and a Cisco PIX as directed by Cisco's [netscreen to PIX ...
2
votes
3answers
206 views

Cisco ASA 5505 to replace a Cisco PIX

Is a Cisco ASA 5505 powerful / capable enough to replace a Cisco PIX 503 ? The PIX runs about 10 site to site VPN's and 40+ individual users on vpn.
2
votes
2answers
1k views

Cisco PIX land attack

I am continouly getting errors log Deny IP due to Land Attack from IP to IP. Both source and destination IP address are same. Can any one please guide me what could be the issue and how I can fix ...
2
votes
1answer
312 views

PIX Firewall Causing Packet Loss

I am currently in the process of modifying how internet reaches my front end servers and I am having a strange issue with one of the existing stacks. There is one physical firewall which is above the ...
2
votes
1answer
850 views

Convert Site-to-Site VPN from PIX to ASA 8.2

I have been working on converting a config over from a PIX to a ASA 8.2 but I am running into some trouble with the site to site vpn part of it. The PIX has both a client VPN and site to site. Since ...
2
votes
4answers
2k views

Un-failing over a Cisco PIX 515e

We had a power outage at our data center last week and when our dual PIX 515E running IOS 7.0(8) (configured with a failover cable) came back, they were in a failed over state where the Secondary unit ...
2
votes
2answers
773 views

Cisco Pix 501 (and probably 506e) PDM web access and Java errors

Are there any nice options for using the PDM on an old Cisco Pix 501 or 506e with modern computers/browsers? I have an old 501 at a remote site and only have https access to it from my location. I can ...
2
votes
1answer
1k views

Cisco Pix 501 - reaching local host limit, showing odd IP addresses

I am running out of licenses on my Pix 501, and the show local-host command lists a number of odd IP addresses that do not belong to my 10.10.1.* subnet. Any idea what they are? The only thing I could ...
1
vote
2answers
1k views

Why do they call it “inside_access_in”?

I am looking at some configurations for Cisco FWSM devices and I notice a common notation for an ACL name called inside_access_in. But I am commonly seeing ACEs that are for allowing internal machines ...
1
vote
1answer
233 views

trying to prevent ddos with cisco pix 501 [duplicate]

I'm getting dos on a dedicated server with windows+apache, ive asked support to install a firewall and got a cisco pix 501, the attacks are on port 80 to a certain site, what can I do to block it? I ...
1
vote
1answer
46 views

set Cisco Pix back to default settings

Trying to wipe my Cisco pix back to factory default. i login to the pix as an admin then type "configure factory-default" this doesn't work though
1
vote
1answer
252 views

Configuring a PIX to allow SMTP between DMZ and internal network

I have a Web Server (193.170.4.2) in my DMZ that needs to communicate with the our Exchange Server (10.77.51.87) internally via SMTP. I used access-list acl-dmz permit tcp host 193.170.4.2 host ...
1
vote
1answer
536 views

Configuring PIX 506 with NAT for multiple public addresses

We are setting up a streaming service to an external client and they need access to an internal workstation along with certain ports open on our firewall. I need to configure two public IP addresses ...
1
vote
1answer
197 views

How do I make a Cisco Pix forward to a specific port?

on a pix how do I make port traffic, port 25 for email in this case, usable by a specific ip address in my spread of IPs? I want to send email to someemail@192.168.0.1 and have the pix send it to ...
1
vote
2answers
137 views

Cisco and HP backups to Spiceworks TFTP occasionally creating .tmp files

We are backing up our ASAs and switches using some scripting. It works very well. I have noticed though, occasionally, the backups to the TFTP will come out not as plain "files" with no extension, ...
1
vote
1answer
2k views

Can the ASA 5505 use pptp as the VPN type? If so does anyone have a link to a config example?

I'm migrating from a PIX to a ASA and the PIX has the remote users PPTP to it. This is not pass though but the VPN type of the PIX. Does the ASA even support this? I have been trying to search around ...
1
vote
1answer
2k views

Cisco Pix how to add an additional block of static ip addresses for nat?

I have a pix 501 with 5 static ip addresses. My isp just gave me 5 more. I am trying to figure out how to add the new block and then how to nat/open at least one of them to an inside machine. So ...
1
vote
1answer
765 views

Cisco pix - external interface goes down - is this the pix or network?

In December our Cisco PIX 501 appeared to hang taking the webservers behind it offline. It did this 4 times in the space of a couple of weeks and the "remote hands" engineer at the data-centre (where ...
1
vote
2answers
802 views

Cisco PIX 8.0.4, static address mapping not working?

upgrading a working Pix running 5.3.1 to 8.0.4. The memory/IOS upgrade went fine, but the 8.0.4 configuration is not quite working 100%. The 5.3.1 config on which it was based is working fine. ...
1
vote
1answer
4k views

How do you open a port on a cisco firewall?

I'm sure this is simple but how do you open a port on a cisco firewall? I want to use fixup to alias a port and then actually open the port. But I don't know how to do it. Thank you.
1
vote
1answer
618 views

Cisco VPN endpoints disconnecting from a VLAN

I have a number of Cisco ASA 5505 and PIX 506e around the world acting as VPN endpoints. They connect to a Cisco VPN Concentrator 3000 at HQ. I am using Easy VPN to set up the VPN (i.e. most of the ...
1
vote
2answers
3k views

Cisco VPN Client dropping connection

Using Windows XP and Cisco VPN client version 5.0.4.xxx to connect to a remote customer site. We are able to establish the connection and start an RDP session, but within 1-2 minutes the connection ...
1
vote
1answer
37 views

How can I remove the ACL of PIX firewall?

I'm just trying to how PIX works. Anyway how can I remove the ACL from my GNS3's PIX? PIX-SECU(config)# show access-list access-list cached ACL log flows: total 0, denied 0 (deny-flow-max 4096) ...
1
vote
1answer
271 views

Configure Cisco Pix 515 with DMZ and no NAT

I hope that someone could shed some light over my situation, as I am fairly new to PIX configurations. I will be getting a new net for my department, which I am going to configure. At my hands, I ...
1
vote
0answers
84 views

Datacenter redundant hosting setup advice

We are moving our servers to a new DC and I am looking for a bit of advice with our new COLO setup. I have some knowledge of networking but I am an enthusiast more than anything so it gets a bit ...
1
vote
0answers
66 views

Is there a way to have VPNC failover automatically to a second Cisco firewall?

I'm currently using VPNC on my Ubuntu machine to VPN to a remote Cisco firelwall. It's critical for this VPN connection to be up at all time. Is there a way to have VPNC failover automatically to a ...
1
vote
1answer
226 views

Utilizing two outside internet subnets - routing or physical connection ideas?

I am looking for some ideas on how I might utilize a second 5 internet ip address subnet I have available from my isp. Currently I have the isp cable modem which has 5 ethernet ports on it. It is ...
1
vote
2answers
3k views

How Do i Add A LIne To A PIX Firewall's Access List?

I need to open a port on a PIX 515. Please can someone explain what I should be entering including the commands. For the purposes of the explanation (so I can understand it ) I've given the ...
0
votes
5answers
322 views

Cisco PIX - What does this line do?

I found this line in among many other ACL lines in my PIX. It looks different than the rest of them. It's at the end of the rest of the ACL lines, including being after access-list acl-out deny ip ...
0
votes
5answers
271 views

Are PIX firewalls still supported by Cisco?

I was told by a salesman at a hosting company to be wary of anyone trying to use a PIX firewall in my hosting solution because Cisco doesn't support them anymore or offer security updates. Is that ...
0
votes
3answers
268 views

Swapping out a hardware firewall does the mac address get cached?

We need to replace a hardware firewall (cisco pix) and have a spare that we will use (temporarily). The firewall sits in front of a couple of web-servers colocated at a data-centre. The replacement ...
0
votes
2answers
63 views

Loss of inbound emails from external domains after replacing firewall with new ASA5510

To start, I'd just like to admit my lack of knowledge in setting up/maintaining critical hardware like firewalls and exchange servers. I am the Technology Coordinator for a small charter school and ...
0
votes
2answers
193 views

Converting cisco PIX to cisco ASA

I am about to migrate PIX 515E, 6.3(4), configuration to Cisco ASA. I do not have the PIX which is in Paris, I have the configuration on a notepad file. I do not know the Cisco ASA model yet either ...
0
votes
2answers
323 views

Set up a GRE tunnel with Cisco PIX-506 v6.3

I'm trying to establish one half of a GRE tunnel, the other being configured by my service provider. I have a Cisco PIX-506-E running Firewall version 6.3(5). Provider Router Public IP: 8.8.8.8 My ...
0
votes
2answers
799 views

Same VLAN, multiple interfaces on PIX?

I'm already pretty certain this is impossible, but it's at least the second time I've found myself in this situation and really wishing it could be done, so if for no other reason than to save others ...
0
votes
2answers
878 views

Moving a PIX config from one device to another

I recently backed up our current PIX config to our TFTP server. We're getting a second internet connection and as such, we ordered the same PIX device as the one in production. So, what we want to do ...
0
votes
4answers
488 views

Replacing a Cisco Pix Firewall with a D-LINK DFL-CPG310 Firewall

Does anyone have any experience migrating from a Cisco PIX to a so-called non-enterprise grade firewall/router/vpn? I'm a non-networking professional (developer) that flunked the CCNA (only got a ...
0
votes
3answers
369 views

Any advice on repairing a faulty power jack on a Cisco PIX 501?

One of my PIX 501 units has a power jack that is fairly sensitive to any movement of the chassis. If I so much as nudge the PIX, the power flow is interrupted and the PIX reboots. I remember reading ...
0
votes
3answers
573 views

What are tha main causes of slowness on Cisco PIX 515?

A couple of Cisco PIX 515 work in standby mode. But the active PIX (or the otherone) never uses more then 40% of the available bandwidth on the outbound LAN interface (10Mbps).
0
votes
1answer
1k views

VPN and overlapping subnets

I have a number of Cisco site-to-site VPNs between using ASA and Pix devices established for my clients. This is a hosted application and I need for the entire address range on the client's network to ...
0
votes
1answer
179 views

How Do I Access A PIX External Port-Forward From The Inside Network?

I have a PIX running 8.0(3). I've got a port-forward to permit external users to hit a server on my inside network set up as so: static (inside,outside) tcp interface 8080 192.168.168.100 8080 ...
0
votes
2answers
116 views

Working with PIX firewalls [closed]

I have acquired a used Pix firewall. A PIX 506 to use as a firewall for my small home office, the netgear wi-fi was really not cutting it. I'd like to get a pointer on where to start with it, like ...
0
votes
1answer
272 views

Cisco pix 501 setup with Mcafee

I am way out of my leauge on this but if someone could take the time to help me I would appreciate it. We renewed our Mcafee Saas Protection and I am trying to set up their required ip addresses in ...
0
votes
2answers
329 views

Asterisk Sip trunk though a PIX 501 firewall

I'm using an asterisk VOIP server, and I'm able to make called though with my SIP client. The problem I get is one-way voice. I can hear the incoming voice but the caller can not hear me. I have no ...