Recent content by DC2006

Hi, this is possible. However, it depends how you've configured the device. Can you paste a copy of the config? (Just the NAT, Policy and Interface specific settings) Darren Campbell Technical Design Architect

Hi there, Try taking the MTU down to 1400 and see what happens.. FYI, I would try increments of 10... Darren Campbell Technical Design Architect

Try something like http://www.netswitcher.com/ Allows you to setup profiles of each network and then it's a single click to switch networks... Darren Campbell Technical Design Architect

Unfortunately not, these applications all use standard http. You need something signature based. there are lot of solutions out there, it depends how much you want to spend. Just search fot "block kazaa" in a search engine like google. Darren Campbell Technical Design Architect

The security is on by default.. Are all the machines in the same workgroup? Darren Campbell Technical Design Architect

Have you enabled file sharing on either computer? Darren Campbell Technical Design Architect

It depends... What IP Subnet do you use between the PIX and external Firewall? Is this going to be changed because you are deploying a new router with a new IP range, etc? Give a bit more detail explaining specific IP addresses. Darren Campbell Technical Design Architect

This doesn't necessarily mean that the remote sites aren't visible. The Firewall is simply saying that it's not gonna tell your workstation how to get to these remote networks because ICMP redirects are disabled. I would approach it from another angle and try pinging the remote networks from...

What version of ScreenOS are you using? And what version of IE are you using? Darren Campbell Technical Design Architect

Hi, Try using a VIP instead of a MIP.. That should do the trick.. Darren Campbell Technical Design Architect

Have you checked that the lifetimes match on both ends of the tunnel? Darren Campbell Technical Design Architect

Have you tried "hard setting" the IP Address on the PDA's and seeing if you can gain access to the Open SSID?... This would then eliminate DHCP being an issue and point at a 802.11 negotiation issue. Darren Campbell Technical Design Architect

Hi chap, check out this website. http://www.tek-tips.com/faqs.cfm?fid=3139 Darren Campbell Technical Design Architect

Woops.. Sorry, that was a total typo!! A MIP is a one-to one mapping.. Whereas a VIP is a mapping based on destination port number... Darren Campbell Technical Design Architect

You have 2 options, you either enable static NAT using a VIP which will in turn allow 2 way communications; be sure 2 use a subnet mask of 255.255.255.255 for one-to-one NAT's. Dynamic NAT is automatically enabled when an inbound rule is created. Darren Campbell Technical Design Architect