Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations SkipVought on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
-
enabling certain VPN groups to have internet access on 506e
Hello NetworkGhost, This means that the permit rule tells the pix which traffic should be encrypted? right. This means acesslist splittunnel permit ip 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 all traffic is encrypted -> no spilt tunnel allowed accesslist splittunel permit ip central network remote...- StomII
- Post #3
- Forum: Security, hacker detection & forensics
-
VPN Client config for a 506e
Hi Warmon, Try this link: http://www.cisco.com/en/US/products/sw/secursw/ps2308/products_configuration_example09186a00801e71c0.shtml NTB, Mrcus- StomII
- Post #6
- Forum: Security, hacker detection & forensics
-
Pix 501 password reset help
Hello, Did you use the nppix.bin file for 4.3? NTBH Marcus- StomII
- Post #2
- Forum: Security, hacker detection & forensics
-
VPN Client config for a 506e
Hello, Should the central PIX act as >>EZVPN<< Server and the cisco VPN Client 4.x on remote side? With auth do you like to use: preshared key or do you like to use certificates? NTBH Marcus- StomII
- Post #4
- Forum: Security, hacker detection & forensics
-
PIX 501 Spilt-tunnel
Hello forum, I have a litte problem/question with PIX VPN and Split-tunnel. PIX OS 6.3.5 I have: access-list 103 permit ip 192.168.20.0 255.255.255.0 192.168.50.0 255.255.255.0 ip local pool test 192.168.50.0 mask 255.255.255.0 vpngroup test address-pool test vpngroup test default-domain...- StomII
- Thread
- Replies: 0
- Forum: Security, hacker detection & forensics
-
PIX - PIX EZVPN CERTIFICATE
Hi NetworkGhost... 100% thank u very very mutch Marcus- StomII
- Post #3
- Forum: Security, hacker detection & forensics
-
PIX - PIX EZVPN CERTIFICATE
Hello, I have a litte problem. First overfew: 192.168.20.x .1(PIX 501 EZVPNSERVER) INTERNET (PIX 501 EZVPN client).1 192.168.30.x Auth: certificates Mode: networkextensions. Nearly erverything is fine. Only one thing goes wrong. I can connect from 192.168.20.x to 192.168.30.x I can NOT...- StomII
- Thread
- Replies: 2
- Forum: Security, hacker detection & forensics
-
PIX 501 and redirection of ports
Hello This works for me access-list outside_access_in permit tcp any any eq www static (inside,outside) tcp interface www 192.168.100.100 www netmask 255.255.255.255 0 0 access-group outside_access_in in interface outside should work... StomII- StomII
- Post #2
- Forum: Security, hacker detection & forensics
-
NAT inside -> dmz(s)
Good luck... STOMII- StomII
- Post #6
- Forum: Security, hacker detection & forensics
-
NAT inside -> dmz(s)
Hi I think there should be no problem in useing ranges. Mixing acl`s and conduit causes that u can not use the PDM any longer for config (only for monitoring). Using the CLI is ok. CU StomII- StomII
- Post #4
- Forum: Security, hacker detection & forensics
-
NAT inside -> dmz(s)
Hello Maybe this helps U access-list no-nat permit ip any host {webserver-ip} nat (inside) 0 access-list no-nat STOMII- StomII
- Post #2
- Forum: Security, hacker detection & forensics
-
configuring a DMZ on a 515E PIX.
Hello please post your config. Use PDM --> Tools --> Command Line Interface --> show run --> click send... I will have a look- StomII
- Post #2
- Forum: Security, hacker detection & forensics
-
Client 3.51 with VPN over TCP 10000 over PIX 501 to vpn3015
Hello Frist I try to describe my situation. At my office I have an Cisco VPN 3015 to terminate IPSEC tunnels. (Soft 3.61) NAT/PAT over TCP 10000 ready. If I go to the conzentrator using DSL and the cisco VPN Client 3.61 (NAT/PAT over TCP 10000) everything is okay. But when I try to go over a...- StomII
- Thread
- Replies: 0
- Forum: Security, hacker detection & forensics
