Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations Mike Lewis on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
-
Firewall Applieance Recommendation?
We run Sidewinders here. They are definitely the best Layer 7 firewalls you can by...if you want to spend $100,000. Checkpoint is a good Layer 4 firewall. You can also get a Cisco Pix 515 with IPsec for about $3000.- dino11
- Post #5
- Forum: Security, hacker detection & forensics
-
%PIX-3-201002: Too many connections on xlate
You can see how many current connections you have by doing a "sho conn count". You may want to try to up your number of allowed embryonic connections to a thousand. nat (inside) 1 192.168.0.1 255.255.255.255 1000 1000- dino11
- Post #2
- Forum: Security, hacker detection & forensics
-
nat/global/static icmp hell
Question 1: To allow ping you need to add access list statements for echo replies.. This statements will allow anyone from your inside interface to ping anything on the internet or in your dmz. access-list INSIDE permit icmp any any access-list DMZ permit icmp any any echo-reply access-list...- dino11
- Post #2
- Forum: Security, hacker detection & forensics
