Recent content by scothaniel

Here you go: aaa-server radius-authport 1812 aaa-server TACACS+ protocol tacacs+ aaa-server RADIUS protocol radius aaa-server AuthInbound protocol radius aaa-server AuthInbound (inside) host 1.0.0.203 pass timeout 100 sysopt connection permit-ipsec no sysopt route dnat crypto ipsec...

OK, Everything works now. I forgot the no-xauth on the ISAKMP key statement. Thanks for the help. Scott

Sorry for the late response- We are running WebSweeper on (2)1GHz NT4 Servers. 1200 users total. Using Sophos for anti-virus. If you are running a LDAP based network, you could also go the open-source route of using Squid Proxy server. It requires a lot more work, but the price is right.

I'm currently using the Linksys VPN router to connect one of my small branch offices to the main network. I am having a little problem it, either the PIX or Linksys counts too slow!!!! I have the timeouts set to 24 hours on both of the boxes. The PIX reaches 24 hours and starts the re-key. The...

Ok, I entered the command: crypto map mymap client authentication AuthInbound and it worked properly for authenticating the Cisco VPN Clients. BUT, the pix also tried to authenticate the LAN-LAN VPN connection, which is not possible and kicked 2 remote departments off-line. Any other idea's...

Really? I am using the Linksys BEFVP41 VPN router to make a LAN-LAN connection to one of our offices, but we are connecting to a Cisco PIX. I have heard that you can set up a cisco router for VPN connections.

We are looking to setup RADIUS authentication for our Cisco VPN-clients, without effecting our LAN-LAN VPN connections. We have 2 sites set up for IPSec tunnels. These sites are always up and do not need the extended authentication. We have a group of laptops and home PC's using the vpn-client...

Check out MIMESweeper and WEBSweeper @ Contenttechnologies.com. We went that route for Web / Mail filtering and virus control. A little cheaper then Websense, just as good (in my opinion).

It depends, are you looking to authenticate users? Since the PIX does not have any proxy capabilities, you will need a proxy or radius server to authenticate. Then you can set your access list to only allow web requests from the proxy to access the internet, making all users login and get logged.

Have you tried sar -b ?

It looks like you got lucky on that one. Your /usr and /opt are on the / partition, so the best thing to repartion your /export/home into 3 partitions. Then you can copy & remove the directories from / to create the needed space.

With PIX version 6, you can NAT a single outside address to seperate internal address using port redirection. It is VERY buggy though. We have had major problems with it.

No problem, just need your e-mail address.

I have been looking for a cost effective Proxy server to work with the PIX. I have checked numerous programs, but I have not found one that has the capability of authenticating users to a group on the NT Domain and contain detailed logs of the users activities. I know that MS Proxy server has...

We had Raptor running on Compaq - It had a couple of bizare problems. Switched to IBM, no problems.