Search results for query: *

If this traffic is initiated from inside my firewall, I shouldn't have to specifically allow it to come back in, correct??

How can I allow traffic to flow in and out to a specific port, such as TCP/5566, on my PIX 515E from the CLI?

Currently need to establish a direct link from one location to two other separate locations, i.e Point A to Point B and Point A to Point C. This direct connection requires very little bandwidth, even 56K. The only requirements are that it remain constant teminate at a rack-mount router with...

Currently need to establish a direct link from one company to two other business partners, i.e Point A to Point B, Point A to Point C. This direct connection requires very little bandwidth, even 56K. The only requirements are that it remain constant teminate at a rack-mount router with a...

Currently need to establish a direct link from one company to two other business partners, i.e Point A to Point B, Point A to Point C. This direct connection requires very little bandwidth, even 56K. The only requirements are that it remain constant teminate at a rack-mount router with a...

I need to allow our Help Desk Operator to be able to reset domain user passwords and unlock accounts when necessary. How can I grant him access to do these two specific functions in AD only?

I already checked that site. I can't find anything that would explain why the source workstation name would change that like.

...Description: Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 Logon account: "user1" Source Workstation: "server1X" (** this field varries, as indicated in my problem description above) Error Code: 0xC000006A Does anyone have any idea why this may be occuring, if its...

How would I go about setting up a sniffer without drastically impacting performance of the PIX? My network admin had the McAffee Sniffer, and I am somewhat familiar with it.

Anyone have nay suggestions?

No luck, even with the fixup command. I still cannot connect to any Windows VPN. The machines I am using to connect are behind the PIX and use an internal address with PAT for internet connections. Is there something else missing?

If I add the fixup command, do I need the access-lists at all?

Yes that is correct. Again, thanks not only for your help, but for explaining it in a way which allows me to understand what I'm doing for future reference.

I don't think my posting was clear. The suggestions you have made would affect an existing site to site connection. My intended goal at this point is to allow internal machines to connect to a remote VPN, with IP 69.x.x.1, using the Windows VPN client. Here is the access list I created...

...ethernet2 100full nameif ethernet0 outside security0 nameif ethernet1 inside security100 nameif ethernet2 public security60 enable password *********** encrypted passwd ************* encrypted hostname PIX domain-name md-x.com fixup protocol dns maximum-length 512 fixup protocol ftp 21 fixup...

I am new to the PIX, and have a 515E, version 6.3(4). I created an ACL to allow traffic on 10000 and 1723, but it does not appear to be working. Here is the access list I created: access-list 100; 5 elements access-list 100 line 1 permit tcp any any eq 10000 access-list 100 line 2 permit...

Also, my PIX version is 6.3(4)

I created an ACL based on the info above to allow traffic on 10000 and 1723, but it does not appear to be working. When I type sh access-li I do not see any hit counts for the new list I created, nor can I connect to the VPN. In addition, when I type "sh config" I can see my other...

What if I want to allow traffic in and out on those ports? Would I still use the access-group 100 in interface outside command?

Inexperienced with the PIX - how do I allow incoming and outgoing traffic on a specific port, i.e. 5000?