Why my pix501 works fine?

Hi all

I just configured my pix 501 by pdm for Internet and vpn access... and it works!

but I wonder if she is well protected, because without configuration, I can use a remote PC to take remote control of a station behind the pix, by Office

There is someone to look at my setup, please.

who is he good configuration for better security?

ethernet0 nameif outside security0

nameif ethernet1 inside the security100

activate the password * encrypted

passwd * encrypted

host name *.

domain name *.

fixup protocol ftp 21

fixup protocol http 80

fixup protocol h323 h225 1720

fixup protocol h323 ras 1718-1719

fixup protocol they 389

fixup protocol rsh 514

fixup protocol rtsp 554

fixup protocol smtp 25

fixup protocol sqlnet 1521

fixup protocol sip 5060

fixup protocol 2000 skinny

names of

inside_outbound_nat0_acl ip access list allow any 192.168.0.128 255.255.255.192

outside_cryptomap_dyn_20 ip access list allow any 192.168.0.128 255.255.255.192

pager lines 24

interface ethernet0 10baset

interface ethernet1 10full

Outside 1500 MTU

Within 1500 MTU

IP address outside pppoe setroute

IP address inside 192.168.0.201 255.255.255.0

alarm action IP verification of information

alarm action attack IP audit

IP local pool poolvpn 192.168.0.150 - 192.168.0.160

PDM logging 100 information

history of PDM activate

ARP timeout 14400

Global 1 interface (outside)

NAT (inside) 0-list of access inside_outbound_nat0_acl

NAT (inside) 1 0.0.0.0 0.0.0.0 0 0

Timeout xlate 0:05:00

Timeout conn 01:00 half-closed 0: 10:00 udp 0:02:00 CPP 0: h323 from 10:00 0:05:00 sip 0:30:00 sip_media 0:02:00

Timeout, uauth 0:05:00 absolute

GANYMEDE + Protocol Ganymede + AAA-server

RADIUS Protocol RADIUS AAA server

AAA-server local LOCAL Protocol

Enable http server

http 192.168.0.0 255.255.255.0 inside

No snmp server location

No snmp Server contact

SNMP-Server Community public

No trap to activate snmp Server

enable floodguard

Permitted connection ipsec sysopt

No sysopt route dnat

Crypto ipsec transform-set ESP-DES-MD5 esp - esp-md5-hmac

Dynamic crypto map outside_dyn_map 20 match address outside_cryptomap_dyn_20

Crypto-map dynamic outside_dyn_map 20 the transform-set ESP-DES-MD5 value

map outside_map 65535-isakmp ipsec crypto dynamic outside_dyn_map

outside_map interface card crypto outside

ISAKMP allows outside

part of pre authentication ISAKMP policy 20

encryption of ISAKMP policy 20

ISAKMP policy 20 md5 hash

20 2 ISAKMP policy group

ISAKMP duration strategy of life 20 86400

poolvpn vpngroup address VPNtest-pool

vpngroup idle 1800 VPNtest-time

vpngroup VPNtest password *.

Telnet timeout 5

SSH timeout 5

VPDN group pppoe_group request dialout pppoe

VPDN group pppoe_group localname *.

VPDN group ppp authentication chap pppoe_group

VPDN username * password *.

dhcpd lease 3600

dhcpd ping_timeout 750

Terminal width 80

No, this list two access are used for the VPN configuration.

1.) (inside_outbound_nat0_acl ip access list allow any 192.168.0.128 255.255.255.192) disables NAT between your VPN network and the internal network that are usually two completely different networks.

2.) (outside_cryptomap_dyn_20 ip access-list allow any 192.168.0.128 255.255.255.192) defines which traffic is encrypted.

Leave them here!

sincerely

Patrick

Tags: Cisco Security

Similar Questions

  • Why doesn't my Gmail account? Most of my contacts isn't here, why? Gmail works fine on Google Chrome!

    Comes in a different format (see)
    Most of my contacts is not there.
    My email groups aren't there.
    My google calendar isn't here.
    My google phone isn't here.
    Cannot access the settings, as described in using google.
    Everything worked properly last week.
    Everything works fine in google chrome.
    Everything works fine on Internet Explorer.

    Hello Lippman, your useragent (information, the browser sends to websites to identify its version) - apparently by mistake - shows you're on firefox version 3.6 (which is very outdated so google will probably offer a reduced feature set). some kind of adware or toolbar crushed it.

    Please refer to this article to reset the settings of the user agent in firefox: websites say that Firefox is obsolete or incompatible, even if it's the latest version

    You can also try resetting firefox...

  • the videos do not work in Firefox, but work fine in windows Explorer. Why?

    I tried to check my plugin and all are enabled. I found here where it was suggested to delete and reinstall Firefox, but that did not fix problem either. I tried to change the Viewer for video, but still no luck. Not sure why Quicktime does not work. Note that when browsing videos will not open, but everything else works fine. Videos work very well with windows explore, but not Firefox.

    Start Firefox in Safe Mode to check if one of the extensions (Firefox/tools > Modules > Extensions) or if hardware acceleration is the cause of the problem (switch to the DEFAULT theme: Firefox/tools > Modules > appearance).

    • Do NOT click on the reset button on the startup window Mode safe or make changes.
  • Why some games and other programs need to be "run as Administrator" mode in 7RC which worked fine in normal mode on 7 beta and vista?

    Why some games and other programs must be run in Admin mode in 7RC which worked fine in normal mode on 7 beta and vista?

    An example of this is the game Guild Wars (www.guildwars.com). I had problems with this with random programs.

    cbello57,
    Run as administrator may be required for some games and programs because they have a permission structure different in Vista in Windows 7 (Windows 7 and Vista are different in how to manage certain permissions).

    I suggest test you installation of the game in the program by clicking on the Setup file by clicking on "Run as administrator".

    This will sometimes solve this kind of situation because it installed the program in a State of high permission.

    This output from test and let us know your results Rami
    Microsoft Answers Support Engineer
    Visit our Microsoft answers feedback Forum and let us know what you think.

  • Photoshop elements editor 14 was working fine, all of a sudden it does not, even if I turn off my mac.  Why?

    Photoshop elements editor 14 was working fine, all of a sudden it does not, even if I turn off my mac.  Why?

    Today I got the help of Adobe's Support team, and it was excellent.  Everything works perfectly now.   Thanks, John for trying to help anyway.

    CONCERNING

  • I bought a new computer, I had a subscription on the old computer. So I put on my new computer. It worked fine but since yesterday to publish this message "Login Required" mandate the evaluation software. I don't understand why, what can I do?

    I bought a new computer, I had a subscription on the old computer. So I put on my new computer. It worked fine but since yesterday to publish this message "Login Required" mandate the evaluation software. I don't understand why, what can I do?

    Hello

    Please refer to activation of Adobe Creative commune Solve cloud (login) and questions (disconnect) disabling or error messages

  • I copy student PS CS6 which works fine except when I'm disconnected from online, why is this and what can I do to make this work if the connection is lost. In addition, everything will work OK if I update to Windows 8 for windows 10?

    I copy student PS CS6 which works fine except when I'm disconnected from online, why is this and what can I do to make this work if the connection is lost. In addition, everything will work OK if I update to Windows 8 for windows 10?

    Yes, Photoshop should work fine without the internet connection, as this is the standalone version.

  • Updated on Windows7 + blank white screen now but which works fine under Ubuntu why?

    I had 14 of Firefox running on Windows 7 and no problems. I've updated again Firefox and when I connected to the Internet, I got was a white screen. Well connected, went well on the site, but did not address tab only in the web address bar and nothing on the page. I tried Internet Explorer and that worked well. Then I stopped and restarted in Ubuntu and tried my Firefox version 22 and it worked fine so I think that something is wrong with the new version of Firefox with Windows 7 now. I don't want to lose all my passwords or I uninstall Firefox and reinstall. If you can tell me how to save my passwords in Firefox 26 (latest version as of 16/01/2014) I'll try to uninstall and reinstall. Thanks for any help you can give me. I prefer to make a fix on this instead of Firefox. I use Ubuntu now send this.

    Thanks Philipp, but I solved the problem. I selected control screen and saved all my passwords in Firefox to another program. Then, I downloaded Firefox 23 (stable version) of the Internet Explorer browser on a USB key. Then, I used CC Cleaner uninstall Firefox on my laptop. I chose to keep my apps and personal information when CC Cleaner asked me if I wanted to (it's free http://www.piriform.com/ccleaner or Google it). Then I installed the stable 23 version of Firefox to my USB key. Start Firefox and everything works great. The problem is a problem with the new version of Firefox, and it's a real problem that should be fixed by Mozilla very soon.

  • my hp 4100 series all-in-one does not work on my windows 7 but work fine on my xp computer why

    my HP 4100 Series 4100 all-in-one DOES not work on my windows 7... but worked fine on my xp computer and a ruin my driver not compatible?

    You must download and install the appropriate drivers for your version of Win7 from this link.

    http://h20000.www2.HP.com/bizsupport/TechSupport/DriverDownload.jsp?pnameOID=29118&prodTypeId=18972&prodSeriesId=83436&cc=us

    I hope this helps.

  • HP 3510 only prints blank pages of the i - pad, but works fine with xp configured portable computer. Why? Help!

    I have a hp3510 wireless printer which worked well with my i - pad and on my laptop when 1st installed.  now it will only print blank with the i - pad pages, even if it still works fine when using my laptop configured xp.  can someone tell me how to fix the problem of the i - pad, so that I can print wireless using this device?

    Thank you!

    I begin with the tension of the Apple device, make sure that you hold the power button down and drag the bar on the screen on 'Off '. If you have more than 1 iOS device that you use with the current of the printer (like an iPad or iPhone) them down at the same time. Then reactivate them all and try to print to the printer.

    If still a problem, I would then turn off the printer, router and device from Apple.
    1. unplug the router, (most do not have a power button)
    2. turn off printer and Apple device
    3 wait about 20-30 seconds
    4 plug router back in and wait for it to be fully operational and all the light on it again as they were before unplugging.
    5 printer and apple pyromecanismes turn on (check the settings of the iPad to make sure he's still on the same network as the printer and "ask to join other networks" is enabled).
    6 try to print

  • 40.0 Firefox works fine on laptop with Windows 10. Horrible on my desk. What gives?

    My wife's cell phone was the upgrade of Windows 10. 40.0 Firefox works fine on the laptop. I have a desktop PC newer than the laptop, which also has the upgrade of Windows 10 which is four years. I still have problems with the bar doesn't show is not the X to close and no reduction in title or maximize buttons. If I go to full screen I get the title bar, but it's on my tab bar. Pages on the desktop do not render correctly. Part of the page is missing. I uninstalled and reinstalled 40,0 3 times, same problem. Why it would work on a laptop five year old and not on a desktop years? It is not sensible. I guess 40.0 is a work in progress?

    I made an update of Firefox. Problem solved.

  • Connection for Instagram popup does not load. Works fine in IE.

    Instagram is one of the few sites that choke on a login screen in Firefox 32.0.2 loading. The connection popup running endlessly, but works fine in other browsers. CNET is another site that's in terrible trouble with Firefox. BrightHouse stall also on Firefox networking sites. Tried everything: delete history, deleting the cookies, check the list of Hosts, etc.

    It solved! I have the do not follow Me module and he blocked two trackers on Instagram login page. This allows Google Analytics has not helped, but Facebook Connect is a apparently necessary to allow the connection of Instagram.
    I'm blocking all cookies, but none of the trackers, in IE, it's why she was able to connect in there.

    -)
  • Flash works fine in firefox 14 but I can't update

    Firefox could only have this problem. My operating system is windows xp pro 32-bit computer Sp. I upgraded from 12 Firefox Firefox 14 Friday and everything worked fine. No problem, however the next day, I saw that the flash was updated from version 11.3.300.265 to11.3.300.268. The opera and internet Explorer update to the new version. 14 Firefox is not. I check messages, Google, forums, nothing. So I downloaded flash again and still no change in Firefox. Still using the old version of flash. Now the new flash works fine in Firefox, the question is why it refresh.? So I tried to update the plugin myself nothing, became: config and enabled the plugin container and tried other things that did not work. I don't understand. I'm OK with Firefox 14 but not if I have to use an older version of flash, and I'm on the edge when I am forced to upgrade my browser and it works very well. Here is a link on the adobe forums that a guy has the same problem six days ago. see that they have in the forum believe it is a Firefox will not deliver a flash program.
    http://forums.Adobe.com/thread/1040108?TSTART=0

    I'm using google chrome because i don't want to use an older version of flash. I knew it was too good to be true. If i can get it fixed it's still the second best browser in my mind. If I can't then i need to change. THANKS.
    

    If you have the 265 and the 268 in the folder, delete the 265 by hand. It is possible that some Flash media plays so the Adobe installer did not cleaning itself. I cross my fingers.

  • Qosmio F20: Nero - it works fine?

    Hey wheres the best place to get nero 6 and it works very well for the f20!

    > Hey wheres the best place to get nero 6
    You have to buy.

    > it works fine for the f20!
    I don't see any difficulty, why it does not work.
    I use Nero on my laptop (Qosmio no) and it works properly

    Also check this announcement:
    http://forums.computers.Toshiba-Europe.com/forums/thread.jspa?threadID=13202

  • My internet keeps disconnecting even if the router works fine. He maintains have diagnosed as a DNS error any.

    I have a Samsung RV511 which is only a couple of years.  It has been disconnected from the internet every 2 to 5 minutes or more, but my router works fine.  I got a new power cord, ethernet for her, but the computer continues to disconnect. When I diagnose the problem, it indicates the server DNS does not.  Tried to contact my internet provider, but they couldn't understand why I didn't know every little thing on my computer and made me feel pretty stupid so I'm curious to see if anyone else out there it can help.

    I used to get this problem.  My connection would get a yellow top warning symbol & I could no longer communicate on the internet.  No Windows diagnosis could correct & would only sometimes identify [as a DNS problem].

    I searched for advice, but never really found a convincing explanation or an appeal.  I started using the commands below [that I found in this forum] to restore things.  It seemed most of the working time.

    Several people also suggest just reset the router, but that was irrelevant, because I haven't used one but I tried to remove and then reconnect the modem USB and sometimes helped.

    The problem seems to occur in phases, but I could never understand what was different between the good times & bad times.  I've always suspected the software controlling my USB modem but could never be sure.  I changed the USB modem & the problem went away for months before returning [but less frequently than before].  Now, I have a wireless connection with my mobile phone and use it as my modem for internet connection - 5 months without problem.

    What I did was to open a command prompt [I think he should be executed as administrator], then type:

    netsh winsock reset
    RESTART THE PC
    netsh int ip reset
    RESTART THE PC
    ipconfig/flushdns
    ipconfig/registerdns
    RESTART THE PC

    As I say, this procedure allows to sort out most of the time, but it should reappear later.

Maybe you are looking for