RE: Book for CSPFA & MCNS [7:62431]
Hi Gunjan, I've read the Managing Cisco Network Security: ISBN:1578701031 published by www.ciscopress.com. It's a good book. Although, lenthy and currently outdated. Also, I'm currently reading Cisco Secure PIX Firewalls: ISBN:1587050358. I think it will be comprehensive. Until new books are written for the new exams these will do. I'm more interested in some updated practice exams for these two certs. JoeT MCSE, CCNP Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=62440&t=62431 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: List of ip protocols [7:62460]
Hi Symon, Try this URL:http://www.iana.org/assignments/protocol-numbers. JoeT Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=62464&t=62460 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Passed CID 3.0 Test [7:62536]
Hi Steve, Congrats. I'm working on the CSPFA myself. JoeT Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=62538&t=62536 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: CCNP Done, finaly [7:63355]
Hi Arni, Congratulations. Good Job. JoeT Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=63375&t=63355 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Windows Domain Access across WAN [7:63384]
Hi All, I'm looking to setup Windows Domain access across a TCP/IP WAN. I'm concerned with all the protocols that need to be allowed. Thank you, JoeT Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=63384&t=63384 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Windows Domain Access across WAN [7:63384]
Good Morning, I answered my own question. PSS ID Number: Q179442 Article last modified on 09-06-2001 :2000,4.0 == --- The information in this article applies to: - Microsoft Windows NT Server version 4.0 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Server - Microsoft Windows 2000 Advanced Server --- SUMMARY === This article describes how to configure a firewall for domains and trusts. MORE INFORMATION To establish a domain trust or secure channel across a firewall, the following ports must be opened. Note that there may be hosts functioning with both client and server roles on both sides of the firewall. Because of this, ports rules may need to be mirrored. Windows NT -- +--+ | Client Port(s) | Server Port | Service | +--+ | 1024-65535/TCP | 135/TCP | RPC * | +--+ | 137/UDP| 137/UDP | NetBIOS Name | +--+ | 138/UDP| 138/UDP | NetBIOS Netlogon and Browsing | +--+ | 1024-65535/TCP | 139/TCP | NetBIOS Session | +--+ | 1024-65535/TCP | 42/TCP | WINS Replication | +--+ Windows 2000 For a mixed-mode domain with either Windows NT domain controllers or legacy clients, all of the preceding ports for Windows NT may need to be opened in addition to the following ports: +---+ | Client Port(s)| Server Port | Service | +---+ | 1024-65535/TCP| 135/TCP | RPC * | +---+ | 1024-65535/TCP/UDP| 389/TCP/UDP | LDAP| +---+ | 1024-65535/TCP| 636/TCP | LDAP SSL| +---+ | 1024-65535/TCP| 3268/TCP| LDAP GC | +---+ | 1024-65535/TCP| 3269/TCP| LDAP GC SSL | +---+ | 53,1024-65535/TCP/UDP | 53/TCP/UDP | DNS | +---+ | 1024-65535/TCP/UDP| 88/TCP/UDP | Kerberos| +---+ | 1024-65535/TCP| 445/TCP | SMB | +---+ NOTE: There are specific requirements for RPC communication beyond what is listed in this table. For additional information about how to configure RPC communications for a firewall, click the article number below to view the article in the Microsoft Knowledge Base: Q154596 Configuring RPC Dynamic Port Allocation to Work With Firewall By default, Windows 2000 DNS servers use ephemeral client-side ports when they query other DNS servers. However, this behavior may be modified with a specific registry setting that is described in the following article in the Microsoft Knowledge Base: Q260186 SendPort DNS Registry Key Does Not Work as Expected Alternatively, you can establish a trust through the Point-to-Point Tunneling Protocol (PPTP) compulsory tunnel, and this will limit the number of ports that the firewall will need to open. For PPTP, the following ports must be enabled: +-+ | Client Ports | Server Port | Protocol | +-+ | 1024-65535/TCP | 1723/TCP| PPTP | +-+ In addition, you would need to enable IP PROTOCOL 47 (GRE). Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=63417&t=63384 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: 10 half or 100 full [7:64482]
Hi Mike, What I'd recommend is to go to all Cat 5 ASAP. In the meantime set either 10full or 100full depending on the cable and NIC type. It is always better that Auto. JoeT Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=64491&t=64482 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Survived CCDP recertification! [7:65115]
Good Morning Priscilla, Congratulations. JoeT Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=65147&t=65115 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: CCSP / Safe Implementation [7:65657]
Hi Troy, Boson has a practice test for this exam. JoeT Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=65667&t=65657 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: PDM for PIX [7:69852]
Good Morning Kenan, You need to enter url: https://IP_Address. Also, you must have DES or 3DES licensed on the PIX. JoeT Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=69866&t=69852 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: CISCO PIX Exam [7:69920]
Good Morning Kailash, I just took the CSPFA 9E0-111 exam one week ago. The exam was awful. The passing score was high. There were a lot of questions. Although, I didn't have any time issues. Most of all the questions were irrevelant to the PIX. They didn't fit in with Cisco's outline of the exam. I studied Boson's (Bernard's) practice exam. I read Cisco Press's old exam certification guide. I read Cisco Press's new certification guide by Greg Bastien, and Christian Abera Degu. I went through the self study exams a number of times. I also setup our 515E PIX firewall at work. All of this to no avail. I will wait until June 17th and take the new 642-521 CSPFA exam. Also, I'd recommend the same for you. JoeT CCNP Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=69935&t=69920 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
3550 Capabilities [7:70080]
Team, I understand that the 3550 switches at wire speed. Also, it routes up to the Transport layer. What type of stand alone router could the intergrated router be compared to? Thank you, JoeT (MCSE, CCNP) Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=70080&t=70080 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: OT: New Website [7:70720]
Hi Dom, Nice Website. Thank you. JoeT Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=70737&t=70720 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
640-442 MCNS [7:60517]
Can anyone recommend quality practice tests for the 640-442 MCNS certification? Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=60517&t=60517 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Study Materials [7:60617]
Good Afternoon, I became a CCNP on December 20th, 2002. I had my best results with Cisco Press offical books. JoeT Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=60618&t=60617 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
MCNS Exam [7:61477]
Hi Ehsan, I tried to reply to your post, but the Database wouldn't let me. That exam is retired. It has been replaced by 640-100 MCNS. See http://cisco.com/en/US/learning/le3/le2/le37/le54/learning_certification_type_home.html. JoeT Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=61477&t=61477 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
640-100 MCNS Practice Tests [7:62018]
Hi Everybody, I'm almost finished reading Managing Cisco Network Security by Michael Wenstrom. I plan to take the 640-100 exam soon. Can anyone recommend some quality practice tests? Also, has anyone taken the new 640-100 exam? Thank you in advance. Joseph R. Taylor MCSE, CCNP Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=62018&t=62018 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Question for Sergey [7:62021]
Good Morning Sergey, Congrats on passing the exam. Was it the new Flash type exam where you actually enter commands? Also, what study reference did you use for the IOS 12.2 Security Guides. Someone in here asked me what passing score is required for this exam. Thank you, JoeT Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=62021&t=62021 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Richard A. Deal Books [7:62027]
Hi Everyone, I'm interested in knowing how good Richard A. Deal's books are. Especially in reference to MCNS. Thank you in advance. Joseph R. Taylor MCSE, CCNP Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=62027&t=62027 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
OT: SPAM Filtering [7:72265]
Team, Our company is being bothered by SPAM. We only have about fifty employees. I need to look into SPAM filtering. I don't know if we'd benefit from an hardware appliance along with a content filter. Perhaps, WebSense and applications of this nature would be good. I'd appreciate hearing from anyone that has working knowledge of these applications. Thank you, JoeT CCNP Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=72265&t=72265 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
CCxx Productions Recertification Exams [7:73032]
Hi Team, I'm trying to find out how good CCxx Productions would be for the CCNP recertification exam. Thank you, JoeT MCSE, CCNP Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=73032&t=73032 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
WIC-1T Serial WAN [7:73752]
Team, Are WIC-1T interfaces to be used between locations only useful when hooked up to an external CSU/DSU? If so what technology is the local loop? Thank you, JoeT MCSE, CCNP Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=73752&t=73752 -- **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
RE: Verizon DSL [7:73701]
Good Morning Bill, I use Verizon DSL in our NY and DC offices. I haven't had anything like that happen to me. Unless you made some changes to your network that are slowing you down you should call and ask for an explanation. JoeT MCSE, CCNP Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=73715&t=73701 -- **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Thank you m.m.jansen02@kpn.com [7:73657]
Martijn, Your response to the 2620XM WIC-1DSU-T1 cable pinout was very helpful. Thank you, JoeT MCSE, CCNP Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=73657&t=73657 -- **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
2620xm w/WIC-1DSU-T1 [7:73634]
Team, For my home lab I'm looking to hook a 2620xm directly to a 1721 through a WIC-1DSU-T1 interface. Can you tell me what type of cable to use. I beleive it is a Cat 5 cable with standard RJ45 ends. What is the pinout? Thank you, JoeT MCSE, CCNP Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=73634&t=73634 -- **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
RE: WIC-1T Serial WAN [7:73752]
Team, I understand now that my local loop is T1. My question was about the Telco's last mile I believe. Now I know that it can be T1, E1, 56k, or even DSL. Thank you, JoeT MCSE, CCNP Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=73758&t=73752 -- **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
RE: Downloading IOS to Flash [7:74278]
Hi Irfan, You aren't doing anything wrong. XModem acts this way. Use YModem instead. It will restart itself where it left off when interrupted. JoeT MCSE, CCNP Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=74279&t=74278 -- **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
RE: Cisco CIM cds... are they really worth it? [7:74375]
Good Morning, The Cisco CIM's give you useful commands and router and switching scenarios. Nothing compares to actually working on the equipment. CIM's and actual lab equipment is best. JoeT MCSE, CCNP Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=74399&t=74375 -- **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Back-to-Back ISDN WIC-1B-U [7:74420]
Team, Is it possible to configure back-to-back ISDN WIC-1B-U connections for a home lab setup? JoeT MCSE, CCNP Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=74420&t=74420 -- **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
RE: 2620XM vs. 1721 Routers [7:74727]
Hi John, What I've found is that you can't run an Enterprise IOS on the 1721. No IS-IS protocol. JoeT MCSE CCNP Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=74729&t=74727 -- **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
