Network Security

Just curious if anyone know much about the best way to limit ICMP packets in IOS XR (ASR9001).  While with IOS it's recommended to use the Control Plane, it doesn't seem to be the option here. I do see that if I blocked ICMP all together I can limit ...

I want to setup an RDP link from the internet to a specific Server in my backbone. I have an ASA 5520.  What steps do I need to follow for this to work?ThanksDave

I have configured an ASA 5505 with version 9.2.1 from scratch. I have set up my internal network 10.1.1.0/24 on VLAN 1 and VLAN2 to get IP Add and route via DHCP. I also have set up pat to use the outside address so users can reach the internet. DHCP...

Good day all,We are experiencing challenges related to SCP copy between the servers. I have reviewed the configurations applied on our Firewalls and I'm not able to detect any abnormalties on the configuration applied.I'm not sure if increasing the M...

HelloI have an upstream switch, Nexus 9396, from our ASA 5585. The upstream switch terminates a 10Gb/s metro E connection for data replication and another 50Mb/s connection used for remote VPN users. How do I configure QoS on the outside interface of...

Hi!!I need to propose two ASA (Active-Active) for an edge MPLS Link (100Mbps). Actually, I have 3200 persons in the building.I was thinking in a ASA 5555-X  but I am not sure if this device is enough.Do you think is enough or I need a ASA 5585 SSP X?...

Hi there,I have a Cisco 5505 ASDM7.1 and cannot find an article on how to allow a connection from the outside world to a RDS Server I want to allow any connections to example remote desktop to 78.78.78.78:8888 and want it translated to 78.78.78.78 on...

Result of the command: "show resource usage"Resource               Current        Peak      Limit        Denied ContextSSH                          0           5          5            44 SystemSyslogs [rate]              77        1804        N/A    ...

 hi,i am a ccnp security student.I am studying disabling the global services portion.so now i learned to disable the ios small services. But my question is what is the use ofchargen service.i read that connect to the port and get a “random” amount of...

I've got a 5505 connected to Amazon VPC, and it works, but the VPN is flapping because replies to SLA monitor echos are being dropped by the ASA. I can see the echo-replys going out from my Amazon instance, but the SLA monitor never gets them. I can'...

Hi all,I want to upgrade a 5512 from K7 to K9 ios version. Is there any licence upgrade needed ?Regards,

 i am a CCNP security student I need to know what is: 1) Concurrent sessions2) Half-opened connections3)Half-closed connections