Network Security

The title says it all.How do I block users from using the Tor network to bypass the firewall?All I'm able to find is that Tor uses port 9001 (TCP) by default but switches to any other open port (80,443,25,23,22, etc) when it's blocked.Blocking those ...

cisco ASA5550 Inbound TCP connection denied from 172.XX.XXX.2/3314 to 172.16.XX.XX/XXX flags SYN  on interface inside

I have 2 ASAs, a 5510 and a 5505 both are connected to a Cisco 892FSP Ethernet Switch. On the 5505 side, I have created an IPSec VPN from ASA to a Branch Office located on a different city (Cochabamba City) Via Internet. On the 5510 side, I have a ER...

Hey Guys, I have a question regarding reading Netflow info. I have a collector configured and it works perfectly fine. I noticed today that we saw a huge spike this morning for about 15 minutes, but the connection just shows from one ASA to another A...

Hi, Just a quick question if anybody has run into a bug where the ASAs "timeout" settings are not being applied to idle connections. It seems that our ASA running the software level 8.4(6)5 is not tearing down connections. This mainly seems to be a p...

Hyi face a [roblem regarding the NAT configuration when i gave command nat-controlits gives errorciscoasa(config)# nat-controlERROR: This syntax of nat command has been deprecated.Please refer to "help nat" command for more details. please resolve th...

hello guys,have you heard about the tor client.it allow you to use the internet with anonymous connection and it's really geopardising our internal security.do you know a way of stoping it?thank you.

Hello Group.   I am looking into to methods to block TOR network activity both inbound and outbound.   Outbound is pretty straightforward by utilizing IPS and AV signatures.   Inbound seems to be a little more involved.   Preventing inbound traffic r...

anybody has a policy or procedure to block TOR??

We have users that are bypassing our webfilter using the Tor Browser. Is there anyway to block this using an ASA5540                 

Hello,Unauthorized usages of misilinious applications like (Skype, Tor_Browsers.....) , is killing me.  I have tried alot to find a way to block these applications , but never i succeeded. Can any one guide me how to block such things on Cisco ASA & ...

After upgrading my CX from 9.2.1 to 9.3.2.1 I am seeing some weird options in the CX monitor and editing screens.  I am seeing:${navbar_compositecloud}, ${navbar_http_proxy}, ${PS_ID_PLCY_POLICY_ACTION}Also see a lot of this stuff when I try to edit ...

I am unable to telnet or ssh to a router from internet (LAN works fine). I see following in debug logs on the router*Jun  7 12:19:22: TCP0: state was LISTEN -> SYNRCVD [22 -> <Outside IP removed>(59121)] *Jun  7 12:19:22: TCP: tcb 85455EE8 connection...