Network Security

We have recently purchased some firewalls for a new environment that we configured to use in FIPS mode.  Because the firewalls are in FIPS mode, the only RADIUS authentication protocol they can use is CHAP/SHA-1.  We originally were having issues aut...

Hi,I got one problem in ACS report. I create the one favourites report. Then i insert 24415 User authentication against Active Directory failed since user account is locked out in Failure reason. then I click on edit favourites. After than i check ag...

Support Community, I've been trying to set up the following commands in my ASA5515 running ver. 9.125 for Duplicat TCP SYN Flood attacks. So I put in the default values that you find in the Cisco documentation but this didnt work for me to well. It s...

Hi All,I want to backup all the radius logs before upgrading of the ISE from 1.0.4 to 1.1.0. I have already took a back up of application data. From Gui under Monitoring Node-->full backup on demand1)Is that all for the radius logs?2)If I have upgrad...

Hi Folks,Working on deploying ACS 5.5 in a multi-site (5+) environment.  With groups going away, what is the best way to allow location based access?.  So far, I have the following - but it seems way overcomplicated. Each device is assigned a locatio...

Hi,after I put the right Username and Password in the first mask, immediately the second mask (below) appear...It seems the Cisco ASA 5505 is refusing my username or password without saying me anything!And I'm going to repeat mysef... the userneme an...

Hello, I have a Cisco 2921 in the network acting as a VPN server for remote access using Cisco VPN Client for employees. I have couple of questions on that. How do I find out how many users are allowed to access the VPN with current license?If I want...

Hello all, I have an asa and a web server behind it. I am able to connect to the webserver via http, however https does not work properly. Google chrome says it is "Waiting for proxy tunnel" and will not connect. I have exceptions in the ACL for http...

Hi all.I'm not new to firewall config but acutally is the first time I need to configure a PPPoE on a Cisco ASA.IP and def-route will be received via DHCP but I already know which IP will be assigned. I will have only 1 IP public IP address.The netwo...

Hi all,My customer is facing with the above error. He has done the following: Primary ASA showed Memory allocation Errors in the logs, in fact saving config was not possibleafter removing Basic Threat Detection config and adding it again saving confi...

Hello,We have an ASA firewall that now when connected to the serial console I can see stops booting at the line:  Cisco Systems ROMMON Version (1.0(12)13) #0: Thu Aug 28 15:55:27 PDT 2008 Is there anything that can be done to resolve the issue or is ...

Hi, I need help to connect to the Cisco PIX 515e. I cannot connect and go into the PIX Device Manager (PDM) 192.168.1.1/startup.htmlIs there any way to reset to factory default the device?I have the ipconfig /all configuration of my network. Any help...

Hi,I'm having an issue trying to open port 25 on our cisco ASA 5510 version 9.1 (2). When a wire tap is placed on the outside port between the ASA and the internet we are getting hits on wireshark, when a port 25 trace from http://www.yougetsignal.co...

Hello,I'm currently setting up a new ASA active/standby cluster, it will replace the current PIX cluster that is managed by another company.The plan is to shutdown the interfaces on the switches where the PIX boxes are connected and activate the swit...