Network Security

Hello,I see that with threat-detection enabled and configured, I can use the "threat-detection scanning-threat shun duration [time in seconds]" to shun IPs that are scanning for open ports.Is there a way to shun syn-attacks that I have a threshold se...

Trying to setup dynamic access policy to restrict some users from being able to get on VPN. Our default policy allows everybody on VPN, we just need to exclude a small number of contractors. I created an AD group called NoVPN & put a new test user in...

Hi I have a question on management of ASA confifigured with ASA failover. I dont understand why the management ips on both ASA need to be on the same subnet and why management configuration should be part of the configuration synchronization between ...

I have a requirement to use a prefix list on an ASA (8.4.3) to redistribute selected static routes into OSPF.  I can do this on ASDM but when CSM (4.2) discovers the policies it identifies the prefix-list as an unsupported feature.  Then when I come ...

Hi, please  help  me to  resolve  the issue.  i have  created  a DMZ  Zone   Network  with  public  IP Addresses.i have  created   Identity   nat  for  DMZ  Network  access the internet.  The  server  in the DMZ  Is  accessable  from  Internet.To  ac...

Hi Cisco Expert, Is there a signature that can detect sniffing of clear text data like password.E.g sniffing on HTTP and FTP applications. Regards,Jhun

I want to capture a copy of my running config on my 5510 ASA v8.4(1).  I know I can do this in the ASDM - tools-backup conf- but my question is can I do this backup on my ASA that is in production without causing issues or interruptions to my product...

Hello all,  about to go through a penetration test and was wondering if there was a checklist of things to do to tighten down an ASA as much as possible.  Something like 1) turn off this service 2) Set this to that.  etc.  I know every environment is...

 Been pasting config from old 5520 - 8.4(7) to 5545 - 9.1(1) and some commands are not takinf. Could anyone give me some insight as to why? There  are more but I thought I would start with these.Thank you*****crypto ca trustpoint ASDM_TrustPoint5 enr...

Hi,I use L3 switch 3560G with vLan to connect machines from several sites.(L2)    (L3)     (L3)    (L3)xx11--->xx01<--->yy01<-->zz01e.g.xx01----interface GigabitEthernet0/21 spanning-tree portfast trunk           <--to yy01!interface Vlan1 ip address...

I have this toplogy: A ------ ASA -------- B A's real IP is 1.1.1.1B's real IP is 2.2.2.2B's mapped IP is 3.3.3.3 How do I NAT it so that when A tries to connect to 3.3.3.3, the destination is translated to 2.2.2.2.  But at the same time, when B conn...

Hi,I have a 5550 working in routed mode with 8.0(4) version. My configuration have one physical interface in tunnel mode with 4 subinterface, 3 of them are inside and the forth one is dmz interface. Another phisical interface is configured as Outside...

Hi!Have anyone tried to run ASDM 6.1(5) and ASDM-IDM Launcher 1.5(50) on a windows server 2008 r2? Currently the computer is running windows XP and I want to upgrade to a server.. /Lajja