Network Security

Hi,I want to creat sub int on ASA 5505but when I am trying below command it show error.------------------------------------config tint f0/0.3400------------------------------------My ASA software version is 8.2(5).Please share the command for configu...

Hi ,Wanted to know whether QoS enabled traffic passes unchanged through ASA which has multimode enabled or it is changed/dropped. It is clear that an ASA doesn't support QoS configuration while operating on multimode, but the query is regarding the Q...

Hi,I'm trying to determine whether Cisco has any equivalent (in any platform) to some of the existing firewall rules within our iptables infrastructure. Specifically these ones:-A FORWARD -i eth0 -p tcp -m tcp --dport 3389 -m state --state NEW -m rec...

Guys, I need some clarification here. I have already asked couple TAC guys but they either did not know the answer right away or they wanted to send me to another team who might answer it...I have a single router. One LAN, one WAN. It is an 800 serie...

We are setting up a new phone system using the UC540 with a VPN connection between 2 buildings using 2 Cisco ASA 5505's at either end.The problem I am having is getting the phones at the remote site to connect to the UC540 at the main site. Phones/Co...

Well I thought I had zone-based firewall figured out for using SSH to manage routers, but apparently not Put simply, when I try to SSH from one router to another, my SSH session gets through the firewall but cannot come back, due to the firewall . I...

Hello All,I was just curious if SSH v1 is considered vulnerable why is it still enabled by default on the ASA 8.4 by default?What is the vulnerability impact of using SSH v1 on an ASA?Thanks!

We are in the first stages of migrating to a new data center and have hit a bit of a roadblock with DNS Doctoring. We have been using it for years without trouble at our old site with almost no config. Any help things I might be overlooking would be ...

Hello folks,Just a few questions. We are looking to deploying Cisco ASA 5545 into a network. I have a couple of issues with designing the network correctly. We need to be able to scale out to more hosts than a single VLAN, we would also be considerin...

Cisco 891-K9 router, very basic config, minimal firewall in place.I keep getting warnings in the log:Dropping TCP Segment:xxxx is out-of-order... Reason:TCP reassembly queue overflow....I have increased the size of the ooo queue etc. as follows (incr...

Hello. We have a ASA5510 and I need to open port 22 for a speacific IP in our LAN outbound only. How do I do that? Thanks.                  

We have an ASA at a remote location that gets a dynamic address through a DSL connection. We just put a camera system out there, and the owner wants to be able to see the video inside or outside this facility from his phone. We have configured the dy...