Network Security

Hey,I would like to know if ACL could filter specific packet type or unique packet id. How does it work? Let's say i have some captured packets, how do i filter some of them?For example: i want to stop Meterpreter to open a session. I've analyzed the...

I'm currently working on setting up 2 ASA 5510's with redundancy/failover. I'm not an expert when it comes to the ASA's so I'm not 100% sure if I can do what I need to.I have 2 inside networks that need to remain separate, a DMZ network,and an outsid...

Hello,This question is in the context of servers sitting in a colocation environment behind an ASA5510 with security plus license.Our colo provider is going to be statically routing a /28 public subnet to our ASA5510 (say 1.1.1.0/28).  We will also b...

At my last count there were 182 different "match protocol" statementsone could put in an inspection class-map.Some of these inspections are there only to allow you to filter on L7fields.  Some, FTP for example, must be in your class map or active-mod...

Hi allcustomer has ASA cluster pair which is running 8.2 (5) This firewall is participating in the OSPF process, and the affected interface are in the "Area 0". "Remote stations" are also a Cisco components (eg, WS-C3750-24TS-S with 12.2 (44) SE5, Wh...

HelloThree zones/interface are used on ASAInternet - security level 0Inside - security level 100 with ipsec configured for vpn clients DMZ - security level 100Traffic from Inside to Internet works fine without ACL.Traffic from DMZ to Internet works w...

ExpertsI have IDSM-2 on VSS that works in promiscuous mode and i want to configure the TCP rest interface and test it , my configuration is attached

I have an issue accessing ASDM. please be paient with me as i am quite new to this. It was working all fine yesterday until i was making some changes to the NAT rules and it just locked me out. not sure what i did wrong. It all seems to be working in...

We are getting vulnerability scanned by a PCI company and keep getting failures that state "OpenSSL SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG".  I've opened two TAC cases and TAC said that this vulnerability was addressed several versions back (we're c...

I am trying to troubleshoot an ASA550 connectivity issue. My initial tests are to ping the Internet router from the ASA This is failing and also a sh arp only shows internal addresses. Before I have to go to site to check this out can anybody confirm...

Hi all,I'm getting tons of alerts for the above signatures, all targeted at one server but from different IP Addresses.  They started in Germany, and now are coming from Texas.  We've checked the server and it's not vulnerable to the attack, plus the...