Network Security

Hello All,I was just curious if SSH v1 is considered vulnerable why is it still enabled by default on the ASA 8.4 by default?What is the vulnerability impact of using SSH v1 on an ASA?Thanks!

We are in the first stages of migrating to a new data center and have hit a bit of a roadblock with DNS Doctoring. We have been using it for years without trouble at our old site with almost no config. Any help things I might be overlooking would be ...

Hello folks,Just a few questions. We are looking to deploying Cisco ASA 5545 into a network. I have a couple of issues with designing the network correctly. We need to be able to scale out to more hosts than a single VLAN, we would also be considerin...

Cisco 891-K9 router, very basic config, minimal firewall in place.I keep getting warnings in the log:Dropping TCP Segment:xxxx is out-of-order... Reason:TCP reassembly queue overflow....I have increased the size of the ooo queue etc. as follows (incr...

Hello. We have a ASA5510 and I need to open port 22 for a speacific IP in our LAN outbound only. How do I do that? Thanks.                  

We have an ASA at a remote location that gets a dynamic address through a DSL connection. We just put a camera system out there, and the owner wants to be able to see the video inside or outside this facility from his phone. We have configured the dy...

Hi,I want to ssh to my asa from internet.for it iahve done some configuration, but my asa is not pinging from internet.Below is my ASA's show runPlease help me..Regards,Milan Verma-------------------------------------------------------------RBN-ASA-0...

Thank you in advance.I have an application on a server in our DMZ that I want to restrict access to only allow it to send http request to www.google.com/recaptcha/api/verify.  I have been playing around with regular expressions and Inpect Maps, but s...

In Cisco ASA we can configure IP address from Supersubnet pool on two different VLAN as below.If you check 10.231.23.145 is IP address of Supersubnet of 10.231.23.128/27. Can any one know why this is allowed on Cisco ASA and same thing is not allowed...

Hi,I have few question about FWSM configuration and best practices. 1. I have internal and external networks on both sides of FWSM. All the VLANs/IP/Ports that need to be filtered on both inside and outside are remote for FWSM and are only learned vi...

Hi there,I have an ASA 5520 with a DMZ with private addresses that I SNAT to my outside network. From inside the DMZ I can reach servers by both the internal private IP and the public IP, except if the IP is from the server trying to connect.So, say ...