Network Security

Good day,Has anyone experienced this before?  I am using Cisco ACS 5.2.  I have a very simple word (no, not cisco ) for my tacacs-server key.  I've used the same key within the ACS and on two other Cisco switches, and AAA is working fine between the ...

I have searched the community but have been unable to find another discussion wth this issue, but if anyone knows of another please let me know with a link.We have a Cisco wireless infrastructure in place that includes a guest network with its own su...

Dear All,I am facing issue for SIP traffic through FWSM. I am receiving SIP traffic on outside interface but not sending to inside interface.Please find the config.Source      : 10.1.1.245Destination : 10.2.2.46Port        : UDP-5070Configuration:acc...

Hi I have two control point, two firewallthe second one is linked inside one DMZ from the first firewallroute is good and inside the DMZ from first firewall I have servers tooso  to be more clear we could call as IP for the DMZ from first firewall,  ...

Hi,Is it possible to do the two way(I mean both source and destination ) in cisco ASA firewall?RegardsMathew

We are in the process of implementing secondary ISP to our ASA firewall and I wondered if anyone else has configured something like this ??We would like to run both ISPs in parallel so we can test until we finally cutover Any help would be greatly ap...

to create a policy where you can define source destination and have any traffic matching that criteria to NOT generate a syslog entry? basically i have a particular legit traffic pattern where ANY to a particular public web server is generating tens ...

Syslogs generated by the ASA are showing a mixture of IP addresses and Names within syslog entries. I would prefer that all the syslog entries show just the IP address as it is easier for our syslog server to inteprete the data. I understand that thi...

Hello all,just trying to find out the pro's and con's of using a syslog scanning tool (like OAK) to monitor attempts to compromise (brute force) the access to cisco devices.Will a router/switch/ect. fail to send out syslog messages, while under attac...

Hello, does anyone know if the IPS can be updated to SSH 2? We have conducted scans on the IPS that fail OpenSSH X11 Port Forwarding Session and cannot find a command that will allow us to update to SSH 2. The vulnerability is CVE-2008-1483 and CVE-2...

I need top open ports 80, 443 and 1882 to a specific external client (IP address).  Can someone help me with the commands for that please?

Hi all,I have some issues with my ASA5505. The ASA is connected to an ADSL modem DLINK dsl-320B. The modem is configured as Half-bridge which means that the modem handle the PPPoA connection and pass the public IP from the ISP to the ASA. The ASA get...

Dear Cisco!We have network topology                         Inside Netwrok (172.168.1.0/27) --- ASA5510----- Outside network (192.168.10.0/24)ASA5510 have: Inside interface: 172.168.1.30/27; outside interface: 192.168.10.254And we config: # object ne...