Network Security

We got the below alert when we ran the PCI scan on our VPN firewall (use it for remote access VPN), did anyone come across this?OpenSSL SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG Ciphersuite Disabled Cipher Issue Solution-Upgrade to OpenSSL 0.9.8j or la...

Up until recently one of my sites was able to get to a postini subnet. Then we started recieving "host unreachable" e-mails. Postini told us SMTP traffic was not getting let in. I've compared the current config to a config that was saved before the i...

Hi guys,What is the best practices when deploying the IOS Firewall feature on routers, especially on the 800 series routers?I know that a router will never be a true firewall but those features are there to make them simulate...Usually what I do is t...

I want to allow ICMP traffic on ASA 5510 from LAN interface to DMZ. I've permit any traffic and added ICMP to the inspestion list also but still there is problem. Belos is the configuration. The image is asa822-k8.bin:ASA Version 8.2(2)!hostname fw-0...

I have setup a DHCP relay on my asa, I can see the request being forwarded to the backend server however I keep getting log entries stating:"UDP request discareded from x.x.x.x/137 to inside:y.y.y.y/137"Are there any options that I need to define in ...

In the configuration tool (CCO) I have seen that pix 3DES option now is no charge (0 cost).At this time in an existing installation with DES is possible upgrade to 3DESwithout charge?Thanks and regards

Hello everybodyI have a problem where I have a network that passes fwsm to connect to another network where this other network has a route back to the same input interface.Look the attached imageServer NY needs to connect in Server MD, I did the conf...

A client has two ISPs and two ASA's.  They want to use FAST ISP most of the time and NOTSOFAST ISPis FAST ISP fails for some reason.  I found a great configuiration doument using the IP SLA which I haveused in the past in IOS.  I have setup ASA activ...

Hello,Our organization uses a Cisco cloud based firewall/ScanSafe for internet access/content filter.We moved away from the previous method of an ISA Firewall using pac files.In the old system we had AD security groups to grant access to the ISA.  Wi...

Hi Guys,          I'm having an issue with standing up a new C6509-E containing Dual SUP-2T 10G supervisor engines and both ACE30 load balancers and ASA service module (WS-SVC-ASA-SM1)On initial boot the Sup wouldn't recognise either of these cards (...

Hello All,I am having a problem with communication between two machines, i have put the packet capture and following is the output61: 09:09:25.821628 802.1Q vlan#726 P0 192.168.249.69.731 > 192.168.249.21.2052: S 2228708690:2228708690(0) win 5840 <ms...

Hello, I've got asa 5510 Using asdm 6.4And im trying to configure ssh port forwardingbasically, I've got an old firewall server that im replacing right now with the asa 5510but as of now, I still need to access the old firewall via ssh from outside t...

Hello,I'd like to create dhcp server pool on ASA 5510. I was wondering how big is the DHCP scope that Cisco ASA 5510 can support? Are there any ASA models which can support up to subnet mask \22 for DHCP scope? Thanks.

Hello,I've been reading http://www.cisco.com/en/US/docs/security/asa/asa72/command/reference/i3_72.html#wp1718159 but I'm still a little bit confused about ip audit on Cisco ASA. I'm not sure traffic is denied based on my ip audit configuration as re...