Network Security

Hello!I have the following question:SSL certificates are going to expire soon on my NAC Mgr, Srv and NGS. So after I'll generate new CSRs will the existing certficates still be valid and used?All systems are in production, and I don't have any testin...

Gents:I believe I have a signature worked out for the nasty PHP-CGI bug.  (CVE-2012-1823)The vulnerability is executed by using arguments in the URL of PHP scripts.  (Example:  http://www.facebook.com/?-s     would show you the source code if it was ...

Im working on configureing an SSM40 on a 5520. I want all traffic entering and leaving the network to be scanned before being passed to the ASA. My question is when Im setting the sensor up under the traffic allocation tabdose selecting the Global po...

Given that I have same topology as shown in Internet Edge Cisco IPS Design Best Practices  and basically inserting 4270 Appliance into an INLINE mode. Core and Distribution Switch  = Layer-3 routed linksDistribution Switch and ASA = Layer-2 access po...

I have the following code on an ASA5500 pair with very down-level code. 7.1.2.Here is a snippet of the ruleset:interface GigabitEthernet0/1.40description Production Servers Networkvlan 40nameif Productionsecurity-level 40ip address 172.20.0.1 255.255...

After the Upgrade I have some trouble to setup my needed configuration. I have 2 active Interfaces:private 10.10.10.15/24public 176.xxx.xxx.15/24I want that the hosts inside the private LAN can reach the Internet and I'm using ASDM for configuration....

I have a site with a web server (192.168.1.10) needs 80 and 443.  Then I have a phone system (192.168.1.11) that needs tftp and rtp traffic (ports 10000-20000). finally I have a terminal server needing RDP 3389.  now I only have one external IP addre...

HelloWe have a setup with a MS-TMG - ASA (8.2.4(4) in routing mode) - (internal) Router - FWSM - Router - Exchange with NLB.  We have now the problem that IMAPS is not really working through this setup. It works from internal (without ASA and TMG inb...

Hi I am sending the informational log,specifically the message id302013 of cisco ASA to syslog server. I am only concern about the built in message created from outside to inside direction. Is it possible through configuration so that I can only rece...

Hi Experts,I built the network like attached diagram, and hoping it to work like this:the traffic coming from outside, which is VLAN 1, will pass through ASA and go to VLAN 100 and 254.Routing protocol between R0, ASA and R1 is OSPF.  The problem now...

HiI have enabled acl information log in cisco ASA.Now my question is why I am not getting both 302013 & 106100 mesages for every traffic. What I believe is that I should get two traffic details for every 1st  packet hits the ACL. Built in message3020...

                   Dear alli have a problem with ASA 5505 i have three vlans : Inside, Guest, Outsidethe Inside's vlan network is 172.16.100.0  255.255.252.0Guest                           is 192.168.1.0    255.255.252.0Outside                       ...

Hi Guys,I am currently getting DoS/DDoS on my asa 5520 , the attacker is hitting IP's that are not even open on any port. The attack is filling up the queues on the firewall which is at 99% CPU during the attack. here's the NetFlow info that I was ab...