Network Security

gusy just want to check the DNS server attached to the firewall can i tried to telnet to port 53 on a roiuter just to see if the remote firewall alllows the conection.......telnet is tcp and DNS is udp based will it work thanks

Hi guys,I have to allow the ESMTP traffic from a defined IP address. I know that the following statement allows me to disable the inspection but I would do more, limiting the "no inspect esmtp" to a single IP address.conf tpolicy-map global_policy  c...

Hi,We have uprade our IPS 4270-20 appliances (10) to new version of 7.1.(4)E4, after upgrade we see that out of 4 CPUs, 3 CPUs shows are 100% (CPU 1, 3,4).However when we check the inspection load its less than 40-50%. Looks like this may be a bug bu...

I have a brand new out of the box ASA5505.  I can connect with https://192.168.1.1 and login with blank username/passwordFrom there I get a screen that tells me I can either- Install ASDM Launcher and run ASDM or- Install Java Web StartIf I choose th...

I've purchased a used ASA 5505 device.  Upon reseting and looking at the startup, I see that it is unable to retrieve Activation License and used default.  Activation License shows as all zeros.Is there a way to find whatever Activation License is ti...

Dear Friends,I have 3 ASA5520, 2 of them running as remote access VPN, 1 of the ASA as site to site VPN. There are 2 differentISP's which are used between them. Can I consolidate all these services in 1 ASA5520, relating to configuration andwhether t...

Hello guys.I want to sniff reverse telnet sessions, and see in the logs, if someone tried to break the device.That's really interesting what I found today. There is a few captures from wireshark.When we are using port 23 for telnet connection, everyt...

ASA 5505 Firmware 8.3(4), ADSM 6.4(2)Here is what I am trying to do...I have a public IP address of 168.87.3.4I need to forward ports (5060, 5080, etc.) to one internal address. (192168.1.1)I need to foward different ports (10020-10080) to a differen...

Hi Team,My asa-ssm-40 card is in unresponsive state. i know how to bring this card and the command would be hw-module module 1 reset.My query is, what could have gone wrong for the ssm card to go to unresponsive state... my version is 7.0.7E4        ...

I need to have the response from a server to reply to a second ASA.  We have a firewall for voice traffic, that only has a few routes pointing to it, the default route for the network is out another device.  This would be simple if I could change the...

Hi guys:I'm checking a Router which I installed the IOS firmware 593 and I'm receiving this message Dropping icmp session 10.x.x.x:0 189.x.x.x:0  due to  One of the interfaces not being cfged for zoning with ip ident 0Does anybody got this message be...