Network Security

I have two problems:1) Can't ssh to the router remote, this line in IP-SELF is supposed to be allowing that:  permit tcp host X.X.X.X any eq 222) Over a VPN Tunnel, can ping the router but can't telnet to it or SNMP to it, this is an ASA to the Route...

Hello, Our client ( a webhost, they have a lot of servers ) has a an older Cisco Pix, everything works fine with the PIX. They have a Cisco ASA 5500 with ASA version 8.3 , to replace the PIX. Upon migrating the PIX config to the ASA we are running in...

It is my understanding that ACLs can only be bound to logical interfaces using the access-group command. However, is it possible to somehow apply ACLs simply based on the ASA's local Ethernet interface? For instance, consider the following:Device A w...

To whom it may concern,Good day, I hope your week is going well.  I recently discovered that my IPS sensors are listening for and accepting telnet traffic.  I looked at the configuration in the CLI, and it is disabled; however, when looking at the li...

Hi,We've managed to get ourselves into a bind (no pun intended) with DNS TTL values.  A little history is required.We use a couple of service providers to run a couple of private intranets with one of the intranets getting some services from the othe...

I have a vendor trying to connect to one of my servers.  To this point, he's been able to connect using a specific port.  I created an entry in my access list -   access-list inbound permit tcp host xxx.xxx.xxx.xxx host 167.21.xxx.xxx eq 397.  He was...

Hello, from what i'm reading,  with ASA5520-5540 i cant have both at the same time... what is the right way of securing my network with both solutions? Do i put two 5520s "in-line" one with CSC-SSM and another one with AIP-SSM? Thanks!

Hi allI have a failover pair of ASA 5520 (Software Version 8.2(4)4) located in two different data centers.Because of a network issue the layer 2 connection between both locations has been interrupted for a couple of seconds and the ASAs went into spl...