Network Security

Hi All,Quick question - Does DNS doctoring only cover DNS replies?  I ask as a recent project has come up and it would be quite handy if the ASA intercepted dynamic updates (RFC2136 opcode 5?) and rewrote the IP before the update arrived at the DNS s...

Is it possible to do log monitoring based on below options on Cisco ASA:••1.       Source NAT ••2.       Destination IP••3.       Port based logs. If so, request you to please help with the screen shots. Customer is trying the same with ASDM 8.4.  (C...

Hi allHow to generate report in cisco asa

I've had this line 2 consective times in the log and then immediately afterwards the PIX cuts off the internet. Is it possible after so many denied ICMPs it does this? Is there some threshold the PIX reaches and then causing the internet traffic to s...

Hi All,having a very strange problem with a Cisco 1861 running - Cisco IOS Software, C1861 Software (C1861-ADVENTERPRISEK9-M), Version 12.4(24)T5The issue  -I have suddenly started to get performance issues with downloads and access through the ZBF. ...

HA Pair of 3355 CAMs, running 4.8.2 software (clean install, not upgraded from earlier version.)With temporary self-signed certificates, the HA pairing is successful (one CAM reports Ok/Active and peer Ok/Standby).  Thus, it doesn't seem like e.g., a...

i have an ASA 5520 8.4(1) setup as follows      public wan          |          |        ASA-- public dmz          |          |      private lani need to allow https traffic to a server in the DMZ that will have a routable IP addresswill just an ACL s...

Hi,I recently did an IPS-Installation and CSM-Integration at a customer, where I had the situation that I couldn't disable or modify some of the signatures via CSM. Specifically the problem occured with some signatures with signature-ids in the area ...

first:i read cisco document:http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a0080094a5a.shtml#newpptp client is in inside,pptp server is in outside.when i donot use firewall, the pptp connection can establish ...

Hye to you all,I am working on an ASA5520 with an intergrated IPS Module AIP-SSM-10. I am trying to configure the AIP-SSM-10 to communicate with the ASA5520(Cos ASA5520 is a blocking device) by typing the command: ssh host-key 42.90.224.206.but it do...

Hello Experts!I apologize if I am asking too simple question.I am puzzled with the online nmap remote scan result from our Cisco router. It shows as following:Not shown: 4996 closed portsPORT STATE SERVICE25/tcp filtered smtp1720/tcp filtered H.323/Q...

Hi,the  asa is not generating correct icmp unreachable packets for denied udp  connections, the packets will simply be droped (not rejected). For  denied tcp connections it sent a correct TCP reset packet. May it be possible to configure that correct...