Network Security

Resolved! MS IE toStaticHTML String Parsing Cross-Site Scripting Vulnerability alarms

Hi, I was wondering if someone else has noted an increase in false positives concerning the following 2 events:- Microsoft Internet Explorer toStaticHTML String Parsing Cross-Site Scripting Vulnerability- Microsoft Office Excel Ghost Record Parsing ...

Resolved! asa log

Hi,Few questions on ASA:1. one of asa has logging enabled for warning & information message. logging enablelogging buffered warningslogging asdm informationalwhen asdm logs are seen, it shows normal teardown etc. for traffic. but sh log gives lot ...

Resolved! 3DES may be faster

Even though AES has theoretical advantage over 3DES for speed and efficiency in some hardware implementation 3DES may be faster where support for 3DES is mature.http://blogs.msdn.com/b/ace_team/archive/2007/09/07/aes-vs-3des-block-ciphers.aspxI have ...

Resolved! DPD and Keepalive??

Hi Friends,I am confused between DPD and Keepalive??How is working of PFS?Please help to share..

Definingaccess for several groups

We have ISA Server which is setup to restrict particular domain groups controlled access, three groups in all (basic-minimum, intermediate-normal and advanced-maximumIs there a way to replicate this setup on our ASA5510E.g. We have an Object group se...

ike command issue

when I do any changes on firewall, I get following error in logs,it gives me message that below parameters are not updated in firewallset ike ikev2 initiator-send-dummy-ipsecset ike ikev2 ike-sa-soft-lifetime set ike ikev2 stateless-cookie-threshold ...

Routing failed to locate next hop

Hi everybody, last week I had a problem into my network, now is working fine, but I want to know if you can help me to know what was the possible reason for that problem and which of my actions was the one who fixed the problem, and/or if it can pas...

DNS Issue after Upgrading FWSM from 2.3 to 4.1(3)

Hi,We recently upgraded our FWSM from version 2.3 to version 4.1, without the intermediate hop to a 3.x version first. We were advised by a Cisco representative that this intermediate upgrade to 3.x was no longer necessary.Overall, the upgrade appea...

Resolved! asdm error

I'm trying to enable the top ten services feature using asdm 6.34-53 and get the error in the attached graphic.I assume this means threat detection is not compatible with this feature? Is there a way to work around this?

Resolved! 8.3 site-to-site vpn config: advanced usage or blunder?

Hello,Recently I've been supporting a branch site ASA 5505 v 8.3 that has the following site to site vpn configuration details (the site is not meshed, just a single connection back to the hub site):access-list outside_1_cryptomap extended permit ip ...

Resolved! Inaccessible Links

There are various links posted by support personnel in the "Ask The Experts" discussion that I cannot access. A few examples:http://www.cisco.com/en/US/partner/docs/security/ips/7.0/configuration/guide/ime/ime_getting_started.html#wp1233087http://www...

IPS signatures

Can somebody help me to get brief information on the below signatures. DCERPC: Frag Length Overly Long-0x47600a00 TCP: ACK Host Sweep-0x40009c00NETBIOS-SS: Guest Login Succeeded-0x4070a500 NETBIOS-SS: NULL Credentials Login-0x4070a400 DCERPC: Spoolss...

exchange interfaces on Cisco ASA

Hi all,I have this configuration:interface Ethernet0/0 nameif outside security-level 0 ip address x.x.x.x 255.255.255.224 standby x.x.x.yinterface Ethernet0/2 nameif dmz security-level 95 ip address y.y.y.y 255.255.0.0 standby y.y.y.zEthernet0/0 is a...

ASA Configuration Examples

Hello Everyone,I have a ASA 5550.I need to configure three points:• Automatic Backup(if it exists).• Log shipping to a syslog server(it server can a Cisco Works version 3.2?).These points can help me?The configuration of sending logs to a syslog serv...

FWSM in Cisco 6500 - High CPU usage

Hi Guys,We have a Cisco Catalyst 6500 with a FWSM running V 4.0(6)We have noticed that when we apply new rules into the ACL (through ASDM or CLI) that after the ACL is applied,the CPU sits very high (90-100%) for up to 20 min.During this time, the ne...

Network Security

Forum Posts

Resolved! MS IE toStaticHTML String Parsing Cross-Site Scripting Vulnerability alarms

Resolved! asa log

Resolved! 3DES may be faster

Resolved! DPD and Keepalive??

Definingaccess for several groups

ike command issue

Routing failed to locate next hop

DNS Issue after Upgrading FWSM from 2.3 to 4.1(3)

Resolved! asdm error

Resolved! 8.3 site-to-site vpn config: advanced usage or blunder?

Resolved! Inaccessible Links

IPS signatures

exchange interfaces on Cisco ASA

ASA Configuration Examples

FWSM in Cisco 6500 - High CPU usage

On-Demand Webinar: B&M Security Transformation with Cisco XDR

Congratulations to the Event Top Contributors Class of 2024!

Knowledge Hub: Cisco Technology for Securing the Enterprise

Cisco + Splunk: It's a new day for your data.

Announcing Resources That Guide You to Success

Cisco IPS & Symantec ATP CAS - Oracle Java

FPR1010 File Permission error when copying

Question on S2S Tunnel to Azure using FTD or Azure Native S2S

Setting out TCP MSS on FTD only for non-ipsec endpoints

Cisco Stealthwatch ipfix exporter

Cisco 2130 FPR Upgrade

FTD issue with Anyconnect authenticating via AD

Windows Directory Rule on FMC

VPN failing to come up following migration..

FMC 7.6.0: MonetDB crashes