Network Security

Resolved! pix fixup protocol

Hi,I only have experience with ASAs and only recent code at that. I have a PIX506 running 6.3(4) that I will replace with an ASA.Can please tell me what these fixup statements do (do they just turn a protocol on)?fixup protocol dns maximum-length 102...

Resolved! smtp filtering problems

Hi,Everytime I turn on esmtp filtering for a client using Exchange Server, things end up getting blocked and it never logs anything it blocks.Here's my map.policy-map type inspect esmtp secure_smtp_map parameters no mask-banner special-character ac...

NAC CANNOT GET UPDATES from CISCO SERVER

/* Style Definitions */ table.MsoNormalTable {mso-style-name:"Table Normal"; mso-tstyle-rowband-size:0; mso-tstyle-colband-size:0; mso-style-noshow:yes; mso-style-priority:99; mso-style-qformat:yes; mso-style-parent:""; mso-padding-alt:0in 5...

Routing Efficiency on Sub-interfaces

I am building a Extranet with16 internal VLANs that need be routed on my ASA5520 in a HA configuration. After the external and failover interfaces I have two interfaces remaining to for my 16 VLANs. What I would like to know is what is the most eff...

Qos on ASA 5580 & 5505

hiwe are having 2 (site 1, site 2)sites connected through VPN which is configured on ASA. On one side we have asa 5580(site 1) on other side asa 5505(site 2). Both the sites got ip phones installed .Site 1 has 2Mb bandwidth & site 2 has 512 Kb bandwi...

Opening a port on asa version 831

I am trying to open rdp port on my asa 5510 version 831 but i can't get it to work. Below are the commands i am using. I would like to use static one to one nat. Can someone please tell me what is missing?object-group network servers network-object h...

Resolved! IME includes old JRE and MySQL versions with known vulnerabilities?

Cisco IME experts, I just installed IME, and noticed that it includes an old 2009-vintage MySQL version that has known security vulnerabilities. It also uses a private JRE version that is fairly old (1.6u7, IIRC). I would like to use IME, but I...

Access list is not logging

I have an ACL with a rule set to log debuging. However, even though I'm seeing hits on the rule, nothing is showing up in the log.Thoughts?Thanks.

Open a port on asa 5500

I am trying to open port 4899 on my asa 5500 firewall. i am very much a novice with cisco equipment can anyone help me? i am using asa version 7.2 and asdm version 5.2

Resolved! Accessing ASA firewall on its outside interface from the router using telnet/ssh

Hi!I have been trying to access the ASA firewall on its outside interface by telneting from the router.I have used the following command on the ASA:telnet 10.0.0.1 255.255.255.255 outsidewhere 10.0.0.1 is the ip address of the router LAN interface.I ...

Resolved! Two Subnets to the Internet, VPN/Servers In, Clients Out...

So we have two Public Subnets to the internet. I have them both Terminated on the ASA5510. Subnet 10.1.0.0 Hosts Servers and VPN end Points Subnet 10.2.0.0 Is the Public Address space I want to use for Clients inside the firewall.So I setup e...

IPS on a Stick

Hi All,Could any one give a brief explanation on the concept of "IPS on a Stick", am not getting a clear picture with the docs... Thanks in advance...

VSS-FWSM - Reverse traffice is getting blocked for some servers

Hi, I have set up VSS with FWSM which make our collapsed core distibution layer. The FWSM consists of two contexts namely internal and external. The set up is working fine with some issues to particular segments in internal context, Interna...

Cisco PIX / ASA and DNSSEC problem approaching on May 5th?

So by default all Cisco PIX / ASA configs have something along these lines...policy-map type inspect dns migrated_dns_map_1parametersmessage-length maximum 512policy-map global_policyclass inspection_defaultinspect dns migrated_dns_map_1 <-- DNS insp...

FWSM 3.1 - Enable Password Length

Does anyone know the minimum and maximum enable password lengths? and the commands to set it on a FWSM Context ?Thanks

Network Security

Forum Posts

Resolved! pix fixup protocol

Resolved! smtp filtering problems

NAC CANNOT GET UPDATES from CISCO SERVER

Routing Efficiency on Sub-interfaces

Qos on ASA 5580 & 5505

Opening a port on asa version 831

Resolved! IME includes old JRE and MySQL versions with known vulnerabilities?

Access list is not logging

Open a port on asa 5500

Resolved! Accessing ASA firewall on its outside interface from the router using telnet/ssh

Resolved! Two Subnets to the Internet, VPN/Servers In, Clients Out...

IPS on a Stick

VSS-FWSM - Reverse traffice is getting blocked for some servers

Cisco PIX / ASA and DNSSEC problem approaching on May 5th?

FWSM 3.1 - Enable Password Length

Firepower Management Center Backup SSH Keypair

Router CGR 2010 Blocks IPs Automatically

FTD HA was "no failover" and "failover"

Prefilter Fastpath Rule for IP Range Not Fully Excluding Traffic

CSCwq47299

Implementing Remote Access VPN in Secure Firewall in Evaluation Mode

FTD API on FMC managed device

Cisco ASA V9.18.4.68 Release Notes

Change Cipher Suites

Migrate MultiContext ASA 5545 with failover to ASA 1140 (in multicont)