Network Security

Hi all,Does the Cisco NAC provide support for linux based devices?Context: We have 3G Routers dialing into a Corporate VPN to send telemetry, monitoring data etc and we need some kind of NAC that allows these devices onto the network, but any other d...

Let say I want to find which access-list is using ip address 10.10.10.10I start the searching by issue sh run | i 10.10.10.10ASA5520# sh run | i 10.10.10.10name 10.10.10.10 net-ABCThen I found  ip address 10.10.10.10 is mapped to net-ABCI run sh run ...

Ha con you help me.....OLD 8.2access-list inside_access_in extended permit tcp 10.27.0.0 255.255.0.0 host 192.168.104.157 object-group DM_INLINE_TCP_45static (inside,DMZ2) 10.27.0.0 10.27.0.0 netmask 255.255.0.0host 192.168.104.157 is behind DMZ2 int...

Hi all, I have 2 simple question.1. I was  wondering why Cisco ASA display TCP 80 as www in the firewall, not the  original port number, 80.ASA5520# sh run | i eq 80ASA5520# sh run | i eq www port-object eq www port-object eq www port-object eq wwwac...

We are using Akamai service for our E-commerce and therefore the true client IP addresses are not visible to our IPS, Akamai is forwarding the true client IP in a custom http header field (True-client-ip) , can we create a rule on our IPS to use this...

Hello,I want to limit the amount of bandwidth per user (down/up) with my asa 5520. Now i am using the following code and i wonder if it's the most efficient way of doing this:Policy-map IPS_outside class bandwidth-outside-class   police input 200000...

Hi,I'm new to cisco ASA 5505, I dunno why after i reset my firewall to the  factory default, then restart it... all my default factory setting gone... below are the command: config  factory-default after  it run through the process i type reload...

I hope this is enough information to answer these questions:Say I have a a mail server on the inside interface(10.1.10.1) and it is required to relay to a server on the DMZ interface (192.168.1.1).With the below config parameters is the following tru...

There are two ASA 5520.Is it possible to use HSRP on multi context each other?

We use CSM to push out IPS updates and we recieved this error when we tried to manually retrieve the IPS update from Cisco.com. I wonder if the CCO server is having issues again because this happened last month when it rejected requests for updates. ...