Network Security

Hi,Admins are no longer able to initiate FTP from the Inside network to the same servers at the Outside network, once upgraded FWSM from 1.x to 4.0.x.FTP inspection in the policy map is there, as you know it is the default config.Appreciate your expe...

Hi,we have bought the CSC modules few years back and now the licence has been expired few months back. we used the CSC for only a month when we bought just to test these and after that they are left without doing anything and expires. Now we would li...

I wanted to download the CNA from the Cisco website until I ran into a few licensing agreements.Am I allowed to download the software for free? It mentioned Cisco might charge me for using the software?I do not own any equipment however I am in the C...

Hello all,I have a VPN with a vendor, but he's using the same inside networks that I am, and he apparently can't NAT on his side so I'm trying to setup dynamic NAT for his incoming and outgoing traffic on the tunnel.This is the config I've come up wi...

                  Hello All,                              I am trying to create a access-list that allows traffic from a source ip to a global destination Natted address on my firewall. The problem is the sending company does not know what port they ...

Hi All,My company only allows few protocol outbound to internet like http and https. we are not currently allowing the FTP outbound. My question is that is the FTP protocol outbound access has some flaws or any security vulnerabilities inside it? Is ...

Hi AllI Wondering if any ones has complete block traffic with encrypted Torrents.When torrents is not encrypted NBAR is recognizes torrents traffic and is easy to block them , in other way when the client torrent (like utorrent) is enabled the encryp...

Hello all,Does anybody have info when will Cisco implement Zone Based Firewall for IPv6 protocol in Cisco IOS routers?Thank you and kind regards, Marko

I have been looking at spke to spoke comms or "hairpining" for months and have posted on numerouse forums but to no avail.I have a Hub and spoke network where the HUB is an ASA Firewall version 8.2I basicaly want to allow 2 spokes to be able to commu...

Please clarify for me the exact meaning of In-band and Out-Of-Band as it applies to CAS/CAM to get a user authenticated/validated; specifically mentioning the relevance of "trusted network", "untrusted network", "'virtual gateway" etc. so I can get a...

Hi,Can anyone post the exact URL for nessus plugins for NAC 4.7.2?R/g

Hi,I'm confident that I'm missing a major concept here for which I'd need a bit of assistance with.The setup I'm playing with is as simple than the below:PIX Version 6.3(5)interface ethernet0 autointerface ethernet1 100fullnameif ethernet0 AP securit...

HiI need to completely disable consol port on all Cisco products for some security reasoncan anyone tell me how can i done this ?