Network Security

Gurus,Concept of object grouping is used in firewall to have the group of host/services involved in logically single rules instead of varied lines.Now it is seen that ACE uses only single line no. to define each object grouped rule until there is a c...

Hello, I am the admin for a small company, we host about 20 servers for development and internal applications, and 4 servers for web hosting and external application hosting for clients. I started here two years ago and when I started we had one serv...

The goal: To allow Clientless(portal) connections with only username/password authentication (LDAP in this case) while requiring two-factor (LDAP & Certificate) authentication for AnyConnect connections.The config: Since the auth methods are configur...

Hi,I have never tried this before. I TFTP the ASA's config to my TFTP server via the ASDM - File > Save running config to TFTP server.How do I restore this back to the ASA should I need to. Normally I don't save to flash and if there is an issue I re...

What does mean term xlate?Thank you!

Hello,I have a VPN that will connect using one of 3 public IP addresses, is it possibel to setup a VPN like this? Normally I setup VPN's with a peer having a single static IP not a pool of IP's?Thanks

I'm currently running 6.3(5) on our PIX and am having some issues with a L2L VPN with a Juniper device. I've worked with both CTAC and JTAC to make sure the settings are correct on both ends. CTAC recommends that I upgrade the PIX to 7.2 and I was wo...

Does anyone know if the issue detailed in the following article applies to the ASA? I'm currently running 8.0(4) and have some developers claiming issues and pointing their fingers at my firewall.http://blogs.telerik.com/hristodeshev/posts/07-06-24/f...

Hi,I have a business requirement spelled out below. I would like to know if this is achievable by using Cisco ASA 5520 Multiple Context.1. 2 different ISP - ISP1 & ISP22. Internally there are 2 ZONES - ZONE1 & ZONE23. ZONE1 to access internet via ISP...

Hello,I am studying for the IPS exam and I was reading about the "Resource Exhaustion attacks" that be accomplished thought a DoS attack and it mention the Stick and Snoot tool.I'd like to know more info about this and where can I get it for testing....

Hello. We've recently outsourced a large IT project to a very well known solutions provider. The infrastructure is being hosted at their facility, with about 40 servers, segregated into different security zones using an FWSM in a 6500 (our original d...

HelloHas anyone got a working procedure for changing the EXEC & privilege EXEC passwords on an ASA?I was thinking of logging on (using the old account), deleting the current details, applying the new account details - then, open a second ssh session ...