Network Security

Hi All, whenever I turn on debug in ASA to start troubleshooting, it shows lots of output from access-list and connection teardown, and I can't see my debug output. how can I turn off those message to see debug output instead? any suggestion would be...

Hello,I am having issues with the IPS sensor not doing the global correlation updates. The IPS module has access to the internet and I can ping the server which serves the updates. Anything else to be checked?

hi,we have AIP-SSM-40 modeule installed on ASA 5540 but it is just physically present.Is it possible to configure to this modeule in inline or like IDS mode? It has only one Ethernet interface. Can this interface be treated as sensor interface and ma...

Hello,I have been provided a server in which I have installed Ciscoworks, which is running fine. I also wish to install IME on the same machine, so that our monitoring is running on a proper, ups-powered, server machine instead of a desktop.However I...

Hello all,I'm having a problem with NAC 4.6.1 and agent 4.6.2.113. If a client already has an older CAA installed they get prompted to upgrade and it works fine. However, if no agent is installed and you try to install it from the http page, it acts ...

greetingI have log:Sep 10 03:19:37 [10.4.3.20.2.2] %ASA-6-106015: Deny TCP (no connection) from 10.15.6.164/6389 to 10.4.27.102/4486 flags ACK on interface insideIs it any possible to open firewall to allow this traffic pass? I believe, it is defaul...

Sig 1307/0 TCP Window Variation is constantly firing on my IPS. The explanation mentions that some "improperly implemented" firewalls can cause this signature to fire. I have an ASA 5520 between my users and the internet and all internet traffic is...

Hi there,I know that with WLC 5.1 and NAC 4.5 Cisco started to support OOB, NAC implementation. Now here is my question:A customer has CISCO environment except for the wireless which is another vendor. What are the options to bring wireless traffic i...

Hi guysI thought you might be able to help me with some advice. I have a link between two locations and 3 IPSEC Vpn tunnels on it. I would like to share the bandwidth between those tunnels (lets say tunnel group1 gets 20Mb, tunnel group 2 is allowed ...

Gurus,Concept of object grouping is used in firewall to have the group of host/services involved in logically single rules instead of varied lines.Now it is seen that ACE uses only single line no. to define each object grouped rule until there is a c...

Hello, I am the admin for a small company, we host about 20 servers for development and internal applications, and 4 servers for web hosting and external application hosting for clients. I started here two years ago and when I started we had one ser...

The goal: To allow Clientless(portal) connections with only username/password authentication (LDAP in this case) while requiring two-factor (LDAP & Certificate) authentication for AnyConnect connections.The config: Since the auth methods are configur...