Network Security

Folks, If the customer does not want to enable http or https on it's routers and switches, how can i manage them using CSM, What functionality will i loose if I only used SSH.Also what ports should I open of the devices are behing a firewall?

Hi folk, I have a PIX 525 firewall which is working completely weird. The device is running the PIX Appliance software 8.0(4) and the problem is that some hosts from the inside can reach a server in the DMZ and others can't despite the static NAT fro...

Hi, I am trying to prevent DDoS / SYN flood attacks on an ASA5505 (simplest version, DMZ restricted license). The ASA is in front of a Web server with approximately 2500 unique visits a day. only port 80 and 53tcp/udp are openOnce or twice a day I se...

I wonder if there is a normal situation.When I enter "show resource-mamangemnt" at FWSM, I got the following log: A-FWSM-Active# sh resource usage system counter all 0Resource Current Peak Limit Denied ContextTelnet 4 5 5 1 SystemSSH 0 0 5 0 SystemPD...

Greetings, We are using Anyconnect 2.3.0254 client + SBL/gina and are looking to customize the client even further to prevent user from Disconnecting from the VPN tunnel. Basically we have remote users that come in on EVDO using Verizon VZaccess Mana...

I have an AIP-SSM on a 5510. I'd like to pull events via SDEE. How do I go about setting this up? I have read some docs to just add host to the allowed hosts list, and setup a readonly account.

Hi I am getting the following error message on the FWSM module:Router# hw-module module 9 reset cf:1Device BOOT variable for reset = cf:1Warning:Device list is not verified.I am not able to find any information with regards to this, I take it that th...

I have an AIP-SSM on a 5510. I'd like to pull events via SDEE. How do I go about setting this up? I have read some docs to just add host to the allowed hosts list, and setup a readonly account.

Is there anyway to log successful and failed connection logs for Anyconnect SSL connections?

I have a pix 515E and I am trying to get the ftp server accessile from the outside. I already have an ftp server that is working without any problems but the new ftp server is not accessible from the outside. my access list is:access-list OUTSIDE1-IN...

Can ASA's be configured in Active/Passive mode when the statelink goes through a switch?

Hi,We have configured 1800 ISR to access internet using and NAT ( actually PAT ) and overload feature.SImple mode fa0/0 is inside interface and fa0/1 is outside interface. We need to apply ip inspect and enable IOS firewall as a security feature.How ...

Hi i have dedicated server which has cisco pix hardware firewall installed.for some reasons my dedicated server is unable to connect to any of domain hosted on the server however it successfully connects to websites outside our server like google.com...