Network Security

I am watching a CBT Nugget that is explaining DH key exchange and its leaving me confused.I thought that each end uses their own private key with the other ends public key to computer the "shared secret" key and therefore does not need to then encryp...

I got this message when trying to session in the fwsm. Any ideas?Router#session slot 4 processor 1The default escape character is Ctrl-^, then x.You can also type 'exit' at the remote prompt to end the sessionTrying 127.0.0.41 ... % Destination unrea...

Hi,I have a customer with many remote sites using either ASA5505 or a PIX-506. There is IPSEC tunnel to each remote site from the hub site. The remote site doesn't have a server. The goal is send syslog and traps to the server located at main site.Th...

We have purchased Cisco IPS 4240 sensor, installed the license and that device is communicating with other computers in the network. The version installed is IPS 6.1(1)E1. Please can you answer me below questions.1) Please can you provide me the Docu...

I have a cisco asa 5505 that is setup as the ssh server. I am able to access it without any problem.Once connected to the ASA 5505, I would like to telnet to my old terminal server 2509 that doesn't support ssh.How to telnet a device FROM cisco asa 5...

Hi ,Can we limit the number of users login to the VPN?eg. The group-policy A has 50 accounts configured in a Radius server. But we only allow 20 accounts/users login to the VPN concurrently.Any way to achieve the above request?Thanks & Regards,

Hi,I have a Cisco ASA 5520 with a few VLAN's (DMZ's).Under every Interface I have added the ICMP any any rule and tracerts work fine from the VLAN's (which are on a 3750 trunked of the ASA) to the inside interface and visa versa.The only tracerts I c...

Hi Friends, I'm new with Cisco ASA/PIX, in fact i'm new in networking, when i'm triyng send this line to the PIX i get this message error, when i try to creane a nat in the inside with the access list no-nat ERROR: access-list has protocol or port

Have a remote site that is changing ISPs, I need to change the outside interface IP Address / Subnet Mask and the ASAs default gateway, how can I change all three remotely at the same time?

Hi ,We are using pix 515E with IOS version 6.3 3 with the serial failover From the PIX we have established a VPN to our head office which as the two ISP connected in this condition we already have VPN but in case of the primary ISP down we have failo...

I passed a PCI security scan from our vendor a couple weeks ago but this morning I got an email that we are now failing. the Failure is listed as:"It was possible to make the remote server crash using the 'nestea' attack. An attacker may use this fla...

Hi,I have an issue with my ASA where if i point a default route from the WAN router to the firewall i get incomplete arp records on the router and i cant get to anything behind the firewall. But if i put the specific statics in to the subnets behind ...