Network Security

In IKE phase-1 we will share the following parameters:-1. authentication method used to authenticate peers2.Encryption method(DES/3DES to be used for Phase-2 data encryption)3. Hash algoritham to be used for Phase-1 and 2 Then why it is mentioned tha...

Is there any document which shows the steps which happens in case of Aggressive mode of establishing Phase-1 SA since there are only 3 messages exchaged in case of aggressive mode and how the identityof each peer is protected from unauthorized peers.

Hi,I Have a doubt, I have the csa agent blocked with the function "Base - CSA Service and client UI control" (disable), but I cant stop the agent in the host, the command -net stop csagent- works in this case, or I need first enable the "Base - CSA S...

Hello everyone,I am aware that this question has been asked in several formats before. I have read through some of the previous postings and the documentation as well. However, since I am new to this, I thought it best to submit a new posting.I have ...

I have an ASA running version 8 software.I am looking for a way to manage url-lists from the command line. All the documentation online only shows that they can be managed from the GUI or by importing a file that already exists. As well, when I turn ...

Are any of the Cisco 5500 series firewalls currently certified by ICSA?I searched the ICSA website and could only find a reference to older PIX firewalls once being certified in the past, but the certification expired over a year ago.

Hi.I load CSM, I click 'deploy' and up pops some IPS devices. How can I examine what changes will be made when I deploy them and/or how can I undo these change to get them out of the deploy list.

Hi,We use following version of PIX Security appliance and have ACL configured on it.Cisco PIX Security Appliance Software Version 7.0(6)Device Manager Version 5.0(6)We use text file as source keys for any changes made to the configuration of the fire...

Greetings, i have the following setup.Cisco ASA 5510Outside Address: xxx.xxx.xxx.xxxInside Address 172.16.2.1Cisco 3750 IP Address 172.16.2.2Behind the 3750 i have multiple networks that i cant reach when connected via a remote access vpn connection,...

Hi,I have a Cisco 877 which I use for work. I now have an Xbox 360 and I need to add a few NAT's and permits to my access lists to allow the Xbox to work properly over the Internet, simple home routers just need UPnP enable, I found this article whic...

Anyone has any hints or tips to share about v2 to v4 upgrade? or upgrades to v4 in general?We plan to just boot into the backup partition cf:5, setup basic network and then copy the fwsm code and current config over and reboot.Appreciate any helpful ...

Hi experts,My customer wants to allow messaging just for certain users IP and block it for anybody else. His configuration is something like the following:class-map match-all msn match protocol imap match access-group name Permited_MSNip access-list ...

Hi all,We want to completely block access to our proxy server for clients that are connected to the VPN. Simply modifying the proxy settings may not be completely effective based on our testing. Currently our setup is as follows -Users VPN into DMZ. ...

Our users currently connect with cisco's vpn client.however some have vista 64 bit and need to use any connectmy initial concern is thisWe use the outside interface address to manage the device via ASDMhowever, if users were to put that sameaddress v...