Network Security

hi,is there a default value for tcp connection time out on ASA? I have turned off tcp timeout on my ASA, but I still have stiration the idle connection between client and server (2h idle) are droped (oracle server send ACK with RST flag)

Hi,Any suggestion about how to correctly monitor HTTP Traffic from a certain host ?I just received a request to log, for a specific period of time, http traffic from a host on the inside network to internet and to generate a sort of human readable ou...

I was wondering if I can do an active/active setup and still use Remote Access IPSEC VPN's with two ASA 5550's. I hear that you can't but if that is true are there any workarounds? I don't care if the VPN tunnels don't failover, I just want it so t...

Ok, here's my situation, mind you i'm extremely new to Cisco router/firewalls. I have a internal device that generates a vpn tunnel to a remote location. However I have a ASA 5510 as my firewall. How do I configure the ASA 5510 to allow the VPN tr...

I'm using IOS (c3845-advipservicesk9-mz.124-15.T3) zone-based firewall on a 3845 router and when I enable logging on an extended access list (permit ip any any log) that I have applied to a class-map, I get the following message:"class-map my_cl_map ...

I am trying to clean up some items on my network, and I noticed this under my realtime log viewer. A IP address 10.10.10.158 (old Citrix Web interface server) has been turned off for 3 months, and I'm seeing this packet transfered every 3-5 seconds ...

Greetings, Guys, I'm using CCA v4.5 and I'm having a hard time updating it's Rules/Lists/Policies for Clean Access. I've arranged that the CAM has connectivity to WAN-Internet so it can download the updates but after running the process this is wha...

Hi All,I have an issue with the NAC WEB Agent in vista machines.I have configured a guest role for the guests. When I take control of a guest machine with XP everything works fine(the login page, guest authentication,NAC web agent download & install,...

I was wondering if there is a setting on the ASA that will prevent the AnyConnect client from saving and displaying the username that was last used to create a VPN connection. I was originally going to force the end user to re-install the AnyConnect ...

I have this:access-list incoming permit tcp any host 2.35.43.84 eq 3389access-group incoming in interface outsidestatic (inside,outside) 2.35.43.84 192.168.1.11 netmask 255.255.255.255 0 0192.168.1.11 is up and running and accepting RDP sessions, but...

Please can someone explain how many interfaces a 5510 can use and with what license. I have seen conflicting documents with regards to the number of interfaces that can be enabled on the ASA 5510

Hi all, i have this problem when starting my ASDM Launcher application. Any suggestion?"ASDM is unable to read the configuration form the ASA. Please check the configuration and your connection and then try again by clicking the Refresh icon."ASDM V...

I have a pix 515 that was running IOS 6.3 and I just upgraded it to the 7.24 IOS. I followed the steps from the Cisco web and during step 2. where you send the .bin file to flash, I get a "host not found" error. I have done everything I can to get it...

HI allI have an AIP-SSM on a ASA where all traffic is directed to it.I have a WEB Server connected to the DMZ zone and users connect to it on a secure connection (HTTPS)So my question is, if someone do a Brute Force Attack to authenticate itself, doe...