Network Security

i created VPN termination on ASA and it is worked properly.when i add another exempt nat rule(nat0) for another IP through ASDM it doesn't work.

What is the best way to identify that a specific signature has fired on IDS/IPS 6.x that is feeding into a CS-MARS appliance?Would the easiest way to match "ANY" for Event Type and then do a keyword match? If so, what is it matching on, the signature...

Hi, We have installed ASA 5505 Firewall and the Application and DB Servers are hosted behind the Firewall and port 80 opened wordwide and everything is working fine and the ASA is connected with other remote Sites via IP-Sec Tunnel. We have a public ...

Hi, Can the CSC-SSM module be configured via CLI. Or only GUI can be used. Also is there any detailed configuration/Administration guide for CSC-SSM other than the document named "ASA: Send Network Traffic from the ASA to theCSC-SSM Configuration Exa...

I have a Pix 501 that is for management devices. The Pix is 10.100.0.1 and devices are in the same C class. These devices can ping any IP address I want yahoo.com, google.com etc. however can't resolve by NAME only IP. IE ping www.yahoo.com. If they ...

Hello all,I was just curious if anyone else has had many false positives with 3 signatures in particular: TCP Hijack (3250.0 - High), TCP Hijack Simplex Mode (3251.0 - High), and TCP Segment Overwrite (1300.0 - High). The reason I think they are fals...

Hi, Is it possible to access the CSC-SSM module via the ASA backplane after assigning the IP to the management ports of ASA and CSC-SSM. Or is it required that both the management ports are physically connected to the network and the communication be...

Hi,I have a doubt with respect to Trunking in ASA 5520. Is the below possible:-Two sub interfaces in one vlanint g0/1.1switchport access vlan2int g0/1.2switchport access vlan2interface vlan 2nameif blahip 1.1.1.1 255.255.255.0sec 20no shinterface g0/...

Hello,I'd like to add a DNS Suffix to the hostname of my CSA-MC. But the CSA software doesn't notice and carry on with only the hostname and not the FQDN. It means, the Agent where there's no DNS suffix configured can't reach the CSA-MC.Is there a wa...

Is there a way to block logmein on the ASA?

Hi Security gurus,I was trying CBAC in 2691 router in Dynamips.I created some telnet connections through the router configured with ACLs & 'inspect' statments then looked at output of "show ip inspect session detail" command.It tells me which ACL was...

How do you usually store the backup config for your ASA/PIX config so that it's easily accessible, and yet it's secure enough? Do you simply save it to a network drive? Is there a better way to do it? I just like to know the best practice out there. ...

I SNMP walk (udp 161) to an AS/400 from one server behind a PIX515E and the return udp packet picks a random port between 5000 and 6000 and the PIX lets it back in OK w/o an ACL specifically allowing it. I SNMP walk (udp 161) to an AS/400 from anothe...

Hi all,Is it possible to restrict IP access to a defined list of dynamic VPN users?We have an external test site and I would like to limit VPN access to defined trusted locations only (ie our office). The users need to use their desktop VPN client in...