Network Security

How do you usually store the backup config for your ASA/PIX config so that it's easily accessible, and yet it's secure enough? Do you simply save it to a network drive? Is there a better way to do it? I just like to know the best practice out there. ...

I SNMP walk (udp 161) to an AS/400 from one server behind a PIX515E and the return udp packet picks a random port between 5000 and 6000 and the PIX lets it back in OK w/o an ACL specifically allowing it. I SNMP walk (udp 161) to an AS/400 from anothe...

Hi all,Is it possible to restrict IP access to a defined list of dynamic VPN users?We have an external test site and I would like to limit VPN access to defined trusted locations only (ie our office). The users need to use their desktop VPN client in...

Hi,How do I get the real-time log viewer for the ASA to work. I'm using the ASDM at it never shows a thing, what do I need to check/enable to get this to work?Once it's working I'd like to be able to filter traffic.

Hi. I have a 5510 that I need to migrate a 515 config to. What do you suggest as the best way, manual or tool config migration? What are the syntax limitations of 6.x that I'll run into converting it to ASA friendly code?

I have a ASA 5505 that I am using as a VPN appliance. The outside interface is connected to the DMZ (172.16.2.10) and the inside to our internal network (10.27.1.12). VPN clients are assigned an address in the range 10.27.2.2-10.27.2.20. A 1841 is...

Hi,The topology as below:PC with AnyConnect on Internet ---- ASA Firewall ---- PIX FirewallSSL VPN between PC and ASA, L2L IPSec VPN between ASA and PIX.My question:Because PIX doesn't support AnyConnect, can ASA work as a Hub and user go direct to A...

How do you check which resources\networks is a specific Remote Access VPN account is allowed to access on the network?I am looking for the ASDM solution as well as CLI.Thanks.

Just started using ASDM6.1 and ASA8.0(4). Upgraded a 5505 from a previous version.I appear to have found a couple of bugs.In ASA8.0(4) to enable ssh as well as generating a key (crypto key generate rsa) it seems you have to enable SSH AAA Access (set...

The Anyconnect client has a Group, username and password field. Can password be modified to say Passcode. This is an issue because we use RSA passcodes as authentication. Thanks.

----------------------------------------------- ip-logBelow are the default values for iplog in AIP-SSM. Does it mean that iplog is inactive because ip-log-packets/bytes is '0', i.e. whichever value is reached first, the iplog stops. Please confirm...

Is there a cheap(or free) solution/software out there that can keep track of the firewall fule changes people make to the ASA/PIX? I want to know what changes have been made, who made the change and what time it happened. I believe the Cisco Security...