Network Security

Hello,I'd like to add a DNS Suffix to the hostname of my CSA-MC. But the CSA software doesn't notice and carry on with only the hostname and not the FQDN. It means, the Agent where there's no DNS suffix configured can't reach the CSA-MC.Is there a wa...

Is there a way to block logmein on the ASA?

Hi Security gurus,I was trying CBAC in 2691 router in Dynamips.I created some telnet connections through the router configured with ACLs & 'inspect' statments then looked at output of "show ip inspect session detail" command.It tells me which ACL was...

How do you usually store the backup config for your ASA/PIX config so that it's easily accessible, and yet it's secure enough? Do you simply save it to a network drive? Is there a better way to do it? I just like to know the best practice out there. ...

I SNMP walk (udp 161) to an AS/400 from one server behind a PIX515E and the return udp packet picks a random port between 5000 and 6000 and the PIX lets it back in OK w/o an ACL specifically allowing it. I SNMP walk (udp 161) to an AS/400 from anothe...

Hi all,Is it possible to restrict IP access to a defined list of dynamic VPN users?We have an external test site and I would like to limit VPN access to defined trusted locations only (ie our office). The users need to use their desktop VPN client in...

Hi,How do I get the real-time log viewer for the ASA to work. I'm using the ASDM at it never shows a thing, what do I need to check/enable to get this to work?Once it's working I'd like to be able to filter traffic.

Hi. I have a 5510 that I need to migrate a 515 config to. What do you suggest as the best way, manual or tool config migration? What are the syntax limitations of 6.x that I'll run into converting it to ASA friendly code?

I have a ASA 5505 that I am using as a VPN appliance. The outside interface is connected to the DMZ (172.16.2.10) and the inside to our internal network (10.27.1.12). VPN clients are assigned an address in the range 10.27.2.2-10.27.2.20. A 1841 is th...

Hi,The topology as below:PC with AnyConnect on Internet ---- ASA Firewall ---- PIX FirewallSSL VPN between PC and ASA, L2L IPSec VPN between ASA and PIX.My question:Because PIX doesn't support AnyConnect, can ASA work as a Hub and user go direct to A...

How do you check which resources\networks is a specific Remote Access VPN account is allowed to access on the network?I am looking for the ASDM solution as well as CLI.Thanks.

Just started using ASDM6.1 and ASA8.0(4). Upgraded a 5505 from a previous version.I appear to have found a couple of bugs.In ASA8.0(4) to enable ssh as well as generating a key (crypto key generate rsa) it seems you have to enable SSH AAA Access (set...