Network Security

Hey, for a while I'd see packets from an IP and assume it was http. But I found some IP's that give us traffic but they are not making any logs in my access.log (so probably not http). What way can I filter my logs or using CLI diagnoze what ports th...

Hi,The device I'm implimenting static NAT on in this instance is an FWSM running 3.1I want to know, if I static NAT a subnet as opposed to a host, and I want to impliment connection limiting and embryonic connection limiting, will the connection numb...

Hi,Moving from VPN Concentrator to ASA for Remote Access.I tested the following configuration but no luck, user accounts are created on ACS and cannot get authenticated.... I am missing something still....==========Remote-Access-Config=======ip local...

Which command on IDSM is used to check if the device is running on inline or promiscous mode?

Hi,I have been searching a lot, and I don't find any good explanation about how the clean access agent report works. I experienced that not all agent activity will be reported. Sometimes it showed up report about the "passed" and "failed" agent, but ...

We are planning to upgrade from 8.0(3) to 8.0(4). Are the any bugs in the new release? pls give your inputs..

I have a PIX-515 running v6.35 with remote VPN users connecting by pptp to the outside interface, so I use the "vpdn group" commands. For my users to get an ip address, this line does it:vpdn group PPTP-VPDN-GROUP client configuration address local ...

I have hits on a BO2K-UDP signature. I looked up the ip address on Arin and it is from a company that we would probably do business with. Using nmap, I fingerprinted the remote server and it appears to be a standard MS Web/Mail server.How do I tell...

How does this work?http://www.cisco.com/en/US/docs/security/asa/asa72/release/notes/asarn72.html#wp84471The examples that I have show very simplistic configurations using private IP addressing and if were to have a standby ISP, how can I route the pu...

I have been getting more than a few of the following message on the ASDM console. What could this be? "inbound UDP" does that mean coming from Outside, with a private IP? Both source and Destination IP do not exit in our network. TIA"2 Aug 19 2008 20...

Hey guys,Just checking my PIX logs and I keep getting this alert "Aug 21 2008 09:37:15: %PIX-2-106016: Deny IP spoof from (127.0.0.??) to 108.122.0.0 on interface dmz"The last octet of the 127 address changes and it's to the same destination. Just wo...

I'm using IP SLA Monitor with a default ICMP Jitter operation to an ASA interface, but the firewall does not respond.How can I enable a reply to a timestamp request message?Thanks.