Network Security

Have an ASA running v8, trying to figure out how to block inbound Cisco VPN client traffic to the external interface and only allow 1 block of public IP's to initate the connection. I have created access lists blocking all inbound traffic on the exte...

I'm a beginner with IPS, but I'm confused with the terms packet and content filter, when I'm looking in some documents on the web they are talking about packet filtering; statefull packet filtering etc ..., I see also the term content filtering, what...

I have setup CSA for several users. One of the log messages we receive on many hosts is the UPNP port 1900 blocked messages. I would like to leave the rule itself alone so we can use it in other groups, so I created an exception. I set it up as a hig...

I am changing from VPN3000 to Cisco ASA but when i try to move the pre-shared keys for VPN-groups from Cisco VPN 3000 it contains the character ¤ which seems to be unsupported in Cisco ASA but supported in VPN3000, does anyone know? The ¤ is typed ...

In the last few weeks, we are seeing consistent high CPU on one of the IDS devices-- staying at 100% for hours. My question: what affect does this have on analysis? Will events begin to be dropped?

Every few months PIX stops passing outside traffic for HTTPS (443) port for Exchange server OWA ( internally it works just fine). When I look at xlate it shows 0 bytes and flags aB. I change rule to port 4343 and it works. After a few weeks I change ...

Hi I am abouto to establish a l2l tunnel with remote site. But they say that my local network 10.10.10.0/24 is already in use at their site, so they want me to NAT my local network and go through the tunnel. I have ASA 5540. I have just 3 hosts in he...

Hello,I've got 2 ASA 5520 on my network.The first ASA (Firewall 1) realize site to site VPN between Datacenter et remote office, and the second ASA (firewall 2)do exactly the same thing, for other remote office.As you can see on attachments, "Firewal...

Hi all,Is there a clever way to log e.g. enrollment requests coming in on an IOS ca server?What I'm trying to do is to get the embedded event manager to email a notification to the admin staff, when an enrollment request arrives at the ios ca server....

Has anyone seen this on 5.2?: I have a service restart rule that is only to be applied when the rule module it's associated with is in a system state of medium. However, when I set security to high, and then stop the service, the service restart rule...

Is the ASA pre-hardened? Any info about hardening this ASA?

We just started configuring ASAs for VPN access after years of using the PIX. One of the biggest changes that I have noticed for the Remote Client Access is the use of a pre-shared key. Is there a way to disable the pre-shared-key attribute under the...

IBM RSA's (Remote Supervisor Adapter) located in my DMZ successfully load up the front end page but perform poorly.The management pages load up but there is a significant time interval between clicking a link on the page and the RSA returning a respo...

One of my customers is experiencing a problem with voice calls being established through their Cisco ASA 5510 (ver 8.0.3)I haven't been able to get exact details of the phones they are using but I believe the gateway server is running SWYX. It appear...