Network Security

-----update-----i guess the client is just doing what it is suppose to do when you have a routing loop and the client is getting a syn instead of a syn-ackcase closed -----------I have a recently created FWSM context. Currently i have a rule says."an...

I just had a customer ask me a question which I couldn't answer. Can any of the 8 switch ports on the ASA 5505 firewall be set up as a mirror (analyzer) port so they can plug in an Ethereal/Wireshark laptop and watch traffic?(I didn't think so, but m...

Greeting everyone!I have a problem configuring an ASA 5510 for our client network. The idea is to protect the core (192.168.20.0/25 network) from the following:-(1) A broadband connection with a static IP (59.94.30.38), whose sole purpose is to make ...

We're in a semi-managed environment, and I don't have an internet-facing router. Normally, I would grab bandwidth usage stats from the WAN port of a router via SNMP/MRTG. Unfortunately, the router is owned by the hosting company, and we rely on their...

Hi, i wanna ask if the vpn client could establish remote access without user authentication, only group name and password.I wanna bypass user authentication for particular group so the users only input group name and pass to establish the vpn.I see t...

Hi,What I am trying to do is authenticate internal users going out to the internet thru a PIX running latest IOS 8.02. Basically the PIX should intercept the new outbound session and redirect the user to a web server where they are prompted for useri...

As I Can Block out ports Of chat software SKYPE.. I have a 505 PIX Cisco

The telnet and enable password on my PIX are not working. They were changed and the lines in the config read:password <password> encrypted. andenable password <password> encryupted.The password listed is the password that was typed in only it is in c...

I get teh following syslog message *only* on one VPN connection that is trying to be created from inside to a customers vpn concentrator on the outside via out ASA. Have several other ipsec vpn's that work just fine, there is always one isn't there.L...

Hi there,Is it possible to access a server located at the DMZ using its public IP address (static nat), from a server in the same DMZ or another station in another network interface (inside or management)? Will that be possible in the ASA? My custome...

I have a lot of fales positives of signature 5894 ("Storm Worm") in Subsignature 0 - especialy from host "static.ak.studivz.net". The signatur definition is just looking for "Server: ngin" in HTTP downloads which is realy unspecific in my point of vi...

When I try to initiate a vpn with ping of telnet xxxxx port xxx then the VPN tunnel doesn?t get established. If I use an application that uses the same port then it works.

We are starting to implement the CSA. One concern is the log file size on the workstation. Is there a way to limit the size of the log on the agent without manual purge or is there an auto purge feature build in the CSA agent? If there isn't how peop...

This is a tough and intermittent issue. Users vpn into the network using Cisco client version 4.6, sometimes cannot access e-mail (Outlook)or browse, ping the network. This usually occurs when the user is coming in on a wireless connection and is not...