Network Security

Hello all,I am looking for a document or link that explains the most common type of attacks (host, network) and methods to mitigate those attacks, using Cisco Routers, Switches, Firewalls and IDS.Thanks in advance,Mohan

I can't understand about the CA.(How to creat "ca.cer" , "server.cer" , "private.pvk")My ACS alway show fail "EAP-TLS or PEAP authentication failed during SSL handshake"I reference information is "Implementing Network Admission ControlPhase One Confi...

Can Cisco NIDS version 4.x do custom searches by looking within the data load and search for specific pieces of data (phone numbers, email address) and set off alerts?

Hello,I have a Pix :Inside : 192.168.2.1 255.255.255.0DMZ : 192.168.4.1 255.255.255.0Outside : 194.206.44.50 255.255.255.248In Inside there is my LAN 192.168.2.0In DMZ there is a Proxy HTTP 192.168.4.96In Outside there is a cisco router 194.206.44.49...

Can you, in any way, create an access-list that will first resolve domain names before processing?I don't think you can, but it would be nice if you could have the PIX (ASA) appliance cache DNS entries for name resolution, allowing you to create dyna...

How To Configure Your PIX To Accept Console??Thanks

I wasn't sure but is there any way to QOS certain traffic based on ports? I have a hub and spoke VPN topology [hub=2811router, spokes=pix[s]) I want to give higher priority to email and some other apps and less to internet based traffic that come ove...

Chaps,Need some advice on a VPN failure, my colleague claims this was due to the following incident int he log of a Cisco 1712 running IOSCisco IOS Software, C1700 Software (C1700-K9O3SY7-M), Version 12.3(7)T3, RELEASE SOFTWARE (fc2)Log message.%C170...

Hi,I was recently told that it is not possible to route traffic coming in via e.g. Eth1 out of Eth1 again to another router for example.I'm not convinced though, and was wondering if any of you know of a way to do it? It is some special command, a qu...

have download instructions, connected device to laptop with crossover cable, have tftp server running on laptop and unable to ping laptop to tftp file to device

I installed LMS 2.5 and tried to use RME to configure 3750 Metro.But RME seems can't recognize 3750 Metro. I also tried to search IDU on CCO but only IDU for LMS 2.2 found.Any one know how to fix this problem without new IDU availiable?

I have successfully set up VPN access to a PIX 501. I can connect and ping/login to machines via there LAN ip address. I would like to be able to have my VPN users "browse" the LAN. To make this more interesting I am able to browse one workgroup but ...

I have a PIX 520 in production, running 5.2(3) code. Don't ask. We tried the upgrade 6.x a couple times, and it failed. Getting windows is tough.Anyway, we're also running the old conduits. I need to add something, but all the examples I've seen only...

I have a VPN3005 concentrator at my main office and a PIX-501 at a remote office and I have configured an IPsec LAN-to-LAN connection. Both inside networks use a private addressing scheme and get NAT'ed. At the remote site I can send a ping to a devi...