Other Security Subjects

I am using a pix 501 with IOS version 6.1.2 and I have "gold" users (who need to be able to navigate without any restriction. The access-lists are like these:access-list acl_in permit tcp host 192.168.0.70 anyaccess-list acl_in permit udp host 192.16...

How can I instruct a PIX firewall (v. 6.2) to get it's configuration from a TFTP server REBOOT?Thanks

When we reboot our PIX 515R (6.2) the startup text states the following warning:WARNING: Access-list protocol or port will not be usedI do not recall seeing this warning in the past, all Access-list entries have worked in the past. I have tsted the e...

Hi,does anybody know weather the pix firewall is able to filter on ftp <get> or <put> command. E.g. do not allow a <put> command in outgoing ftp connections. Or is this a typical function of a ftp proxy (cisco documentation points out that pix is not...

Hi,I found that there are more people having troubles with securid token and callback. But so far I did not see any solutions.The Problem.I haven configures ppp callback on a cisco 3640 with mica modems. Dialing in works fine untill the callback is i...

Hi,I am trying to setup a group of user's that will only be allowed to issue basic commands on network devices. Such as switches and routers. We currently have CiscoSecure ACS version 2.3(6) running with TACACS. Do I accomplish this via CiscoSec...

Will someone explain me the following two lines regarding the configuration of VPN Client 3.5 with 3 DES.! crypto map myclientmap client authentication list vpnusers crypto map myclientmap isakmp authorization list vpngroup ! Why should I MUST HAVE t...

Hi all I have problem with reports in CSPM 3.0 F I get following reports (Summary Report=>Event Summary,Detailed Report=>Detailed Report) and some basic reports.. (Administrator activity and etc) but i cant get Summary Report =>Network Traffic Summar...

I have installed a router running 12.2(8)T IOS to end IPSec tunnels from Cisco VPN clients.I've configured the router to authenticate the tunnel using MS CA certificates, but I cannot check the Certificate Revocation List (CRL) in order to know if th...

The problem's topology is :http://best.godcn.com/geniusccie/other/topology.gifProblem: Only one workstation can access US side 192.168.10.29 through a VPNtunnel, not support multiple workstations to connect to 192.168.10.29simultaneously.1.Firew...

Server is a Cisco VPN 3015, clients are using Cisco VPN Dialer version 3.5.1.I have a client that has a DSL connection using NAT sharing 1 external IP address. When one PC connects everything runs fine, when a second PC makes a coonection the first o...

Hi to all, I dont have ACS and any firewalls.Anywhere from the intranet can access all the commands in the router.I Configured the AAA using local database and created only 2 usernames.I want the other user shoult use only few commands in the user & ...

Can I use ACS2.6 to authenticates users on my LAN ? I know it works perfectly on Dial-Up but I'm having now additional users connected directly to the server but I'm not able to verify user IDs and passwords.Thanks

greetings,i have been given report that idle telnet session have been dropping out since i moved devices behind the PIX. Are there any issues i should be aware of in regards to PIX IOS v 6.1(1)Hardware PIX 515Is there a time out set for tcp sessions....

i am currently implementing a simple connection to isp. the isp assigns dynamic ip and i want to perform nat inside to 192.168... it is a peer to peer network. the router is a 1605r isdn with vers 11.1(5) ios. will i need to upgrade.many thanks