Other Security Subjects

I have a EZVPN configuration on a router. One interface is the inside interface and the WAN interface bieng the outside interface. But I also want to encrypt syslog packets generated locally by this router. Currently these packets are bieng dropped o...

This is kind of an odd request but I am looking for a webcast that featured the CSMARS device. I first saw it around september of this year. It also had a device called ThinJin or something phonetically thinjohn. I am looking for this video to sho...

Can i edit access-lists on the FWSM without having to delete the entire access-list?I have remark statements in the existing access-list and looking to edit just one remark group?Thanks.

My customer is doing static IPs but is running out of available IP addresses. He wants to utilize a FWSM in a C6513 that is not being used and configure it for NAT to allow more IP addresses - but doesn't want to change his other static IPs. Can th...

Hi all, I am having a bit of trouble understanding the reasoning behind L2TP/IPSec. I understand that L2TP is not a very secure protocol which is why it is a good idea to encapsulate it in an IPSec tunnel, however, in that case why not just use IPSec...

Hi,Let's suppose that we have the following crypto map policy on a PIX firewall:crypto map VPN-CRYPTO-MAP 10 match address L2L-TUNNEL-01crypto map VPN-CRYPTO-MAP 10 set peer 1.1.1.1crypto map VPN-CRYPTO-MAP 10 set transform-set ESP-3DES-MD5crypto map...

Hi,I configured a few voice routers that are directly exposed on Internet. They have access-lists that denies all the sip and h.323 traffic. When I'm scanning the router for example with nmap (syn scan) I get message that the port is open (administra...

Hi,We run CSA v4.5.1 on all our servers and desktops. We also run Sophos Anti-virus agent. Recently we upgraded to the latest version of Sophos (7.0.4) but noticed that it wasn't installing correctly. Further investigation confirmed that CSA was prev...

Hi,I have a customer that has run a nessus vulnerability scan, and it reports that there is a dos risk on his 3750, even though the nessus report relates to winterm thin clients.Quote:It was possible to crash the remote host by sending a specially cr...

HiCan someone tell me if it's possible to migrate to a DMVPN phase 3 with 831 as spokes routers ?Does the 831 support phase 3 and all the new feature of this phase ?Thank you very much

Hi,I would like to know how to block certain PCs from the network using the mac address.Any help please?Dom.

Hi,Would anyone know what the impact might be on a DMVPN if I were to rename/recreate the internal IOS CA Server hostname and trustpoint? I assume I would have to re-create the RSA certs and trustpoint from scratch. And then, I'd have to go to each...

Hi,I have a DMVPN with RSA certs (and an internal IOS CA Server on a router) that have been up for many months, however, recently, the spoke certs have started expiring. Since auto-renew is enabled, I granted the "pending" certs on the CA server but...