Other Security Subjects

Hello, I just get a new 1812 router and i wanna try the full SSL client. I upgrade IOS to 12.4.9T1, get last SDM and last vpn ssl package. I follow the wizard on SDM to configure a simple webvpn on my outside network. I can connect to the portal with...

Has anyone out there using CCA experienced the following issue where a requirement is set (any selected rule succeeds(AV updates)) and the users pass one of the selected rules but is thrown into the temporary access mode. The rule they are passing is...

Hi,I notice in our organisation an access list which is allowing tcp and udp ports greater than 1.Why are ports (TCP and UDP) 0 and 1 used for. As I was reading on the internet i noticed that tcp port 1 is used for service multiplexing.So when 2 hos...

Can anyone tell me what I'm missing here? Trying to set up an ACL that will prohibit any LAN activity while allowing the users to do anything they want outside on the internet if they are accessing the wireless access point.Here's what I have right ...

If the events/SEC is UNKNOWN and I have all other info like: #Servers,#Desktops,#Network Devices, how do I size the proper MARS Solution?

Has anyone setup a Polycom V500 to be used behind their ASA5520?I came across a release note on their web site that lists the following ports:TCP1720, TCP 3230-3235, TCP 3603, TCP 389, UDP, 3230-3253, UDP 1718-1719.It also mentions that it works fine...

Has anyone had success doing this?i.e. changing the default web port from TCP/443 to something else?

Hi,I am facing a problem in configuring the CSC-SSM module of ASA 5510. I diverted the traffic to the module having plus license. Can someone help me out in solving the same??

hi, does anyone know the 7600 supported VTI ?fred

I can't figure it out, the tunnel drops every few minutes. Here is the debugging on the 515E.ISAKMP (0): retransmitting phase 2 (10/4)... mess_id 0xfaad7abcISAKMP (0): retransmitting phase 2 (4/5)... mess_id 0x6b130e85ISAKMP (0): deleting IPSEC SAs ...

Have 2 PIX535s each at remote sites configured for LAN-based failover. There is a VLAN("abc")designed for failover, but in that same VLAN are servers.My setup is as follows:PIX535 connects to a DMZ switch using 4 connections: the Inside intf & 3 othe...

I'm currently running CSA 5.1.0.88 agents, and scheduled an update to .91 for my servers. That night a couple servers were upgraded, but most were not. At the same time, it looks like they stopped polling completely. Restarting the CSA agent servi...

Hello,we have routers that work with certificates. We have problems with the auto-enroll when the certificates go to expire.?Can somebody help?I can send mor debug o configurations.We attach a debug.Very thanks