I'm studying for the CCNA-Security exam 210-260 and I'm finding some inconsistencies in the material, especially on sample tests questionsThe one that I keep getting hung up on is which auth methods OSPF supports. One place says DES and MD5 while oth...
Forum Posts
Anyone know what this syslog message from the ASA means?
Resolved! sl_def_acl ?
Hi to all,Does anyone knows what is this access list (sl_def_acl) ?I've found it making a "sh accces-list" command on a 837 Cisco router (IOS Version 12.3(4)).It seems to be taken in consideration if applied with the inspection command.There is a way...
The configuration I am applying to my Cisco 2911 is not performing twice NAT correctly. I need to have the source and destination IP address on the inside interface NATTed before exiting the outside interface. The original destination address is no...
Resolved! CCNP Security - SISAS 300-208
p.137 of Aaron Woland's book, Fully Distributed Deployment"In the four-node deployment, the maximum number of PSNs that can be associated to the combined PAN+MNT is five PSNs, making it a seven-node deployment."If my understanding is correct, I woul...
Resolved! I need a fix for CVE-1999-0524
Vulnerability name: CVE-1999-0524Vulnerability scanner IDs: 10114Description: ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.Solution Name: ICMP Timestamp Request Remote Date DisclosureSolution Description: Fil...
My company is rebuilding the DMZ model, my subnet will be primarily due to the core level DHCP switch and the firewall asa I use primarily to give the internet subnet, nat and the route for the VPN network to see each other, but there is one thing A...
Hi, I am seeing some weird behavior on our proxy, which establish connection on port 444 . We have allowed this port only on transparent re-direction configuration but not in access policy. During my test i can see the connectivity is established to ...
How to contact Cisco Account Team and file a Product Enhancement Request (PER) for web server error_log support in CS-MARS
I've had the ASA-5506-X in place for a couple years now. 1 Failed earlier this year and replaced it using a backup configuration. Set this up with out issues. We use Comcast internet and our down is 75mps and up is 15mps. Never had any issues with sp...
so i have this school project and i want to implement Cisco security connector into there pads but i have the fallowing questions : i know it can integrate with vmware mdm but will there be any cost for this integration ? the school want to have a s...
Dears, i need to generate a CSR from a cisco router.once done, retreive this CSR from the router and give it to a company to sign it.once signed, install the new certificate on the router. kindly , if you can provide me a detailed step-by-step on how...
Can't establish IPv6 iBGP peering between two ASR9000 considering that similary configured IPv4 peering works.I tried to configure peering between loopbacks, neighbor's state keeps on "idle". Tried with linklocal adresses on physical interfaces, neig...
Resolved! permit IP single address
I have a guest vlan configured for 512 addresses. The I want to block all traffic to the 10.xx.xx.xx network except for the helper-address. How do I change the following to deny all traffic to the 10.xx.xx.xx netwrok except for the helper-address of...
