Other Security Subjects

Dear All we found during VA Testing on below cisco devices which says SSH Server CBC Mode Ciphers Enabled &  SSH Weak MAC Algorithms Enabled(CVE-2008-5161 )  Sr.Name Model NO IOS ver 1 4500 E cat4500e-entservicesk9-mz.150-2.SG8.bin 2 WS-C37...

Hello Community,  I've been reading the Cisco Umbrella WLAN Integration Guide, all DNS queries seems to be send to the Cloud, my doubt here is: What happen with local DNS Resolution for internal services? We would like to protect internet access with...

Hey,I was working on PTZ camera and while assigning static ip to the camera, i think i mistakenly provided the wrong ip address according to the switch to which the camera is connected. I will be  in a lot of trouble if the situation is not handled. ...

I am in the testing phase of the AnyConnect client. The network access manager will not start. In the system tray console, i see "service unavailable" for network:.When i try to start the nam service it says "the operation could not be completed. Acc...

Hi all,I have one issue related to configure tacacs+ on cisco ASA 920 version 15.6 and i found some command not foundaaa new-modelaaa authentication login default group tacacs+ local tacacs-server host 10.10.80.111 timeout 5tacacs-server directed-req...

I have an 891FW that is missing the self signed certificate ( IOS-Self-Sig#1.cer).  I have tried generating a new certificate.  I have enabled http secure-server, I have generated a new key pair, and I saved the configuration to nvram.  However, when...

We are planning on enabling ipv6 First Hop Security. We are considering following options- SISF  based device tracking- RA Guard- IPv6 DHCP Guard a. Are these sufficient for access switches? Is there anything else we should considering SISF is compre...

Windows 7 System unable to RDP . Network disconnection error happens at the time of local session manager. Cisco any connect is installed in the system, Can anyone say, the solution ?

Hello,I was watching several L2 attacks like:MAC flooding attacks/CAM table overflowARP Spoofing/PoisoningOther Security Subjects,DHCP Server SpoofingMAC address spoofingSome of them can be mitigated with por example Port security others by DHCP snoo...

I have recently installed both IDS and CSPM on an IDC site. I observed the following integration problem between the two.First I generate the policy through CSPM and apply it on the Policy Enforcement Points(PEP). With specific to gateway routers, a ...

i have a CPE router (Cisco LSR 4000 series)and i will be configure it, i also have a firewall that sits after the CPE that will handle everything the CPE will be only connecting my network to the ISP  my question is do i have to do anything related t...