Other Security Subjects

we have enable aaa on the asa firewall question is is it possible to login to asa via console with local authentication and bypass aaa 

Hello, I wanted to know if I can use the free trial version of Cisco Umbrella at home on my Comcast Xfinity router? I have downloaded the trial version on my PC at home but I don't see support for Comcast router. My home router is not Cisco or Motoro...

Hello, Im trying to implement MacSec manual mode between 2Cisco 3850 I will explain the lab. PC connected to g1/0/1Switch 3850 connected to another switch 3850 in port 1/1/1 : configuration interface GigabitEthernet1/1/1 switchport access vlan 500 sw...

Hello everyone,  I had a question to ask! I am looking into a career direction into security and wanting to get my CCNA Security Certificate. I am working on my CCENT certificate. I don't have an IT background, so should I jump into security or just ...

I have two 3650-24TD-S (IPBASE) running 3.7.4E(ED) and trying to get MACSEC switch to switch encryption running but i am not given the 'gcm-encrypt' option.  Why????   sap pmk XXXXYYYYZZZZZ mode-list gcm-encrypt null no-encap   I am able to get the S...

Recently one of our customer was a victim of a DDOS attack. Unfortunately this attack maxed out our uplink to the internet. This was DNS amplification attack with spoofed ip addresses.At this particular location we use a cisco 6500, soon to be an ASR...

Hi, I have two switch and they are 3850-24T-S and 3650-24TS-S. and i  want to configure MACsec between their interface. I have insert the below command both two switches, Switch# configure terminal Switch(config)# interface gi1/0/24 Switch(config-if)...

We have a small office and have recently installed a small NVR and 3 IP camera's to keep an eye on things. I'm a little concerned this system has access to our internal LAN and I can also access it remotely from an iPhone app right through our ASA to...

Hello,I run nessus (port scanner) for a Cisco 2811 router and I don't understand one vulnerability from the results.Here it is:The remote system appears vulnerable to an invalid Options fieldwithin a TCP packet. At least one vendor firewall (Symantec...

Hi respected members,I need your suggestions to get the following features from WAF (Web Application Firewall). I have no idea about that.which solution will provide these features.1) Bruteforce attack detection.2)Wrong password and username detectio...

 I'm asking if there is a compatibility between cisco proxy Ironport S370 and the horizon 7 Virtual Desktop Infrastructure. As i know that VDI rely on User-ID instead of user IP Address. So how can Ironport deal with the VDI solution? What are the pr...

I have a cisco 2901 router and have a named access list allowing incoming ssh only from my ip addresses, blocking all others.   Here's the relavant config lines:     interface GigabitEthernet0/0 description WAN ip address 70.x.x.x9 255.255.255.224 ...

From the DNS flag day, how the network can prove that the issue is not caused from the network? Here are some results from the https://dnsflagday.net test tool: domain.com. @x:ea00:c010:188:103:x:188:99 (DNS3.DOMAIN.COM.): dns=ok edns=ok edns1=ok edn...