Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I have two 3650-24TD-S (IPBASE) running 3.7.4E(ED) and trying to get MACSEC switch to switch encryption running but i am not given the 'gcm-encrypt' option. Why????
sap pmk XXXXYYYYZZZZZ mode-list gcm-encrypt null no-encap
I am able to get the S...
Recently one of our customer was a victim of a DDOS attack. Unfortunately this attack maxed out our uplink to the internet. This was DNS amplification attack with spoofed ip addresses.At this particular location we use a cisco 6500, soon to be an ASR...
Hello experts, I am trying to setup ssh connection from outside link (interface Gi-0/0/0), but for some reason I am getting a SSH timeout message. Troubleshooting done so far:I can ping the ISR's public IP (X.X.X.39.166)ISR can ping the SSH initiator...
Hi,
I have two switch and they are 3850-24T-S and 3650-24TS-S. and i want to configure MACsec between their interface.
I have insert the below command both two switches,
Switch# configure terminal
Switch(config)# interface gi1/0/24
Switch(config-if)...
We have a small office and have recently installed a small NVR and 3 IP camera's to keep an eye on things. I'm a little concerned this system has access to our internal LAN and I can also access it remotely from an iPhone app right through our ASA to...
Hello,I run nessus (port scanner) for a Cisco 2811 router and I don't understand one vulnerability from the results.Here it is:The remote system appears vulnerable to an invalid Options fieldwithin a TCP packet. At least one vendor firewall (Symantec...
Hi respected members,I need your suggestions to get the following features from WAF (Web Application Firewall). I have no idea about that.which solution will provide these features.1) Bruteforce attack detection.2)Wrong password and username detectio...
I'm asking if there is a compatibility between cisco proxy Ironport S370 and the horizon 7 Virtual Desktop Infrastructure. As i know that VDI rely on User-ID instead of user IP Address. So how can Ironport deal with the VDI solution? What are the pr...
I have a cisco 2901 router and have a named access list allowing incoming ssh only from my ip addresses, blocking all others.
Here's the relavant config lines:
interface GigabitEthernet0/0
description WAN
ip address 70.x.x.x9 255.255.255.224
...
So I've been fighting with this all day. I've tried 3 different machines including a server.Basically when I try to access my ASA 5510 with the ASDM software the software never loads. So I have tried to access it through the management port https:/...
From the DNS flag day, how the network can prove that the issue is not caused from the network? Here are some results from the https://dnsflagday.net test tool: domain.com. @x:ea00:c010:188:103:x:188:99 (DNS3.DOMAIN.COM.): dns=ok edns=ok edns1=ok edn...
Hi, I had a few numbers of SG300-10 switches on hand. Recently my customer asked us to harden the switches. However, I did not manage to find any CIS Benchmark on CIS website / Google / etc. Thus I am wondering, does this switch require any form of h...
I have scanned my network and I am having a time trying to find the mitigations for these issues:SSH Weak Encryption Algorithms SupportedSSL/TLS: SSLv3 Protocol CBC Cipher Suites Information Disclosure Vulnerability (POODLE)SSL/TLS: Report Weak Ciphe...
Hi Buddy,May I know is there a way to get latest Cisco Global Price List? I know there is a need to have special CCO Account? If I do not have one, is there another alternative way to get it?Can someone PM me to share with me the idea? I need it quit...
