Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hello All,I'm using certificates for authentication. My question is under the "crypto ca certificate map group 10" configuration I would like to use a logical OR so that multiple subjects can be evaluated? i.e. If subject-name attr john.doe or subje...
An Apple host can not transmit smtp. Error in logs are "PCTime: %FW-3-SMTP_INVALID_COMMAND: Invalid SMTP command (x80dx01x03x01x00Kx00x00x00)(total 102 chars) from initiator (192.168.1.x:54495)"The email server is ESMTP, ip inspect ESMTP is turned o...
Hello All,I am running an ASA w/AIP. What I would like to do is block all url request for .php except for 1 url. The engine being used for the custom signature is service-http.I have tried ([^(allow.site)][A-Za-z][0-9])*\x2E([Pp\x50\x70][Hh\x48\x68...
Thank you for the response, my question was more in the configuration of multible subject under one mapping. I ended up opening a ticket and just received a response which indicates multiple subjects can not exist under a certificate map as na "OR" ...
Thanks for the response. I assume you mean change the outbound port of the client? My interim solution was to remove the port 25 from the smtp port map and create a custom port for 25. The smtp monitoring was reduced to tcp inspection. I'll give ...
Thank you for your comments. The SR I have is not to address the intensity of the signature it is another issue, but I will pursue further with a SR. Thanks again.
edadios,Thanks for the suggestions. I did upgrade from signatures 280 to 287. The traffic is a webport, in fact it is a custom variable as the amount of ports configured in web ports weren't necessary. I also followed your suggestion in trimming d...
