Other Security Subjects

Today we have been hit repetedly with a TCP connection window size RST DOS attack from a large range of IPs (Last time I looked in Mars it was showing around 2800 different IPs). Besides the normal mitigation responses that Mars has to block each IP...

Hi, an IIS returns tcp packet with source port 80. ASA 7.2(3) deny packets because connections have been closed, probably with RST flag from the client.Any idea ?thanks

Is there an easy way to move the configuration from one interface to another. I want to move "nameif dmz" from eth2 to eth3 and in the past once I removed or renamed the original interface the pix would remove or rename the config for that nameif. I...

I have an ASA5505 and have setup rip v2 on it. I have some downstream routers set up connected off one of the ASA switchportsASA(INSIDE)10.17.34.1 --- 10.17.34.10Gateway_rtr172.31.1.1 --- 172.31.1.2Router1 etcFrom the ASA i can ping any where but fro...

Dear Guysas i am having pix 525 with inside,outside,dmz,from inside i cant access or i cant ping to the dmz zone plz help me.!interface Ethernet0 nameif outside security-level 0 ip address 212.x.x.131 255.255.255.240 standby 212.x.x.132 !interface Et...

When telnet to my ASA 5510,it took the password I entered.But when typed "enable" to enterthe privilege mode, the ASA promptedfor a user name instead of a password. Then I entered "enable_15"with the known password, but the ASAdid not take it? Plea...

We are required by a Client to remove Split Tunneling and I cannot seem to find that information anywhere within the Cisco ASDM. Can someone direct me to that area? And also, by turning it off what all will be influenced by this?Thanks.

Dear guysright now we are having 80 servers and which are running diffrent application.this server are now going to be shifted behing firewalland for firewall configuration i want to now which port should i permit for this applicationquestionHow can ...

dear Guysis any body having ccsp complte lab with explation.or any body can help me for sites from where i can prepare for ccsp training and exam by my selfthanks

Hi all,when I should use EasyVPN configuration, or what is the difference between EasyVPN and Site-to-Site IPSEC VPN ?Thx in advance

Hello!!I just want to make sure of this...Is NAT-T enable for this IPSec session ?Below is the Output of the "show crypto isakmp sa detail nat" command...Can you tell me ? thx :) UACA-VPN#show crypto isakmp sa detail natCodes: C - IKE configuration ...

Hello allI have the following configuration but I'm not shure is this really supported on the IOS 12.3(24)I running on.ISP/Internet--Cable Modem--Router--LAN DHCP--|--192.168.1.0/24ISP provide dynamic assignet ip address by DHCP ...

I am buidling a second Lan-to-Lan tunnel on a 3005 concentrator. Pahse one appears to be sucessful but tunnel fails to complete with th4e following message:Tunnel Rejected: IKE peer does not match remote peer as defined in L2L policy IKE peer address...

I have two cisco 1841 internet routers running 12.3 adv security code .I have a anti virus server in the network which shows a welchia worm attack on the network from internet but is unable to block it.Pl suggest any access-list or any method b...