Other Security Subjects

All,I've got an interesting situation, although I can't imagine it's unique.  We have 2 ISP's coming into a location terminating on 2 ASA's.One ASA is translating a /28 to a few internal web/ftp/miscellaneous hosts (basically our public IP presence f...

What are the Details about Cisco MACSEC Manual ?How often are the keys changed ?What are the "Late pkts 9736" in the "show macsec interface" command output ?Why are sometimes BPDUs not processed (Loopguard messages) ?switch-005#show macsec interface ...

Hi,if I need to change the section where I posted, please tell me where to post it.I have bought 2 new ASA5505 with SmartNet contract.  I already have my 2 SmarNet contract number.  Now I want to add these 2 contracts to my TAC account, so I can have...

Is it possible to capture commands entered on a router by another user?  What device can I use to monitor my routers everyday and check the logs to see what changes have been made?

Hi, I have a 1841 with 12.4(16) IOS.In my configuration I have to interfaces for internet access, without vrf:interface ATM0/0/0 dsl operating-mode auto pvc 8/35 encapsulation aal5mux ppp dialer dialer pool-member 1 !interface Dialer0 ip address ...

Hi,I have a Windows 2003 domain and all XP stations have dot1x with PEAP configured. I'm using ACS 4.0 with RADIUS. I perceived that after I had configured DOT1X, the customers don't receive the Windows Domain message saying that the password will ex...

Hi,I have been searching everywhere for information about best practices to harden Cisco devices when IPv6 is implemented, I have found many documents showing possible threats however some of them are more than 3 years old and don't give a good examp...

Hello,I am preparing for the CCIE Security exam and have a few questions. 1. Is the CCIE Written exam going to be more focussed on the ASDM view of configuring the firewalls much like the CCSP exams? If so then I can work on getting more hands on wit...

Lately I have begun to recieve a number of "Unknow Device Event Type" alerts from our MARS Server accross a number of different IPS all located in different networks. Not sure why these appear to be triggered with a Risk Rating between or 77 or why M...

What is end -point to end-point encryption?Is it same as end to end encryption which is considered ideal for PCI DSS ?Is it the ultimate solution to insecurity?

I have a main ASA that already has three Site-to-Site VPN's up and running with three different subnets.  I would like to share one of the subnets with another site.  Is this possible and how?

Hi forumers'It's obvious to know how ASA doing NAT 0, how to do the conditional NAT in order the router not translating the IP address. thank youNoel

Hi,We are using the ACS4.2 in our network for the device TACACS authentication and for the VPN user authentication. ACS is integrated with AD. Also we have configured the service management (system configuration>Service management) to monitor the log...

Ashish Jhaldiyal Welcome to the Cisco Support Community Ask the Expert conversation. Learn from Cisco expert Ashish Jhaldiyal about Zone-Based Policy Firewall also known as Zone-Policy Firewall, or ZFW. Ashish is a senior TAC engineer at Cisco Syste...