Cisco Systems is an American multinational corporation that designs, manufactures, and sells networking equipment.
0
votes
1answer
72 views
Securing my firewall (both dedicated and iptables-based) [closed]
I have an ASA-5510, but I also intend to maintain strict IP tables on my server (Ubuntu 12.04.2), so that there are two layers of "protection".
My iptables look like this:
*filter
# Allows all ...
2
votes
2answers
91 views
BEAST mitigation on a Cisco ACE 4710 load balancer
We are looking to mitigate BEAST (and similar) on our Cisco ACE appliance (running version A4(2.0)), which is the 'endpoint' for a handful of load-balanced services. Some of these service still run ...
3
votes
1answer
85 views
How does VTP authentication prevent unauthorized access (Can the password be cracked given captured packets)
I know that when setting up VTP across switches in a network you should set a secret/password to prevent unauthorized requests. My question is I know that this uses an MD5 hash to ensure that ...
2
votes
1answer
54 views
find hardware and OS specs on routers
How do you determine the model and IOS version of a Cisco router, if you have its IP address remotely, but have no physical access. For example, I run nmap -sP and can see the router's IP, but all ...
2
votes
1answer
157 views
Tacacs+ scenario: can I permit user to configure only for one interface and deny others
I'm currently deploying TACACS+ with a Cisco device, I use a TACACS server from here: http://www.shrubbery.net/tac_plus/
My scenario is: I want to permit a user to configure my router but only for a ...
2
votes
2answers
153 views
Does an equivalent for netconf exist in the Cisco ASA world?
I'm looking for a method to send instructions to a Cisco ASA without writing scripts to execute on the CLI over SSH. Cisco doesn't seem to support netconf or xml-pi on the physical ASAs (only their ...
3
votes
3answers
288 views
Hacking a Cisco 2801 Externally
2 days ago, we had a maintenance checkup in our server room. I noticed that the inspector was carrying a 6 meter fiber-optic cable, and a handheld strobe light with his equipment.
Now, I had an ...
-1
votes
1answer
538 views
How to install Cisco VPN Client on Windows 7 64bit [closed]
I have Win7 64bit. Have Cisco VPN Client winx64-msi-5.0.07.0440-k9.
Now i try to install it. But after i click first "Next" button in istaller i get error:
"installation ended prematurely because of ...
1
vote
5answers
2k views
Cracking CISCO ASA Passwords
I've got a copy of a Cisco ASA config and i want to crack the following example passwords
I've got the following lines in the config
ASA Version 8.4(2)
!
hostname ciscoasa
enable ...
2
votes
2answers
113 views
Ordering of shared Phase 1/ISAKMP VPN policies
The various Phase 1 settings of a VPN tunnel policy are fairly well-established (encryption, hashing, DH group, lifetime), but in what order are they considered applicable to a more-secure tunnel?
I ...
0
votes
1answer
83 views
Weird issue with Firewall blocking NATed packets
From my SIEM I am seeing that a (we don't own the FW) Cisco ASA is blocking packets destined for the internal network (post NAT), here's what I'm seeing (IP addresses are faked due to security)
...
4
votes
1answer
93 views
Symbiote Counter-Attack Detection
I saw this video on YouTube about hacking Cisco phones (and other embedded systems) and I was overjoyed when the presenter not only hacked, but presented a security solution. Intrigued, I started ...
-1
votes
1answer
371 views
Linux tools to choose suitable Cisco ASA 5500
I have a linux webhosting server which affects a high DDOS.
I want to use Cisco ASA 5500 Series Adaptive Security Appliances to protect the linux server from this DDOS. I know there are many factors ...
3
votes
2answers
311 views
1 PIX firewall, 2 routers, 2 switches. Please answer a couple questions about hack lab
I bought a bunch of cisco equipment for a project and I got
1 PIX firewall
2 switches
and 2 routers
This is my plan for a topology but I am new at this so I need help.
I am basing this off the ...
5
votes
1answer
342 views
Trying to prevent Cisco toll fraud
A little back story on the setup first; We have a Cisco VoIP setup at our remote office(where I'm at) and the main CCM/CCX/Unity setup is at the parent company across the US in Connecticut. We have ...
0
votes
0answers
225 views
Using more multiple VPN client's to connect to the same CISCO ASA VPN client connection [closed]
I am currently using CISCO VPN client in a Read Hat Linux machine to connect to a CISCO ASA.
I am planing to connect another LINUX maching to the same ASA using the CISCO VPN client.
Does any ...
4
votes
2answers
825 views
Cisco ASA Security Contexts: Any Real World Installs?
We are looking at deploying a Cisco ASA 5520-I am looking at the security contexts feature, and was wondering if anyone has deployed their ASA in this way, and how it is working out for them.
Have ...
0
votes
1answer
273 views
Cisco PIX SNMP enabled or not?
On a Cisco PIX firewall, I wanted to check if SNMP is enabled:
pix# sh snmp-server
no snmp-server location
no snmp-server contact
snmp-server community public
no ...
8
votes
5answers
3k views
Automated tools for Cisco IOS config auditing?
Are there any automated tools for auditing config files exported from Cisco IOS devices? Free/Open Source is always nice, but anything that does the job would be of interest.
5
votes
1answer
565 views
I'm having a DDoS attack, my hosting company is stupid, and I need to know what is hapening
So ok, right now my windows 2003 dedicated server is under attack by some guy who's flooding UDP packets (~90.000 packets/sec) on my 100Mbps server for the last 8 hours.
I'm on a shared port, so I'm ...
2
votes
1answer
376 views
How do Cisco devices identify routers?
Our network administrators forbid the usage of private routers in our college. They bought new Cisco equipment (routers, switches) which detect routers and automatically ban them (it disconnects the ...
4
votes
2answers
889 views
Cisco IOS question - password management, service password encryption types
I'm university student studying for my certification exam, and I was doing some reviewing today when I found a question that I can't find an answer to.
Basically, in the CCNA3 2.4.1 Cisco Netacademy ...
1
vote
2answers
565 views
Cisco ASA Default Route Issue
We have a test environment which mimics our enterprise network security design. In this test environment my team and I would like to bypass our DMZ entirely. This seems easily enough done by simply ...
3
votes
1answer
601 views
I'm using a Cisco ASA as a VPN endpoint. Where do the VPN clients get firewalled?
(Is this too application specific? It seems like a reasonable question that would be useful to other people...)
So, I've got this ASA in front of a network that I didn't set up. It's been ...
