Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [cisco]

Cisco Systems is an American multinational corporation that designs, manufactures, and sells networking equipment.

1
vote
1answer
97 views

Internal HTTP(s) vulnerabilities

We use Rapidfire + network detective where I work, for doing non-intrusive internal scans on all of our clients' networks. Every week; half of the tickets I get for this are port 80/443 ...
0
votes
2answers
109 views

Best Source of Security Configuration Guidance

Over the years I have used a number of different sources of security configuration guidance for a spectrum of systems including for example: https://www.cisecurity.org/cis-benchmarks/ https://www....
1
vote
0answers
74 views

Do WebEx's requirements open security holes?

After a WebEx presentation is recorded, the recording cannot be played in-browser without installing a browser extension that requires invasive permissions to access the user's data for all websites: ...
0
votes
2answers
190 views

Is an ACL Sufficient for business firewall?

I am a relatively new IT specialist for a small company (about 30 employees, 100 more seasonal.) Most of our systems have been outsourced to an IT company long ago, that handles licensing, VDI, PBX, ...
1
vote
1answer
309 views

Management interface on Cisco router

In my company we had firewall as edge device with the internet. Behind this central firewall we have management network. Now we had to put Cisco router in front of central firewall, as part of some ...
0
votes
1answer
593 views

Firewall doesn't support TLS 1.2

I have an ASA 5550 firewall that doesn't support TLS 1.2. What impact would we have when the older protocols are disabled? Will this affect the servers at all?
4
votes
1answer
607 views

What exactly constitutes a scanning-threat on a Cisco ASA?

TL;DR - Can anyone describe exactly what constitutes a scanning-threat hit, when using threat-detection on a Cisco ASA? I have a client who connects to my network via a VPN to reach a hosted ...
5
votes
3answers
139 views

Is the Cisco vulnerability specific to Cisco or is it something in some commonly used library?

I am referring to the vulnerability reported here: Cisco secuirty advisory on "Cisco Adaptive Security Appliance Remote Code Execution and Denial of Service Vulnerability" CIS adviory on the same ...
3
votes
1answer
679 views

Are Cisco switches vulnerable to VLAN hopping?

Are Cisco switches vulnerable to VLAN hopping? We use Layer 2+ and Layer 3 switches in a hardened environment. They are IE-3000 and IE-4000 series switches. We want to perform a vulnerability scan ...
0
votes
1answer
340 views

Known risks with the old IPSEC Cisco VPN client?

I have a couple of customers who still use the old discontinued/obsolete IPSEC based Cisco VPN client. Obviously it is not a good idea to use software that is no longer supported, but that aside: ...
0
votes
1answer
500 views

Cisco EPC3928 router unknown host

I have a Cisco EPC3928 router on my home network. While scanning my network, I found an unknown Linux host. Host details Linux 2.6.9 - 2.6.30 192.168.0.13, no IPv6 address mac 00:11:E6:DE:AD:07 (...
0
votes
1answer
394 views

Communicating routed interfaces for Cisco ASA 5506-X [closed]

Recently our organisation has been supplied a new ASA 5506-X to replace the old good PIX506e for a project. We have encountered a problem on routed interface on ASA 5506, which is very different from ...
3
votes
0answers
396 views

Blocking facebook on Cisco RV042 Router Issue

I have this router and have configured some Access rules to block facebook. I was only able to block them when accessing facebook via "web browser" on both mobile and desktops. Both www.facebook.com ...
1
vote
0answers
165 views

Cisco ASA, OCSP

I have successfully configured OpenSSL OCSP responder with this hierarchy: RootCA > OCSP responder (signed by RootCA). I have deployed a trustpoint (named RootCA) into the ASA with the RootCA public ...
1
vote
3answers
300 views

Need a leniant browser for captive portals (WiFi and LAN)

I'm currently working from a customer LAN which is "protected" through authentication through captive-portal-like technology. In theory, first thing you do in the morning is click on some URL, get ...
4
votes
4answers
2k views

CISCO IOS service password-encryption

In Cisco IOS there's the service password-encryption command to encrypt all passwords in the config file to prevent unauthorized individuals from viewing them. quoting from http://www.cisco.com/c/en/...
4
votes
2answers
386 views

Sending multiple MAC addresses to the same port on a switch

What could happen if someone continuously sends frames with different source MAC addresses to the same port on a switch? Knowing that this port doesn't apply the "port-security" mode.
3
votes
1answer
84 views

Did Cisco not patch this vulnerability in these modems?

I found this article https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20120613-CVE-2012-3047 In here are listed vulnerable products, but the list of products that ...
-1
votes
1answer
141 views

CISCO EPC3008 vs CISCO EPC3208 = has either of them had security issues? [closed]

I need to choose between one of those modems. Has either of them had known security vulnerabilities and were they patched?
4
votes
1answer
103 views

Is my network tester (Fluke) being blocked?

I am really desperate to get an answer on this, as I am wasting a lot of time trying to figure out what the problem is. Can Cisco switches be configured to block network testers? My network tester ...
-1
votes
2answers
308 views

What is the ideal and realistic(affordable) career path to a Cyber Security expert? [closed]

I'm a graduating university student taking up BS Computer Science with a specialization in Network Engineering, so I'm currently immersed in CCNA and am about to take the cert exam this month. I've ...
0
votes
2answers
476 views

Cisco FirePOWER estreamer python client SSL Cert issue

I'm looking to the use the estreamer python library for Cisco firepower. To achieve this, the configuration document states the following about using clients: "you need to create a certificate on ...
1
vote
0answers
4k views

IPSec - Configuration best practices, performance, and realistic tradeoffs for my chosen Ciphers

I understand the term "best" is subjective but I would like to try to keep this discussion as objective as possible and get the opinion of other security professionals for my chosen cipher suite ...
0
votes
1answer
91 views

Should each radius client have its own key?

If I have many Cisco switches connected to Windows radius, should I assign a different key to each switch? Is it a best practice? If I leave the key same on every host, it would ease my deployment.
0
votes
1answer
348 views

Parse logs from router to database

I would like to parse log files from Cisco WRVS4400N router to a specific database for detecting a DoS Attack. Any idea please?
1
vote
1answer
365 views

How do you shun an IP automatically based on the number of current connections?

If I have a single IP that's trying a Denial of Service attack, how can I automatically have it banned/shunned? I go in and manually put it in a group of banned IP addresses, but I'd like for it to ...
3
votes
2answers
324 views

Is it safe to use TFTP on a local network

Is it safe to use TFTP on a local network to backup configurations? For example we had an experiment where there was an attacker using MITM technique to read all traffic destined for a server. On a ...
4
votes
2answers
1k views

Cisco Registered Envelope Service (CRES), big security flaw?

While researching so called HIPAA compliant email providers, I came across Cisco Registered Envelope Service(CRES), which claims to be HIPAA compliant. According to this instruction, upon receiving ...
0
votes
1answer
667 views

Hiding using VPN

I have just connected to a vpn server in my University using Cisco AnyConnect. But when I check http://whatismyipaddress.com/, it still says that I'm in the same country as before I connected to the ...
0
votes
1answer
1k views

“Your connection is not private” when connected to work's server through VPN (Cisco AnyConnect SMC 3.1)

I'm trying to configure mother's personal computers (Win10) for remote work with server in FL. When I connect from her work laptop - using provided Cisco AnyConnect VPN 2.5 on Win7 - I can still ...
5
votes
1answer
2k views

Can a Cisco ASA 5505 block this DDoS attack?

Since more than a week ago, my dedicated server (located in ovh.com) has been under TCP SYN (I think) attack. OVH don't care about it but this attack is killing my server with a high CPU load (...
1
vote
1answer
399 views

Yersinia raw packet

I'm using Yersinia to pentest my network. There are two options send raw packet and creating DHCP rogue server I don't understand fully. Can someone explain the meaning of these options?
-3
votes
1answer
183 views

Random scanning or potential attack/recon? [duplicate]

If the purpose of a SYN Flood attack would be to make the target unresponsive to normal traffic, same as any other DoS, wouldn't this attack generally have been directed at a public server rather than ...
1
vote
1answer
255 views

Use of server and root certificate in ssl termination and inspection

I'm researching vendors which allow SSL termination and inspection, I came across Cisco CWSA technology, the technology was somewhat easy to understand the stuff which really boggled my mind was the ...
1
vote
3answers
788 views

What is the difference between ASA 5505 Security Appliance and without Security Appliance [closed]

Considering the two devices, ASA 5505 Security Appliance and without Security Appliance. What are the differences between having security appliance and without security appliance? I can not find the ...
2
votes
2answers
2k views

Real-world risk of a Cisco ASA 5505 running IKEv1 aggressive mode with PSK

We have a vendor configured Cisco ASA 5505 running on our network to provide VPN connectivity into their networks. The ASA 5505 was purchased by us but configured by the vendor and we have no ...
0
votes
1answer
695 views

How to manage Cisco ASA series without management cable? [closed]

How can I manage my Cisco ASA device without the management cable? I have not set it up at all, but I have physical access to it.
9
votes
1answer
3k views

Cisco ASA SYN flood detection and response not working

I have a Cisco ASA 5510 (ASA Version 8.3(2)) that has been getting a syn flood attack on it (or more accurately through it - targeting a host behind it) a couple of times a day for the past few days. ...
3
votes
2answers
6k views

Will the shell shock Vulnerability extend to Cisco network equipment?

As Cisco uses bash (and web interfaces if you haven't disable it) is it susceptible to the shell shock vulnerability?
1
vote
1answer
400 views

Creating a secure home network - Which firm ware should I use and how should I configure my firewall?

I am starting to take on more and more enterprise clients while working remotely from my home office. I have a pretty secure network at the moment, but I have a lot hardware that I am not using and ...
4
votes
5answers
8k views

Block Incoming-Teamviewer Connection

Is it possible to use an open-source tool such as Cisco IPS or Cisco ASA to block incoming Teamviewer connections to specific internal IP blocks, while allowing the outgoing ones? I cannot find a ...
4
votes
1answer
136 views

BYOD - Confirming that Devices are Approved

We currently run a Cisco ASA 5510 and a RSA token to authenticate users to our network for VPN access. The company is trying to start BYOD but would like to make sure that the PC has been approved by ...
0
votes
1answer
616 views

Updating Root/Intermediate Certificates over NDES/SCEP

In attempts to setup our first instance of NDES/SCEP in the wild on Cisco routers we have run into a concern. Currently our organization has a three tier PKI. We have an AD CS server on the third ...
3
votes
0answers
514 views

Cisco/Juniper IOS hacking? [closed]

I am a University student and I'm currently working on a paper of ethical hacking. I have already investigated a lot about Web based attacks(SQLI, XSS, etc.) and about two months ago I started ...
2
votes
2answers
1k views

ASA5505 DMZ issue [closed]

I have ASA5505 , connected to the WAN on port 0 (called Vlan2), and connected to my development LAN on port 7 (Called Vlan1). I want to add DMZ, and I connected switch and servers to port 3, and ...
5
votes
1answer
280 views

HeartBleed and Closed Source Hardware like Cisco

With the release of heartbleed how does one protect themselves with closed source networking hardware like cisco? Especially hardware with VPN variety. Would it be best to replaced such systems with ...
0
votes
1answer
2k views

Cisco ASA5505 ASDM Access Issues [closed]

I am installing Cisco firewall solution ASA5505. but cannot access user interface. I navigate to ASA5505 local website 192.168.1.1 from Windows 7 connecting to ASA5505. After the navigating, Java ...
3
votes
1answer
9k views

How to prevent DHCP Starvation attack?

All this while, I assumed that switchport security is enough to prevent DHCP dos attack. If I set it maximum 1, there can be no more mac addresses packets. But, a friend told me that using the tool, ...
0
votes
1answer
505 views

NetFlow IP Spoofing/Reflection Attack Detection

Is it possible to detect IP spoofing/reflection attack via NetFlow? Thanks :)
2
votes
1answer
1k views

How authentication using md5 works in this ospf example?

I am trying to understand how md5 authentication works between this 2 cisco routers. The password is cisco in both routers. In the output in the field Auth Data: the hash is different in every packet. ...