It is a good security practice to configure a Warning login banner on your Cisco ASA firewall appliance for unauthorized access attempts. In this article we will describe how to configure such a banner for different ways available for connecting to the appliance such as using the graphical interface (ASDM), session, login etc. The command […]
[Continue reading]
The Cisco ASA appliance retains clock settings in memory via a battery on the device motherboard. Even if the device is turned off, the clock is retained in memory. Configuring accurate time settings on the appliance is important for logging purposes since syslog messages can contain a time stamp according to the device clock time […]
[Continue reading]
One of the easiest ways to configure simple remote access VPN functionality for your remote users is by configuring PPTP. This is supported on Cisco routers and will work with Windows OS flawlessly. What is PPTP PPTP (Point to Point Tunneling Protocol) is a quick and easy solution to offer remote access to users. Since […]
[Continue reading]
The Cisco Adaptive Security Appliance (ASA) is an integrated security equipment that can perform a variety of functions like firewall, intrusion prevention, VPN, content security, unified communications, and remote access. Among these functions, the ASA can also perform routing using popular routing protocol like Routing Information Protocol (RIP), Enhanced Interior Gateway Routing Protocol (EIGRP), Open […]
[Continue reading]
What is WPA2: WPA2 is short for Wi-Fi Protected Access 2 and is standardized under the IEEE 802.11i standard. WPA2 is a security protocol framework that is used to protect wireless networks. WPA2 is currently considered as the most secure method to protect a Wi-Fi network. It provides layer 2 based security and uses IEEE […]
[Continue reading]
The usage of object groups (network objects, service object etc) is becoming more popular on Cisco ASA firewalls especially with newer OS versions ( 8.3(x) and later) . In the newer versions, network object groups are used extensively for the configuration of NAT mechanisms in addition to other uses. In this post I will show […]
[Continue reading]
IP Security (IPsec) is a framework of open standards developed by the Internet Engineering Task Force (IETF). IPsec provides security for transmission of sensitive information over unprotected networks such as the Internet. IPsec acts at the network layer, protecting and authenticating IP packets between participating IPsec devices also known as IPsec peers. IPsec has two […]
[Continue reading]
In my enterprise work environment, our corporate private and public network spans across many buildings and locations and uses thousands of private IP addresses (in the range specified by RFC1918) and hundreds of public IPs as well. How do we handle the management of such a huge address space? The secret is an IPAM (IP […]
[Continue reading]
A “Firewall” is one of the most popular computer and network security devices that professionals use to protect their enterprise IT assets and networks. Just like a fire-resistant door in buildings which protects rooms from a possible fire and stops the spreading of flames within the building, the security firewall has a similar function to […]
[Continue reading]
This post will deal with creating Layer 2 VLANs on Cisco switches and performing all relevant configurations. Up to 4094 VLANs can be configured on Cisco catalyst switches. By default, only VLAN 1 is configured on the switch, so if you connect hosts on an out-of-the-box switch they all belong to the same Layer 2 […]
[Continue reading]
Network systems are continually evolving – getting complex and innovative. To make students familiar with them, new educational tools and updated curriculum is emerging all the time. Today, there are many simulation tools available that can be used to learn networking, and they have made the life of both teachers and students, very easy. In […]
[Continue reading]
There are so many acronyms in the networking and security field that can drive you crazy. The terms IPS, IDS, WAF etc might be known acronyms in the field of network security but many beginner professionals sometimes have difficulty to understand the concept behind these technologies, how they compare etc. In this article I’ll do […]
[Continue reading]
A network sniffer, or packet sniffer, is a specialized software (or even a hardware device) that listens in over a network and records the IP packets of data that travel through it. Many network administrators use these tools to determine the efficiency of a network, to troubleshoot communication problems, to identify common network bottlenecks etc. […]
[Continue reading]