<?xml version="1.0" encoding="UTF-8"?> <rss
version="2.0"
xmlns:content="http://purl.org/rss/1.0/modules/content/"
xmlns:wfw="http://wellformedweb.org/CommentAPI/"
xmlns:dc="http://purl.org/dc/elements/1.1/"
xmlns:atom="http://www.w3.org/2005/Atom"
xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
><channel><title>FirstDigest &#187; Cisco-security</title> <atom:link href="http://www.firstdigest.com/category/security/cisco-security/feed/" rel="self" type="application/rss+xml" /><link>http://www.firstdigest.com</link> <description>Your technical expert</description> <lastBuildDate>Tue, 07 Sep 2010 10:11:56 +0000</lastBuildDate> <language>en</language> <sy:updatePeriod>hourly</sy:updatePeriod> <sy:updateFrequency>1</sy:updateFrequency> <generator>http://wordpress.org/?v=abc</generator> <item><title>Cisco: How can MSS help to solve issues in VPN communication</title><link>http://www.firstdigest.com/2010/09/cisco-how-can-mss-help-to-solve-issues-in-vpn-communication/</link> <comments>http://www.firstdigest.com/2010/09/cisco-how-can-mss-help-to-solve-issues-in-vpn-communication/#comments</comments> <pubDate>Fri, 03 Sep 2010 11:03:35 +0000</pubDate> <dc:creator>Calin</dc:creator> <category><![CDATA[Cisco-security]]></category> <category><![CDATA[Routing and Switching]]></category> <category><![CDATA[cisco vpn]]></category> <category><![CDATA[gre vpn]]></category> <category><![CDATA[how to solve communication issue through vpn]]></category> <category><![CDATA[ip tcp mss-adjust]]></category> <category><![CDATA[ipsec vpn]]></category> <category><![CDATA[maximum segment size]]></category> <category><![CDATA[maxium transmit unit]]></category> <category><![CDATA[mss]]></category> <category><![CDATA[mtu]]></category><guid
isPermaLink="false">http://www.firstdigest.com/?p=2893</guid> <description><![CDATA[Since a week, I’m stretching my brains to solve a communication problem over a VPN connection. The problem was that connections like SSH over VPN were not successfully completed. Imagine site A (Paris &#8211; remote end) and site B (Hamburg &#8211; local end).In the back, of this sites, servers and clients. If somebody tried to [...]]]></description> <wfw:commentRss>http://www.firstdigest.com/2010/09/cisco-how-can-mss-help-to-solve-issues-in-vpn-communication/feed/</wfw:commentRss> <slash:comments>0</slash:comments> </item> <item><title>Web Server Directory Traversal Vulnerability in Cisco CDS</title><link>http://www.firstdigest.com/2010/07/web-server-directory-traversal-vulnerability-in-cisco-cds/</link> <comments>http://www.firstdigest.com/2010/07/web-server-directory-traversal-vulnerability-in-cisco-cds/#comments</comments> <pubDate>Fri, 23 Jul 2010 05:11:16 +0000</pubDate> <dc:creator>Calin</dc:creator> <category><![CDATA[Cisco-security]]></category> <category><![CDATA[cisco]]></category> <category><![CDATA[Cisco CDS]]></category> <category><![CDATA[Cisco CDS vulnerability]]></category> <category><![CDATA[how to deal with cisco vulnerability]]></category> <category><![CDATA[vulnerability]]></category> <category><![CDATA[web server directory]]></category><guid
isPermaLink="false">http://www.firstdigest.com/?p=2743</guid> <description><![CDATA[
The Cisco Internet Streamer application, part of the Cisco Content Delivery System, contains a directory traversal vulnerability on its web server component that allows for arbitrary file access. By exploiting this vulnerability, an attacker may be able to read arbitrary files on the device, outside of the web server document directory, by using a specially [...]]]></description> <wfw:commentRss>http://www.firstdigest.com/2010/07/web-server-directory-traversal-vulnerability-in-cisco-cds/feed/</wfw:commentRss> <slash:comments>1</slash:comments> </item> <item><title>Cisco PPP Authentication</title><link>http://www.firstdigest.com/2010/03/cisco-ppp-authentication/</link> <comments>http://www.firstdigest.com/2010/03/cisco-ppp-authentication/#comments</comments> <pubDate>Tue, 23 Mar 2010 21:42:03 +0000</pubDate> <dc:creator>Calin</dc:creator> <category><![CDATA[Cisco-security]]></category> <category><![CDATA[authentication]]></category> <category><![CDATA[Challenge-Handshake Authentication Protocol]]></category> <category><![CDATA[chap]]></category> <category><![CDATA[eap]]></category> <category><![CDATA[Extensible Authentication Protocol]]></category> <category><![CDATA[how-to]]></category> <category><![CDATA[linux]]></category> <category><![CDATA[network]]></category> <category><![CDATA[pap]]></category> <category><![CDATA[ppp]]></category> <category><![CDATA[ppp authetication]]></category> <category><![CDATA[RADIUS]]></category> <category><![CDATA[Security]]></category><guid
isPermaLink="false">http://www.firstdigest.com/?p=2555</guid> <description><![CDATA[As a network engineer, you most probably already had to do with PPP authentication at least once or two times in your daily operation.  Even more, if you are going for a Cisco certification (and not only) you should know some stuff about PPP authentication. For today, I&#8217;ve planned to deal with back-to-back PPP authentication.
For [...]]]></description> <wfw:commentRss>http://www.firstdigest.com/2010/03/cisco-ppp-authentication/feed/</wfw:commentRss> <slash:comments>3</slash:comments> </item> <item><title>Converting from old to new with the PIX to ASA Migration Tool</title><link>http://www.firstdigest.com/2010/03/converting-from-old-to-new-with-the-pix-to-asa-migration-tool/</link> <comments>http://www.firstdigest.com/2010/03/converting-from-old-to-new-with-the-pix-to-asa-migration-tool/#comments</comments> <pubDate>Tue, 16 Mar 2010 22:35:34 +0000</pubDate> <dc:creator>Calin</dc:creator> <category><![CDATA[Cisco-security]]></category> <category><![CDATA[Cisco ASA]]></category> <category><![CDATA[Cisco IOS]]></category> <category><![CDATA[Cisco PIX]]></category> <category><![CDATA[Cisco Systems]]></category> <category><![CDATA[firewall]]></category> <category><![CDATA[network]]></category> <category><![CDATA[Operating system]]></category> <category><![CDATA[Security]]></category><guid
isPermaLink="false">http://www.firstdigest.com/?p=2537</guid> <description><![CDATA[Digging through Internet I&#8217;ve found a very good article from David Davis explaining how to make your life easier when migrating from PIX to ASA.
The important thing to note about PIX and ASA configurations are that  they are different. In other words, to do one thing on a PIX requires a  different command [...]]]></description> <wfw:commentRss>http://www.firstdigest.com/2010/03/converting-from-old-to-new-with-the-pix-to-asa-migration-tool/feed/</wfw:commentRss> <slash:comments>0</slash:comments> </item> <item><title>Cisco: Small escape leading to non-functional NAT</title><link>http://www.firstdigest.com/2010/01/cisco-small-escape-leading-to-non-functional-nat/</link> <comments>http://www.firstdigest.com/2010/01/cisco-small-escape-leading-to-non-functional-nat/#comments</comments> <pubDate>Wed, 20 Jan 2010 13:02:37 +0000</pubDate> <dc:creator>Calin</dc:creator> <category><![CDATA[Cisco-security]]></category> <category><![CDATA[address]]></category> <category><![CDATA[address not stolen for]]></category> <category><![CDATA[broadcast]]></category> <category><![CDATA[failed to allocate address for]]></category> <category><![CDATA[faulty]]></category> <category><![CDATA[mistake]]></category> <category><![CDATA[NAT]]></category> <category><![CDATA[network]]></category><guid
isPermaLink="false">http://www.firstdigest.com/?p=2084</guid> <description><![CDATA[I have seen that a lot of people is using search engines to look after terms like &#8220;NAT: failed to allocate address for&#8230;&#8221; or &#8220;NAT: address not stolen for&#8230;&#8221; asking for help in regard to a non-functional NAT. Of course I skipped the cases when the solution was obvious and clear like wrong NAT configuration, [...]]]></description> <wfw:commentRss>http://www.firstdigest.com/2010/01/cisco-small-escape-leading-to-non-functional-nat/feed/</wfw:commentRss> <slash:comments>2</slash:comments> </item> <item><title>Cisco: DoS protection using TCP Intercept</title><link>http://www.firstdigest.com/2009/05/cisco-dos-protection-using-tcp-intercept/</link> <comments>http://www.firstdigest.com/2009/05/cisco-dos-protection-using-tcp-intercept/#comments</comments> <pubDate>Tue, 19 May 2009 08:35:17 +0000</pubDate> <dc:creator>Calin</dc:creator> <category><![CDATA[Cisco-security]]></category> <category><![CDATA[attack]]></category> <category><![CDATA[attack mitigate]]></category> <category><![CDATA[denial-of-service]]></category> <category><![CDATA[DoS]]></category> <category><![CDATA[network]]></category> <category><![CDATA[tcp]]></category> <category><![CDATA[TCP intercept]]></category> <category><![CDATA[ubuntu]]></category> <category><![CDATA[vmware]]></category><guid
isPermaLink="false">http://www.firstdigest.com/?p=1313</guid> <description><![CDATA[Every now and then, all network engineers have to deal with some kind of network attack.  Usually, the attack does not target the network devices, but the machines that provide services (e.g. www, database hosting&#8230;), because it&#8217;s more easy to find on the Internet a script that is probing port 80 for example, which by [...]]]></description> <wfw:commentRss>http://www.firstdigest.com/2009/05/cisco-dos-protection-using-tcp-intercept/feed/</wfw:commentRss> <slash:comments>0</slash:comments> </item> <item><title>Cisco: How to use reflexive access-list and why they are useful</title><link>http://www.firstdigest.com/2009/03/cisco-how-to-use-reflexive-access-list-and-why-they-are-useful/</link> <comments>http://www.firstdigest.com/2009/03/cisco-how-to-use-reflexive-access-list-and-why-they-are-useful/#comments</comments> <pubDate>Mon, 30 Mar 2009 15:49:36 +0000</pubDate> <dc:creator>Calin</dc:creator> <category><![CDATA[Cisco-security]]></category> <category><![CDATA[access-list]]></category> <category><![CDATA[ACL]]></category> <category><![CDATA[acl reflexive]]></category> <category><![CDATA[cisco]]></category> <category><![CDATA[firewall]]></category> <category><![CDATA[reflexive]]></category> <category><![CDATA[Security]]></category><guid
isPermaLink="false">http://www.firstdigest.com/?p=1068</guid> <description><![CDATA[Reflexive access-list are one of the method that help us achive firewall functionality with a router hardware. The other methods that serve to the same purpose are Context-Based Access Control (CBAC) and TCP Intercept. For an introduction to CBAC with example please check my older post Cisco: Use CBAC to achieve firewall functionality on router [...]]]></description> <wfw:commentRss>http://www.firstdigest.com/2009/03/cisco-how-to-use-reflexive-access-list-and-why-they-are-useful/feed/</wfw:commentRss> <slash:comments>4</slash:comments> </item> <item><title>Cisco: How to configure privileges for local users</title><link>http://www.firstdigest.com/2009/03/cisco-how-to-configure-privileges-for-local-users/</link> <comments>http://www.firstdigest.com/2009/03/cisco-how-to-configure-privileges-for-local-users/#comments</comments> <pubDate>Mon, 02 Mar 2009 12:33:12 +0000</pubDate> <dc:creator>Calin</dc:creator> <category><![CDATA[Cisco-security]]></category> <category><![CDATA[cisco]]></category> <category><![CDATA[enable]]></category> <category><![CDATA[IOS]]></category> <category><![CDATA[level]]></category> <category><![CDATA[local user]]></category> <category><![CDATA[privilege]]></category><guid
isPermaLink="false">http://www.firstdigest.com/?p=769</guid> <description><![CDATA[I believe that all of you are familiar with privilege levels (0-15) on Cisco IOS. The most useful for network engineers is level 15 and the highest one as it will allow you full access to all IOS features, but in most networks only a few persons have this privilege level. In my opinion is [...]]]></description> <wfw:commentRss>http://www.firstdigest.com/2009/03/cisco-how-to-configure-privileges-for-local-users/feed/</wfw:commentRss> <slash:comments>3</slash:comments> </item> <item><title>Cisco: FWSM CPU stress test how-to</title><link>http://www.firstdigest.com/2009/02/cisco-fwsm-cpu-stress-test-how-to/</link> <comments>http://www.firstdigest.com/2009/02/cisco-fwsm-cpu-stress-test-how-to/#comments</comments> <pubDate>Fri, 06 Feb 2009 11:55:47 +0000</pubDate> <dc:creator>Calin</dc:creator> <category><![CDATA[Cisco-security]]></category> <category><![CDATA[6500]]></category> <category><![CDATA[CPU utilization]]></category> <category><![CDATA[firewall service module]]></category> <category><![CDATA[FWSM]]></category> <category><![CDATA[Routing and Switching]]></category> <category><![CDATA[stress test]]></category><guid
isPermaLink="false">http://www.firstdigest.com/?p=461</guid> <description><![CDATA[Sometime ago I had to do a stress test for a Cisco FWSM (Firewall Service Module) to see how the resources are consumed and if some potential traffic can temporarly affect the behavior of this device. For those of you who have don&#8217;t know what is a Cisco FWSM, here comes the definition: &#8220;Cisco Firewall [...]]]></description> <wfw:commentRss>http://www.firstdigest.com/2009/02/cisco-fwsm-cpu-stress-test-how-to/feed/</wfw:commentRss> <slash:comments>2</slash:comments> </item> <item><title>Cisco: Use CBAC to achieve firewall functionality on router device</title><link>http://www.firstdigest.com/2009/01/cisco-use-cbac-to-achieve-firewall-functionality-on-router-device/</link> <comments>http://www.firstdigest.com/2009/01/cisco-use-cbac-to-achieve-firewall-functionality-on-router-device/#comments</comments> <pubDate>Mon, 19 Jan 2009 14:49:22 +0000</pubDate> <dc:creator>Calin</dc:creator> <category><![CDATA[Cisco-security]]></category> <category><![CDATA[cbac]]></category> <category><![CDATA[context-based access control]]></category> <category><![CDATA[firewall]]></category> <category><![CDATA[ip inspect]]></category> <category><![CDATA[router]]></category> <category><![CDATA[Routing and Switching]]></category> <category><![CDATA[Security]]></category><guid
isPermaLink="false">http://www.firstdigest.com/?p=372</guid> <description><![CDATA[Sometimes, because of cost saving usually, the network engineers are forced to use a Cisco router as a firewall (instead of Cisco PIX or ASA). One of the big difference between router and firewall devices is that the ports have different characteristics. If on routers, ports are permitting by default traffic of any packets in [...]]]></description> <wfw:commentRss>http://www.firstdigest.com/2009/01/cisco-use-cbac-to-achieve-firewall-functionality-on-router-device/feed/</wfw:commentRss> <slash:comments>4</slash:comments> </item> </channel> </rss>
<!-- Performance optimized by W3 Total Cache. Learn more: http://www.w3-edge.com/wordpress-plugins/

Minified using memcached
Page Caching using memcached (user agent is rejected)
Database Caching 54/230 queries in 0.600 seconds using memcached
Object Caching 2450/2769 objects using memcached

Served from: www.firstdigest.com @ 2010-09-07 10:53:27 -->