Cisco Security :: NAC 4.8.2 Checks Using Applications Hash Value
Aug 14, 2012
Is there any other way to configure the checks using the hash value of an application instead of register key ??? I have read and confirmed that the hash value does not change never. Its the same value....But I did not find a way to configure the rule on the CAM.... ? By the way I am using Cisco NAC 4.8.2
How the one-way hash is generated given the challenge number and shared secret password?It's just that I was reading Cisco 3 chapter 7, and it doesn't explicitly outline how the one-way hash is actually generated, it simply states that it is generated given the challenge number (randomly generated for every challenge message) and the shared secret password.
I have a webcam set up on my website that feeds from my router here.
Is there a way to track who checks in and for how long? I have a few folks that have decided to park their butts on the cameras all day long, I want to block them.
I set up a port forward, I think I have everything set up correctly. The cam works fine, just can't seem to find the log where they came from
I connecting to a Cisco ASA 5500 using a third party IKEv1 client. The initial connection and all rekey attempts that start on the client are successful. A tunnel is established, data cna be transferred between the client and the ASA's internal network etc.However, when the ASA initiates rekeying of a Quick Mode SA this is rejected on the client. The rejection occurs due to QM3's HASH payloading having a length of 4, which is wrong.
ASA log:
ISAKMP Header Initiator COOKIE: 48 81 9e 1b 80 94 41 a9 Responder COOKIE: fa ab 87 c7 a5 d9 8d 35 Next Payload: Hash Version: 1.0 Exchange Type: Quick Mode
[code]...
Since the initial negotiations work, pre-shared key, IKE/IPsec settings etc should be correct; if they weren't the connections wouldn't work in the first place.
Which transmit hash policies are supported by the SLM2008? I can't find this information in any of the documentation for this switch, all that is stated is that it supports Link Aggregation using IEEE 802.3ad LACP. I'm connecting to a Netgear ReadyNAS Pro that supports Layer 2 and Layer 3+4 transmit hash policies and I'm not sure which to choose (or whether it matters).
Regarding our international subsidiaries there are many names that contain the character "-" (i.e. Pierre-Pascal)When trying to create an new Guest Account the ISE refuses it because of an invalid character in the "First Name" field.In other formular fields i.e. Email Address - the character "-" is allowed.Is it possible to change the rule which checks the fields for illegal characters? (Is it a Bug?)
Most of my applications and games that connect to the internet are unable to do so. My browser is working fine, though.This morning, my AVG found 2 trojans, and deleted them. However, it also deleted a couple registry keys along with them. I suspect this might be the problem, or maybe the antivirus itself, but I don't know which keys were deleted.
I randomly get disconnected from the online applications that I'm using.(Msn, skype, online games, etc.)And I'm running this program in the background to check what's going on.As you can see, everything is normal till I get 0 ping for a couple of times, then it immediately goes back to normal till it hits 0 ping again.It's very random, it happens on the 345th hop or 789th etc.I'm on a wi-fi connection but not using wireless modem.The cable's plugged to my computer.
when I connect to VPN with ASA 5510, can not connect to web applications in HTTP instead https in other applications are working properly. how can I fix this?
We are having issues transferring a 200GB VHD file across our point to point without being corrupted in the process. Any good application for testing the line quality across the point to point?Preferably we want something free, but if there is an in depth tool that costs money, we are open to that option as well.
I've tried scanning for viruses, using winsock fix (they had a static ip I also set to automatic since they should not need it). I just turned off the firewall as well, tried "selective startup" and unchecked "load startup items" and nothing has worked so far. We're working on giving them another computer but I'd like to know why this happens.
I recently was instructed to block Facebook from a specific persons phone. I was able to block access to Facebook from the browser, but this person can still access Facebook via the mobile app. I have already placed m.facebook.com and facebook.com on the "no-go list" on my router, which like I said, specificaly blocks the browser on phone, but not the app. I can't seem to figure out how the app accesses the site and how to block it.I've already done some Googling, and read that port 9339 plays some kind of role. I don't know how true this is, but I tried it anyway, to no avail. I am not to savvy with ports so it could be my error.And before it is mentioned, this person cannot access cell data, as the phone does not get service, only WiFi.
I would like to allow another user to access my home server to be able to restart his teamspeak/ mine craft servers. I know game hosting companies can do it and would like to know how I can have him be able to restart them without remote desktop.
We're trying to access Citrix applications on customer`s server, but the error message attached pops up every time I try to access any application. Actually, this is the same error message when we try to use ssh protocol. I'm pretty sure I have loaded all the plugins for this. All the other functionalists are ok for this equipment.
We have a SPA-1XCHSTM1/OC3 installed in a SIP-200 in a 6509. There are approximately 50 T1's riding the OC3.
We have two applications that fail when run from two different remote sites riding T1's that ride the OC3.Both applications involve access to external Internet sites.One establishes a VPN to AT&T's network. The other connects to a credit card transaction service.
We've run the applications from our central site successfully which means their traffic goes through our firewall and our ISP.We replaced the T1 to one remote site with another that does not ride the OC3. Both applications work riding that new T1.
Cisco says there is no newer firmware for the SPA-1XCHSTM1/OC3 than what we are currently running: [code]We would prefer all our T1's come in through the OC3 but until we get a fix for the buggy OC3 that is not possible.
I just purchased and installed a RV220W router. I bought it specifically for the VPN capability. After successfully setting up the QuickVPN and connecting, I am confused about how to setup the router (if possible) so I can run applications remotely. Is this possible with the RV220W and if so, is there documentation to guide me in the right direction?
I was looking on YouTube to make my own server, the person said, "then go to Applications, Pinholes and DMZ click on it..." So I did it but did not see it what happened to it
Currently, my work computer has (obviously) a local desktop. Also, we use a Remote Desktop for our shared network drive (our head office is on the other side of the country). The annoying thing is that if I am looking up a document on the share drive (Remote Desktop) and I want to work on it, the Remote Desktop applications are slow. So I'd rather work on it on my local desktop. However, I have to email it to myself, exit the Remote Desktop, retrieve it from my mail (in local desktop) and then save it
I have a server running Windows Server (can be 2003 or 2008 if it matters). The server has multiple IP addresses allocated to it.I want to use the IP addresses *as if they were remote high anonymous proxies*. I want all traffic to and from each application to use the same IP address and I want to be able to add the IP addresses to applications in the same way I would a remote proxy (presumably using 127.0.0.1 ort)So for each 127.0.0.1 ort address traffic travels like so:
application <-> localhost <-> internet facing IP address <-> remote site
Is this even possible? I know I can do this using a seperate Linux VPS running squid but I'm curious as to if it can be done on one server running windows.
LENOVO G580 - i5,4gb ram, 500gb harddisk , network adapters- atheros ar8162 pcie- fast ethernet controller, broadcom 802.11n network adapter.i am using quickheal total secutity for a total antivirus protection.My problem is that whenever i connect my laptop using a d-link crossover cable to connect to my desktop the connection establishes successfully but on browsing or copying data the system gives a bsod error.initially i didn't got a clue as to what causes the error but then i figured out that uninstalling q-heal solves the problem an reintalling it again causes the same problem.ive tried using different versions/products of qiuckheal but all end up generating a blue screen error.not only this , whenever i use a software that has some thing to do with network like monitoring appliction wise bandwith or something it also ends up in bsod.
I would like to know about asa 5500-x. Does it supports application visibility and granular control for different applications. Moreover bandwidth control based on different users and different applications
I am trying to make an application sharing software which shares multiple applications in windows to various clients. My idea is to modify VNC code and use it to share applications on different ports to different clients.
I've installed XAMPP on one of my Vista computers, and intend to use it as a server. The internal IP address of the server is A.B.C.D. The internal IP address of the DIR-615 is A.B.C.E. whatsmyip.com says that external address of the server is F.G.H.I (and so is everything else inside my network). I have Filezilla listening on port 21. I've turned Windows Firewall completely off on the server, and my ISP (Time Warner / Road Runner) says that they never block any port.I tried going to the DIR-615 using Port Forwarding, and set ports 21 & 90 to forward to A.B.C.D, for both UDP & TCP, Allow All, Always. That didn't work.I tried going to the DIR-615 using Virtual Server. I set a virtual server on port 21 to A.B.C.D, for both UDP & TCP, Allow All, Always. It made me turn off Port Forwarding, and it wouldn't let me use both 21 & 90 on the same rule, so made two rules. That didn't work either.
I tried setting A.B.C.D as a DMZ host. That still didn't work.I can ftp connect into A.B.C.D from one of the other computers in the network. People outside the network can't connect to F.G.H.I. I can't connect to F.G.H.I. from inside the network. The same is true of Apache (but ports 80, 81 & 443), Ventrilo (but ports 3784 & 6100) and MySQL (but port 3306). I figure that FTP is the easiest to test, so I've been just trying to get that to work.In FileZilla Server Options, I am bound to *, I have no filters, and my passive mode is set to "Retrieve external IP"As far as I can tell, if I've ruled out anything inside my network (by connecting internally), and I've ruled out my ISP (they don't block), then it must be the router. I think I've done port forwarding according to [URL], and it seems like it should be easy, but I've been trying forever and I can never get it to work.
Just updated to the 1.01 firmware on my DIR-815 and now it doesn't handle loopbacks anymore.
For instance, I have a dyndns address of ericnewton76.dyndns.org. This points to my router. Works fine if you're NOT within the router's internal network, ie, outside hosts can get in just fine (try it... http:// , you'll see an IIS7 welcome screen)
However, when INSIDE the network, the requests don't get connected properly, and they used to... ie, I work with code, so my svn repo is at ericnewton76.dyndns.org/svn but inside my network it doesn't connect properly anymore (whereas it used to before firmware update)
So now I wish I could back-peddle to 1.0 firmware.
After upgrading the firmware of the router from 1.0.01 to 1.0.04 I have been unable to update my apps through the app store, nor login sucessfully to sites such as 4shared (on all computers and phones in the network).
I did an upgrade to my firmware on the x2000 dsl router and now i cannot download apps with my android phone, i have tried everything that i can think of.
We have one office and one construction site. The construction site connects to the office through site to site VPN but the applications used on the construction site goes very slow!
There is a Cisco asa 5505 at the construction site and a Pix Version 6.3(5) at the office. The ISP line is 100Mbit fiber at both locations. Speed check shows 80 m bit/s at the construction site and when my constructors pings the local servers the response time is about 10 ms. There is only small amounts of data that is going through the tunnel.Are there some limitations in the site to site software that is causing this? It is strange that it is so slow when speed check shows good result and ping shows good result.
The problem: I need to track a bus from city to city in real time.I'm thinking of a gps device without screen or apps, it only sends the current location to a server. Is this possible? What device can be useful?