block access to the local asa firewall vpn accounts

Similar Questions

• Accidentally blocked access to the local disk - how to unlock?

  You use Chrome and Citrix to access a remote server, the mouse slipped when I was about to download a file from my C: drive and I clicked on block access instead of allow access. Now Windows does not allow me to access the C: drive, and I find no way to reverse my previous decision. Any help would be appreciated.

  Close your office tasks bar, clock is a Citrix icon (it is black with white lines on it).  You can use it to access the connection Center and change to allow access to the place.  I have not worn hand on the computer on which I typing this, but if I remember right you would go to the option 'About' on this icon, then there will be a link to the advanced options and connection Center access.

  When you get to it, this is the option you want to change:

  

• We get an error "NETWORK CONNECTION ERROR, make sure a firewall is not blocking access to the printer.

  * Original title: printer error...

  I was printing with a printer wireless for months and now all of a sudden I'm getting an error, NETWORK CONNECTION ERROR and then readings make sure that a firewall is not blocking access to the printer.   I checked and it is not blocked...  I did a session of disorder and it reads no problems found.   Can someone please...

  Hello

  1. what version of Windows is installed on the computer?

  2. What is the brand and model of the printer?

  3. you have any non-Microsoft firewall installed on the computer?

  4. what security software is installed on the computer?

  5 have have there been recent changes made on the computer before the show?

  Please follow the steps below and check if that helps.

  Method 1: Run troubleshooting network printer and check.

  http://Windows.Microsoft.com/en-us/Windows-Vista/troubleshoot-network-printer-problems

  Method 2: Select the file and printer sharing

  http://Windows.Microsoft.com/en-us/Windows-Vista/enable-file-and-printer-sharing

  Method 3: I suggest to change firewall security settings, or disable the security software on the system and try to access the printer.

  Note: make sure that you enable the antivirus software, other security and firewall after the test programs.

  For more information, see the articles and check out them.

  Understanding Windows Firewall settings

  http://Windows.Microsoft.com/en-us/Windows-Vista/Understanding-Windows-Firewall-settings

  Enable or disable Windows Firewall

  http://Windows.Microsoft.com/en-us/Windows-Vista/turn-Windows-Firewall-on-or-off

  Allow a program to communicate through Windows Firewall

  http://Windows.Microsoft.com/en-us/Windows-Vista/allow-a-program-to-communicate-through-Windows-Firewall

  Let us know if it helps!

• [MOVED] Update McAfee blocks access to the AOL software and software window Internet Explorer

  UPDATED July 2,2012
  Update antivirus software McAfee (McAfee software provided when I bought this Dell computer)
  It's so I can't connect to Internet after reboot
  with cable broadband from AOL or Windows Internet Explorer software on
  Windows 7. Programs are not blocked the McAfee software programs
  complete access... It seems that just programs cannot "find" the modem broadband
  in Windows 7 professional OS after your update... The other weird thing is
  The accuweather by Dell can access the Internet and produce of the time, date and
  weather on my monitor. I disabled the wireless connection that
  is integrated into the motherboard of Dell. I also tried to reinstall the modem
  (AT & T - Motorola 2210 Modem) software from the original CD but I get the message there is no 64
  driver bits. I had to use a restore five times point to eliminate the five
  try to update your software... What makes the limited Mcafee anti-virus software
  utility, since it can be is more updated. Virtual Technician of McAfee said that he is
  nothing wrong. Of course when the McAfee service is updated I can't chat on the
  NET with McAfee technicians ' sr since I can't access the Internet.
  McAfee technicians have no idea what is the problem.
   
  Windows says I have the latest driver upfdste for the Broadcom Gigbtye Ehternet, who manages the modem.
   

   

  I worked hard on this for so long and McAfee still blocking access to the Internet if I update definitions so to restart so I removed a second time. I installed the program software Antivirus malware from Windows and the Windows Firewall, which turns on automatically when you remove McAfee.  Intel took a horrible investment decision buy McAfee.

• my windows Live ID has been blocked access to the vlsc site. What can I do?

  I tried to access the vlsc site, and I got a page saying that my account was blocked access to the site.

  WHA t I can do

  Your login status is invited or blocked because you are currently signed in with a Windows Live ID that is not associated with the Microsoft Partner Network.
   
  While you are connected as a guest, you will be able to access content available for public view. Links that display locked icons are contained premium for members of partner network, and you will not be able to view that content until you either you sign in with a Windows Live ID associated with the network of partners or register in the network of partners and then sign in with your newly associated Windows Live ID.

  You will need to check with the Volume Licensing Service Center:
  https://partner.Microsoft.com/us/40046574

  
  For more information about how to contact the VLSC, click below:
  https://partner.Microsoft.com/us/40031077
   
   
   
  Sincerely,

  Marilyn

• Malware bytes blocks access to the 78.41.203.120

  a program on my computer tries to access the IP 78.41.203.120

  Malware bytes blocks access to the site saying it's dangerous.

  I can't find information on the web.

  Any help?

  Hello

  78.41.203.120
  http://dawhois.com/IP/78.41.203.120.html

  You should check with the support of Malwarebytes and their forums.

  Malwarebytes - Support
  http://www.Malwarebytes.org/support/

  Malwarebytes - Forums
  http://forums.Malwarebytes.org/

  I hope this helps.

  Rob Brown - Microsoft MVP<- profile="" -="" windows="" expert="" -="" consumer="" :="" bicycle=""><- mark="" twain="" said="" it="">

• Adobe flash player 11.0 blocks access to the Web site home pages

  Why is Adobe flash player 11.0, allowed to block access to the Web site home pages, until their trash is installed?  They should be prosecuted for punishment of the loss of time by Internet users, who spend countless hours trying to fix their garbage, which takes control of the web and blocks PCs access to their program settings, unless it is done according to their specific updates. N ' ILS OWN INTERNET and everything on it, or what?

  Are you sure he blocked it, or the web page requires Flash Player to see this?

  Most web pages require an element of Adobe Flash Player.

  First of all, try to enable Active Scripting in the areas of Sites Internet Options, security settings, trust.

  You should also add a corrupted on.

  Click Start, type: Internet Options

  Press enter

  Select the "Advanced" tab

  Under reset Internet Explorer settings, click "reset".

  This should restore the Internet Explorer default settings.

  Then reinstall Flash Player

  http://get.Adobe.com/flashplayer/

  ----------

  Flash Player

  Troubleshoot installation of Flash Player for Windows

  http://kb2.Adobe.com/CPS/191/tn_19166.html

  Troubleshooting player stability and performance

  http://blogs.Adobe.com/JD/2010/02/troubleshooting_player_stabili.html

  Uninstaller

  http://kb2.Adobe.com/CPS/141/tn_14157.html

  Flash Player Support Forum

  http://forums.Adobe.com/community/webplayers/flash_player

• Cisco ASA 5505 remote VPN access to the local network

  I have installed two ASA 5505 VPN site to site that works perfectly.  Now, I also need to have 1 customer site to remote access VPN with Cisco VPN dialer.  I can get the VPN dialer to connect the VPN and get a VPN IP address, but I do not have access to the remote network.  can someone take a look and see what I'm missing?  I have attached the ASA running config.

  Apologize for the misunderstanding.

  To access the remote vpn client 10.10.100.x subnet, the vpn-filter ACL is the opposite.

  Please please share the following ACL:

  FROM: / * Style Definitions * / table. MsoNormalTable {mso-style-name : « Table Normal » ; mso-tstyle-rowband-taille : 0 ; mso-tstyle-colband-taille : 0 ; mso-style-noshow:yes ; mso-style-priorité : 99 ; mso-style-qformat:yes ; mso-style-parent : » « ;" mso-rembourrage-alt : 0 cm 5.4pt cm 0 5.4pt ; mso-para-marge-haut : 0 cm ; mso-para-marge-droit : 0 cm ; mso-para-marge-bas : 10.0pt ; mso-para-marge-gauche : 0 cm ; ligne-hauteur : 115 % ; mso-pagination : widow-orphelin ; police-taille : 11.0pt ; famille de police : « Calibri », « sans-serif » ; mso-ascii-font-family : Calibri ; mso-ascii-theme-font : minor-latin ; mso-hansi-font-family : Calibri ; mso-hansi-theme-font : minor-latin ; mso-bidi-font-family : « Times New Roman » ; mso-bidi-theme-font : minor-bidi ;}

  outside_cryptomapVPN list of allowed ip extended access any 10.10.20.0 255.255.255.224

  TO:

  / * Style definitions * / table. MsoNormalTable {mso-style-name : « Table Normal » ; mso-tstyle-rowband-taille : 0 ; mso-tstyle-colband-taille : 0 ; mso-style-noshow:yes ; mso-style-priorité : 99 ; mso-style-qformat:yes ; mso-style-parent : » « ;" mso-rembourrage-alt : 0 cm 5.4pt cm 0 5.4pt ; mso-para-marge-haut : 0 cm ; mso-para-marge-droit : 0 cm ; mso-para-marge-bas : 10.0pt ; mso-para-marge-gauche : 0 cm ; ligne-hauteur : 115 % ; mso-pagination : widow-orphelin ; police-taille : 11.0pt ; famille de police : « Calibri », « sans-serif » ; mso-ascii-font-family : Calibri ; mso-ascii-theme-font : minor-latin ; mso-hansi-font-family : Calibri ; mso-hansi-theme-font : minor-latin ; mso-bidi-font-family : « Times New Roman » ; mso-bidi-theme-font : minor-bidi ;}

  outside_cryptomapVPN to access extended list ip 10.10.20.0 allow 255.255.255.224 all

  Hope that helps.

• ASA5505 can transfer clients to remote VPN access to the local network

  I have currently ASA 5505 and 2911-router and I am trying to configure the VPN topology.

  Can ASA5505 you transmit to remote VPN access clients LAN operated by another router?

  These two cases are possible? :

  (1) ASA 5505 and 2911-router are separate WAN interfaces, each connected directly to the ISP. But so can I connect an other interfaces LAN of ASA 5505 in a switch managed by 2911 router customers to distance-SSL-VPN to inject into the local network managed by the router?
  (2) ASA 5505 is behind router-2911. May 2911 router address public ip or public ip address VPN-access attempts have directly be sent to ASA 5505 when there is only a single public ip address address available?
  Long put short, ASA 5505 can inject its clients to remote-access-VPN as one of the hosts on the local network managed by 2911-router?
  Thank you.

  I could help you more if you can explain the purpose of this configuration and connectivity between the router and ASA.

  You can activate the reverse route on the dynamic plane on the SAA. The ASA will install a static route to the customer on the routing table. You can use a routing protocol to redistribute static routes to your switch on the side of LAN of the SAA.

• Client remote access VPN gets connected without access to the local network

  : Saved

  :

  ASA 1.0000 Version 2

  !

  hostname COL-ASA-01

  domain dr.test.net

  turn on i/RAo1iZPOnp/BK7 encrypted password

  i/RAo1iZPOnp/BK7 encrypted passwd

  names of

  !

  interface GigabitEthernet0/0

  nameif outside

  security-level 0

  IP 172.32.0.11 255.255.255.0

  !

  interface GigabitEthernet0/1

  nameif inside

  security-level 100

  IP 192.9.200.126 255.255.255.0

  !

  interface GigabitEthernet0/2

  Shutdown

  No nameif

  no level of security

  no ip address

  !

  interface GigabitEthernet0/3

  Shutdown

  No nameif

  no level of security

  no ip address

  !

  interface GigabitEthernet0/4

  Shutdown

  No nameif

  no level of security

  no ip address

  !

  interface GigabitEthernet0/5

  nameif failover

  security-level 0

  192.168.168.1 IP address 255.255.255.0 watch 192.168.168.2

  !

  interface Management0/0

  nameif management

  security-level 0

  192.168.2.11 IP address 255.255.255.0

  !

  passive FTP mode

  DNS server-group DefaultDNS

  domain dr.test.net

  network of the RAVPN object

  192.168.0.0 subnet 255.255.255.0

  network of the NETWORK_OBJ_192.168.200.0_24 object

  192.168.200.0 subnet 255.255.255.0

  network of the NETWORK_OBJ_192.9.200.0_24 object

  192.9.200.0 subnet 255.255.255.0

  the inside_network object-group network

  object-network 192.9.200.0 255.255.255.0

  external network object-group

  host of the object-Network 172.32.0.25

  Standard access list RAVPN_splitTunnelAcl allow 192.9.200.0 255.255.255.0

  access-list extended test123 permit ip host 192.168.200.1 192.9.200.190

  access-list extended test123 permit ip host 192.9.200.190 192.168.200.1

  access-list extended test123 allowed ip object NETWORK_OBJ_192.168.200.0_24 192.9.200.0 255.255.255.0

  192.9.200.0 IP Access-list extended test123 255.255.255.0 allow object NETWORK_OBJ_192.9.200.0_24

  pager lines 24

  management of MTU 1500

  Outside 1500 MTU

  Within 1500 MTU

  failover of MTU 1500

  local pool RAVPN 192.168.200.1 - 192.168.200.254 255.255.255.0 IP mask

  no failover

  ICMP unreachable rate-limit 1 burst-size 1

  ASDM image disk0: / asdm - 66114.bin

  don't allow no asdm history

  ARP timeout 14400

  NAT (inside, outside) source Dynamics one interface

  NAT (it is, inside) static static source NETWORK_OBJ_192.9.200.0_24 destination NETWORK_OBJ_192.168.200.0_24 NETWORK_OBJ_192.168.200.0_24 NETWORK_OBJ_192.9.200.0_24

  Route outside 0.0.0.0 0.0.0.0 172.32.0.2 1

  Timeout xlate 03:00

  Timeout conn 01:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02

  Sunrpc timeout 0:10:00 h323 0:05:00 h225 mgcp from 01:00 0:05:00 mgcp-pat 0:05:00

  Sip timeout 0:30:00 sip_media 0:02:00 prompt Protocol sip-0: 03:00 sip - disconnect 0:02:00

  Timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute

  timeout tcp-proxy-reassembly 0:01:00

  Floating conn timeout 0:00:00

  dynamic-access-policy-registration DfltAccessPolicy

  identity of the user by default-domain LOCAL

  the ssh LOCAL console AAA authentication

  Enable http server

  http 0.0.0.0 0.0.0.0 outdoors

  http 0.0.0.0 0.0.0.0 inside

  No snmp server location

  No snmp Server contact

  Server enable SNMP traps snmp authentication linkup, linkdown warmstart of cold start

  Crypto ipsec transform-set ikev1 ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac

  Crypto ipsec transform-set ikev1 ESP-DES-SHA esp - esp-sha-hmac

  Crypto ipsec transform-set ikev1 SHA-ESP-3DES esp-3des esp-sha-hmac

  Crypto ipsec transform-set ikev1 esp ESP-DES-MD5-esp-md5-hmac

  Crypto ipsec transform-set ikev1 ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac

  Crypto ipsec transform-set ikev1 ESP-3DES-MD5-esp-3des esp-md5-hmac

  Crypto ipsec transform-set ikev1 ESP-AES-256-SHA esp-aes-256 esp-sha-hmac

  Crypto ipsec transform-set ikev1 ESP-AES-128-SHA aes - esp esp-sha-hmac

  Crypto ipsec transform-set ikev1 ESP-AES-192-SHA esp-aes-192 esp-sha-hmac

  Crypto ipsec transform-set ikev1 ESP-AES-128-MD5-esp - aes esp-md5-hmac

  crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 pfs Group1 set

  crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 define ikev1 transform-set ESP-AES-128-SHA ESP-AES-128-MD5 ESP-AES-192-SHA ESP-AES-192-MD5 ESP-AES-256-SHA ESP-AES-256-MD5 ESP-3DES-SHA MD5-ESP-3DES ESP-DES-SHA ESP-DES-MD5

  outside_map card crypto 65535-isakmp dynamic ipsec SYSTEM_DEFAULT_CRYPTO_MAP

  outside_map interface card crypto outside

  Crypto ca trustpoint ASDM_TrustPoint0

  Terminal registration

  name of the object CN = KWI-COL-ASA - 01.dr.test .net, C = US, O = KWI

  Configure CRL

  Crypto ikev1 allow outside

  IKEv1 crypto policy 10

  authentication crack

  aes-256 encryption

  sha hash

  Group 2

  life 86400

  IKEv1 crypto policy 20

  authentication rsa - sig

  aes-256 encryption

  sha hash

  Group 2

  life 86400

  IKEv1 crypto policy 30

  preshared authentication

  aes-256 encryption

  sha hash

  Group 2

  life 86400

  IKEv1 crypto policy 40

  authentication crack

  aes-192 encryption

  sha hash

  Group 2

  life 86400

  IKEv1 crypto policy 50

  authentication rsa - sig

  aes-192 encryption

  sha hash

  Group 2

  life 86400

  IKEv1 crypto policy 60

  preshared authentication

  aes-192 encryption

  sha hash

  Group 2

  life 86400

  IKEv1 crypto policy 70

  authentication crack

  aes encryption

  sha hash

  Group 2

  life 86400

  IKEv1 crypto policy 80

  authentication rsa - sig

  aes encryption

  sha hash

  Group 2

  life 86400

  IKEv1 crypto policy 90

  preshared authentication

  aes encryption

  sha hash

  Group 2

  life 86400

  IKEv1 crypto policy 100

  authentication crack

  3des encryption

  sha hash

  Group 2

  life 86400

  IKEv1 crypto policy 110

  authentication rsa - sig

  3des encryption

  sha hash

  Group 2

  life 86400

  IKEv1 crypto policy 120

  preshared authentication

  3des encryption

  sha hash

  Group 2

  life 86400

  IKEv1 crypto policy 130

  authentication crack

  the Encryption

  sha hash

  Group 2

  life 86400

  IKEv1 crypto policy 140

  authentication rsa - sig

  the Encryption

  sha hash

  Group 2

  life 86400

  IKEv1 crypto policy 150

  preshared authentication

  the Encryption

  sha hash

  Group 2

  life 86400

  IKEv1 crypto policy 65535

  preshared authentication

  3des encryption

  sha hash

  Group 2

  life 86400

  Telnet 192.9.200.0 255.255.255.0 inside

  Telnet timeout 30

  SSH 0.0.0.0 0.0.0.0 management

  SSH 0.0.0.0 0.0.0.0 outdoors

  SSH 66.35.45.128 255.255.255.192 outside

  SSH 0.0.0.0 0.0.0.0 inside

  SSH timeout 30

  SSH version 2

  Console timeout 0

  a basic threat threat detection

  Statistics-list of access threat detection

  no statistical threat detection tcp-interception

  WebVPN

  allow outside

  AnyConnect image disk0:/anyconnect-win-2.5.2014-k9.pkg 1

  AnyConnect enable

  tunnel-group-list activate

  attributes of Group Policy DfltGrpPolicy

  internal RAVPN group policy

  RAVPN group policy attributes

  value of server WINS 192.9.200.164

  value of 66.35.46.84 DNS server 66.35.47.12

  VPN-filter value test123

  Ikev1 VPN-tunnel-Protocol

  Split-tunnel-policy tunnelspecified

  Split-tunnel-network-list value test123

  Dr.kligerweiss.NET value by default-field

  username test encrypted password xxxxxxx

  username admin password encrypted aaaaaaaaaaaa privilege 15

  vpntest Delahaye of encrypted password username

  type tunnel-group RAVPN remote access

  attributes global-tunnel-group RAVPN

  address RAVPN pool

  Group Policy - by default-RAVPN

  IPSec-attributes tunnel-group RAVPN

  IKEv1 pre-shared-key *.

  !

  class-map inspection_default

  match default-inspection-traffic

  !

  !

  type of policy-card inspect dns preset_dns_map

  parameters

  maximum message length automatic of customer

  message-length maximum 512

  Policy-map global_policy

  class inspection_default

  inspect the preset_dns_map dns

  inspect the ftp

  inspect h323 h225

  inspect the h323 ras

  Review the ip options

  inspect the netbios

  inspect the rsh

  inspect the rtsp

  inspect the skinny

  inspect esmtp

  inspect sqlnet

  inspect sunrpc

  inspect the tftp

  inspect the sip

  inspect xdmcp

  !

  global service-policy global_policy

  context of prompt hostname

  no remote anonymous reporting call

  call-home

  Profile of CiscoTAC-1

  no active account

  http https://tools.cisco.com/its/service/oddce/services/DDCEService destination address

  email address of destination [email protected] / * /

  destination-mode http transport

  Subscribe to alert-group diagnosis

  Subscribe to alert-group environment

  Subscribe to alert-group monthly periodic inventory 2

  Subscribe to alert-group configuration periodic monthly 2

  daily periodic subscribe to alert-group telemetry

  aes encryption password

  Cryptochecksum:b001e526a239af2c73fa56f3ca7667ea

  : end

  COL-ASA-01 #.

  Here is a shot made inside interface which can help as well, I've tried pointing the front door inside the interface on the target device, but I think it was a switch without ip route available on this subject I think which is always send package back to Cisco within the interface

  Test of Cape COLLAR-ASA-01 # sho | in 192.168.200

  25: 23:45:55.570618 192.168.200.1 > 192.9.200.190: icmp: echo request

  29: 23:45:56.582794 192.168.200.1.137 > 192.9.200.164.137: udp 68

  38: 23:45:58.081050 192.168.200.1.137 > 192.9.200.164.137: udp 68

  56: 23:45:59.583176 192.168.200.1.137 > 192.9.200.164.137: udp 68

  69: 23:46:00.573517 192.168.200.1 > 192.9.200.190: icmp: echo request

  98: 23:46:05.578110 192.168.200.1 > 192.9.200.190: icmp: echo request

  99: 23:46:05.590057 192.168.200.1.137 > 192.9.200.164.137: udp 68

  108: 23:46:07.092310 192.168.200.1.137 > 192.9.200.164.137: udp 68

  115: 23:46:08.592468 192.168.200.1.137 > 192.9.200.164.137: udp 68

  116: 23:46:10.580795 192.168.200.1 > 192.9.200.190: icmp: echo request

  COL-ASA-01 #.

  Any help or pointers greatly appreciated, I have do this config after a long interval on Cisco of the last time I was working it was all PIX so just need to expert eyes to let me know if I'm missing something.

  And yes I don't have a domestic network host to test against, all I have is a switch that cannot route and bridge default ip helps too...

  Hello

  The first thing you should do to avoid problems is to change the pool VPN to something else than the current LAN they are not really directly connected in the same network segment.

  You can try the following changes

  attributes global-tunnel-group RAVPN

  No address RAVPN pool

  no mask RAVPN 192.168.200.1 - 192.168.200.254 255.255.255.0 ip local pool

  local pool RAVPN 192.168.201.1 - 192.168.201.254 255.255.255.0 IP mask

  attributes global-tunnel-group RAVPN

  address RAVPN pool

  no nat (it is, inside) static source NETWORK_OBJ_192.168.200.0_24 NETWORK_OBJ_192.168.200.0_24 static destination NETWORK_OBJ_192.9.200.0_24 NETWORK_OBJ_192.9.200.0_24

  In the above you first delete the VPN "tunnel-group" Pool and then delete and re-create the VPN pool with another network and then insert the same "tunnel-group". NEX will remove the current configuration of the NAT.

  the object of the LAN network

  192.168.200.0 subnet 255.255.255.0

  network of the VPN-POOL object

  192.168.201.0 subnet 255.255.255.0

  NAT (inside, outside) 1 static source LAN LAN to static destination VPN-VPN-POOL

  NAT configurations above adds the correct NAT0 configuration for the VPN Pool has changed. It also inserts the NAT rule to the Summit before the dynamic PAT rule you currently have. He is also one of the problems with the configurations that it replaces your current NAT configurations.

  You have your dynamic PAT rule at the top of your NAT rules currently that is not a good idea. If you want to change to something else will not replace other NAT configurations in the future, you can make the following change.

  No source (indoor, outdoor) nat Dynamics one interface

  NAT source auto after (indoor, outdoor) dynamic one interface

  NOTICE! PAT dynamic configuration change above temporarily interrupt all connections for users on the local network as you reconfigure the dynamic State PAT. So if you make this change, make sure you that its ok to still cause little reduced in the current internal users connections

  Hope this helps

  Let me know if it works for you

  -Jouni

• SRA 4600 Web Application Firewall blocks access to the Portal login page.

  We have a 8.0.0.1 - 16 4600 running and run the Web Application Firewall.  We had a few reports of users home that our portal page was not available, only tried IE, but everything went well here.  Today we had an internal machine with the same question and noticed that it was blocking WAF access: "threat of avoided WAF: Injection SQL 1 attack" you can see nothing wrong with this machine that may be cause the WAF to block the Portal login page.  Here are the event log:

  "Jun 10 09:34 sslvpn1 SSLVPN: id = sslvpn sn = C0EAE4745184 time =" 2015-06-10 09:34 ' vp_time = '2015-06-10 14:34 UTC' pri fw = xx.xx.xx.xx = 2 m = 34 c = 402 src = dst = xx.xx.xx.xx xx.xx.xx.xx user = 'Unknown' usr = 'Unknown' msg = "prevented WAF threat: SQL Injection attack 1 ' URI=remote.ncmic.com:443/ rule-match =" _ga = ga1.2.1366358136.1433946841; " _dc_gtm_ua-21325736-1 = 1 "AttackCat = 'SQL Injection attack 1' somm ="SQL Injection is a technique of attack used to exploit websites that construct SQL statements from user-supplied input,"hamid = category '9005' = 'command execution - SQL Injection' agent =" Mozilla/4.0 (compatible; " MSIE 7.0; Windows NT 6.1; Trident/7.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729 .NET CLR 3.0.30729; Media Center PC 6.0; NET4.0C;. NET4.0E; Tablet PC 2.0)' geoCountryID = '0' geoCountryName = 'LAN' geoRegionName = 'unknown' geoCityName = 'unknown '.

  Other machines can access the page without problem... thoughts?

  Can not reproduce this problem at the moment...

• Ipad Cisco ipsec VPN connects but not access to the local network

  Hi guys,.

  I am trying to connect our ipads to vpn to access network resources. IPSec cisco ipad connects but not lan access and cannot ping anything not even not the interfaces of the router.

  If I configure the vpn from cisco on a laptop, it works perfectly, I can ping all and can access resources on the local network if my guess is that the traffic is not going in the tunnel vpn between ipad and desktop.

  Cisco 877.

  My config is attached.

  Any ideas?

  Thank you

  Build-in iPad-client is not useful to your configuration.

  You have three options:

  (1) remove the ACL of your vpn group. Without split tunneling client will work.

  2) migrate legacy config crypto-map style. Here, you can use split tunneling

  3) migrate AnyConnect.

  The root of the problem is that the iPad Gets the split tunneling-information. But instead of control with routing traffic should pass through the window / the tunnel and which traffic is allowed without the VPN of the iPad tries to build a set of SAs for each line in your split-tunnel-ACL. But with the model-virtual, SA only is allowed.

• cannot access shares the local computer

  Hi-

  Win7 64 bit.   I use homegroup, and I have this Win7PC on my local network with XP and Vista PC.  I can see the 2 other PCs on the Win7 PC and get to their shared folders.  None of them access to the part of it.  I have the name of workgroup defined correctly on all (including this PC Win7).

  In addition, oddly enough, on the WIn7 PC, in WIndows Explorer, I can navigate to C:\Users\Public BUT if I try to go into WIndows Explorer, then fall below computer - C: to the network and open it, I see the other 2 PC and the local PC.  The WIn7 PC is called "kirk".  So, in network - Kirk, IF I open it I see 'users' share.  BUT if I click on it, I get the error:

  \\kirk\users is not accessible.  You might not have permission to use this network resource.

  I am logged in as administrator (on Kirk).

  So, to rephrase, I am connected to a Win7 PC as an administrator.  I can navigate to C:\Users\Public in WIndows Explorer.

  BUT if I go to "Network Neighborhood" in WIndows Explorer (it's actually just "network") I see the local PC named Kirk.  If I click on it, I see 'User' (share).  I can't go to see 'public '.

  To make things more awkward, I could access it until a few days ago and I has not installed anything new, although WIn7 can be updated automatically.

  Help!

  Thank you

  Kelly

  Hi-

  Thanks for the list of things.  There was a lot of good links in there.  I went through everything without the blinkers "it worked before" and "I won't change anything" on each link there is, I've lived and all checked.  The only one I had to do something opened ports in my firewall mcafee.

  Nothing helps.

  This PC is named kirk and I still don't see files shared this PC itself in windows Explorer - network\kirk. for me, very odd, I am connected to kirk as an administrator.  I open Explorer windows on kirk.  I can see c:\users\public in windows Explorer, but I do not see network\\kirk\users

  so, I thought, let's start over.

  I went to the center of network share and changed "active network" of the type "work network" type "home network" and it is now.

  working group name has not changed so it's always "the Star", so I can see all the other no WIn7 PC and PC WIn7 himself can see that it is me in network neighborhood.

  I'll reboot and be sure to x 2.  very weird.

  Thanks for your help!

  Kelly

• block access to the port 7778

  Hi all
  
  
  I use Linux and Oracle 10gAs 4 application server.
  
  
  Our Application of Test is access by users using the port 7778, I want just a few users to access my test application (just the admin user) and all other users should not have access to the application, even if they specify the right URL and the port number.
  
  I mean blocking port 7778 to a range of IP address for an IP range
  using oracle 10gAs.
  
  Some access using oracle 10gas server application control policy.
  
  
  Thanks and greetings
  Jean Louis
  
  Published by: Yvon March 18, 2013 04:11

  Oracle HTTP Server is based on Apache. It comes with mod_access. Like mod_access allows you to restrict some IP address ranges, you would be able to do what you need.

  Note that it may be difficult to restrict access to a specific port (you want to use a proxy/firewall to do this), but you can restrict access to some URI. Assume that you use the/foo URI to access your application, something like the below directive would do the trick:

  
     Order allow,deny
     Allow from 192.168.1.0/24
     Allow from 127
  
  

  See https://httpd.apache.org/docs/2.0/mod/mod_access.html for more information or [url https://www.google.nl/search?q=apache+restrict+access+ip+range&aq=1&oq=apache+ip+range+access] Google it.

  Thank you
  EJ

• MacAfee blocked access to the web in Firefox?

  I use Firefox as my default browser and McAfee Security. Today, a popup asking if I would allow Firefox to access the internet and I accidentally pressed on 'no '. I had to use Chrome to reach this site because Firefox does not connect what anyone on the internet. How to solve this problem? My email is [email protected]

  My e-mail is [email protected]
  See updated McAfee Security Center and firewall settings to allow access to the Internet, Firefox

  Email or reply to this message if you need help