Packets encrypted SSL

Similar Questions

• How to cancel the encryption SSL on ACE after scan IPS

  Hello

  A query on the SSL termination. This is the logical path,

  The traffic encrypted hits the router-> hits the ASA IPS-> and then hits the VIP for balancing by ACE.

  Encrypted SSL traffic must end on ACE load balancing. However, the IPS analysis cannot be performed on a decrypted traffic.

  How can we re - encrypt traffic to complete on the load balancer. Or is it a bad idea because of performance issues?

  Kind regards.

  Yes, your understanding is on-site. Both IPS/CSC need traffic decrypted to do something meaningful.

  Concerning

  Farrukh

• I would like to configure Firefox to use the encryption SSL 3.0 and TLS 1.0 - how do I do this?

  I have Firefox 29.0.1 - Mozilla26 - 1.0
  My instructions to fill out a form online for a work environment are the following:
  To configure Firefox

     Select Tools
     Select Options...
     Select the Advanced icon
     Select the Encryption tab
     Under Protocols, select the check boxes for Use SSL 3.0 and Use TLS 1.0
  

  There is no encryption for the Advanced icon tab. How can I update my encryption?

  I have the same problem, but my version is 31.0 this will also work for me?

• Packet encryption and decryption by IPSEC Tunnel

  Hello world

  You must confirm if Site A has VPN IPSEC to Site B through Public network.

  PCs on site say a package is sent in clear text to the switch, then switch sends to the VPN router.

  Router VPN to site A will make encryption and send over a WAN link encrypted.

  When the packet reaches a router B Site it will decrypt the packet and send clear text to PC right of the site B?

  Thank you

  MAhesh

  Hello Manu,

  Yes, you are right.

  Encryption and decryption will perform VPN closing devices.

  Best regards

  Eugene

• Encryption SSL for Apex 4.1

  Hi guys,.
  I'm trying to implement SSL encryption for my local installation.
  
  I'm under APEX 4.1 under Windows 7 (32 bit), Oracle XE 11 G with built-in plsql gateway installation.
  
  The APEX documentation I looked at which deals with SSL:
  http://docs.Oracle.com/CD/E23903_01/doc/ doc.41 /e21678/adm_mg_service_set.htm#AEADM297
  
  load to enable HTTPS in APEX_ADMIN (internal schema) in respect of the security.
  
  It did not work as APEX was still visible under http://localhost: 8080/apex and using the protocol HTTPS comes page not found error. In addition to this he locked my Admin account for the INTERNAL workspace. So I had to pass it back via the SQL in SQL Plus.
  
  Limited experience to do something similar in Tomcat, in my view, one needs certificates etc. prior to this.
  
  Anyone who has done this before, can you please indicate one any documentation/blog post, etc. tutorial that shows how its done? Thank you very much.

  Hello

  http://docs.Oracle.com/CD/E17781_01/install.112/e18802/TOC.htm#BABGCDJJ
  >
  HTTPS is not supported natively with the HTTP listener built into Oracle Database XE. If you want HTTPS support, use a different listening port Web, like Apache, which grants support HTTPS and provide powers of Attorney for the URLS provided by Oracle Database XE.
  >

  Kind regards
  Jari

  http://dbswh.webhop.NET/dbswh/f?p=blog:Home:0

  Published by: jarola on January 25, 2012 09:42

  Have you change the parameter instance admin APEX enable not HTTPS. It requires that you use the HTTPS protocol on your web listening port.

  Here's how reverse HTTPS for APEX instance admin requirement
  http://docs.Oracle.com/CD/E23903_01/doc/doc.41/e21678/adm_mg_service_set.htm#autoId17

• ASA in ASA VPN-encrypted packets "get lost" in the tunnel

  Hello

  We have a VPN site-to site between ASAs. Both on the v9.1.6 code. On distance ASA, it also has to do NAT source and destination. We see the traffic 'interesting' made from the results of the remote side in ipsec SA. Late has ITS correspondent. Corresponding spinnakers. However, the remote end HIS watch packets encrypted, decrypted none. Late ASA shows no packets encrypted/decrypted. So, how can I "lose" packages in my VPN tunnel if both ends have matching SAs/SPIs?

  Best regards

  Richard

  Hello

  Could be incorrect rules NAT or an access list refusing ESP packets somewhere in the path between the two ASAs.

• Encrypt the connection to the SQL Server

  I have a new installation of OpenManage Essentials 2.1 and have a quick question. Our database of MOE is hosted on a remote SQL Server cluster. Is it possible to configure the database connection to use encryption/SSL when connecting to the cluster? We need it for compliance with our security policy, but unfortunately the installation that the user interface does not expose this option.

  If not is it possible to manually change the connection string?

  Note that this is in that concerning the encryption of the SQL Server connection between HOME servers and database, not HTTPS.

  Thank you
  Andrew

  Hi André,.

  OME encrypts all sensitive information before it is transferred to SQL Server.

  Also, the connection to SQL Server used by OME information is encrypted and there is no option for a user to change this.

  I hope this helps.

  Thank you
  Vijay.

• Implementation for Oracle Apex 4.1 SSL

  Hi guys,.
  
  I'm a little confused on how to proceed with the encryption SSL with APEX. Throughout I've been running it as embedded Pl/SQL. SSL emerged as a requirement, but now I have to climb an Apache HTTP server that must be configured for SSL.
  
  I had look online to download the HTTP server but fell on Application Server 10 G R3 after going through several links in the Oracle documentation.
  http://www.Oracle.com/technetwork/middleware/IAS/downloads/index.html
  
  I don't know what to download to my goal. What I want is an HTTP server that I can configure for SSL and have it work with APEX. If someone does something like this, would be great if you could point me to good sense. See you soon.
  
  Windows 7
  Apex 4.1 running on integrated Gateway plsql
  Oracle 11G XE

  Hello

  You can also use Tomcat to deploy the earpiece of the APEX.
  http://dbswh.webhop.NET/dbswh/f?p=blog:read:0:article:2000
  And you can also use Apache and mod_jk with for example Tomcat
  http://dbswh.webhop.NET/dbswh/f?p=blog:read:0:article:1614000346698411

  Kind regards
  Jari

• the ASA 5505 configuration

  Hey guys

  I have a server that accepts traffic on a port within my network and external clients need to access this server. the nat and accesslist works well, but it is a matter of wait time and connection failed... Note that without the client server asa directly works fine... and note also that the traffic is encrypted (ssl)... are there additional provisions that I have to configure? y is it expire? Packet Capture see traffic from the outside to reach inside the interface but no response from the inside to the outside...

  I don't have that only one access list reloads the traffic from the outside to the server and a nat rule.

  advice needed...

  Thank you

  Hello

  So from what I understand

  "inside the xxx.114 interface the default route on the server is xxx.1 which is one interface on another asa.

  This means that the default route on the server is an another ASA. It won't work unless you apply TCP statebypass.

  ASA is a statefull firewall. This means for the TCP IP, always see two way traffic. If SYN crosses an ASA should see SYN/ACK back. If an ASA did not syn and sees syn/ack due to asymmetric routing, is wrong in the wok.

  Change the default route in the same ASA server or configure TCP statebypass (which is not recommended however).

  Thank you

• HUB & SPOKE environment with ASA5512 as the hub and ASA5505 spoke.

  I can't get the error. The phase 1 ends, then the errors begin, 7.0.0.2 no routine receipt notification message no proposal chosen, connection to peer 7.0.0.2 reason terminate remote proxy N/A N/A of local Proxy, 7.0.0.2 removing peer table Correlator has failed, no match, second being demolished requested reason user, Group 7.0.0.2 automatic NAT detection status remote endpoint is not behind the NAT device this end is not behind the NAT device. The other end the ASA5512 I get IP 7.1.0.2 no valid authentication not found for the Group of tunnel type, remote endpoint is not behind the NAT device, the DAP records selected for the DfltAccessPolicy connection, Phase 1 is complete, any IPSEC security association proposals found unacceptable IP 7.1.0.2 error of QM WSF, peer table correlator of withdrawal has not no matches , 7.1.0.2 session being demolished reasoning Phase 2 Mismatch, 7.1.0.2 disconnected session type IKEV1, recevied packet encrypted with no drop HIS matchin.

  I searched internet and found many results but as changes implemented I always end up back at this stage. Any HELP would be greatly appreciated. Two days lost in the LABORATORY. I'll post the configs. This a test soon to go into production. Thank you

  Ken

  ASA1 # executed sho
  : Saved
  :
  ASA 9.1 Version 2
  !
  hostname ASA1
  domain TEST1.CA
  activate 8Ry2YjIyt7RRXU24 encrypted password
  names of
  !
  interface GigabitEthernet0/0
  nameif outside
  security-level 100
  7.0.0.2 IP address 255.255.255.0
  !
  interface GigabitEthernet0/1
  nameif AS1toR1
  security-level 50
  1.0.0.2 IP address 255.255.255.0
  !
  interface GigabitEthernet0/2
  nameif AS1toR2
  security-level 50
  3.0.0.2 IP address 255.255.255.0
  !
  interface GigabitEthernet0/3
  Shutdown
  No nameif
  no level of security
  no ip address
  !
  interface GigabitEthernet0/4
  Shutdown
  No nameif
  no level of security
  no ip address
  !
  interface GigabitEthernet0/5
  Shutdown
  No nameif
  no level of security
  no ip address
  !
  interface Management0/0
  management only
  nameif management
  security-level 0
  IP 192.168.1.1 255.255.255.0
  !
  passive FTP mode
  DNS domain-lookup outside
  DNS domain-lookup AS1toR1
  DNS domain-lookup AS1toR2
  management of the DNS domain-lookup service
  DNS server-group DefaultDNS
  Server name 201.201.201.201
  domain TEST1.CA
  permit same-security-traffic inter-interface
  permit same-security-traffic intra-interface
  network object obj - 1.0.0.0
  network of the object 2.0.0.0
  2.0.0.0 subnet 255.255.255.0
  network of the object 6.0.0.0
  6.0.0.0 subnet 255.255.255.0
  the 7.1.0.0 object network
  7.1.0.0 subnet 255.255.255.0
  network of the object 8.0.0.0
  8.0.0.0 subnet 255.255.255.0
  network of the object 9.0.0.0
  subnet 9.0.0.0 255.255.255.0
  the DM_INLINE_NETWORK_3 object-group network
  network-object 1.0.0.0 255.255.255.0
  network-object 3.0.0.0 255.255.255.0
  network-object 2.0.0.0
  network-object 8.0.0.0
  the DM_INLINE_NETWORK_4 object-group network
  network-object 6.0.0.0
  object-network 9.0.0.0
  the DM_INLINE_NETWORK_1 object-group network
  network-object 6.0.0.0
  object-network 9.0.0.0
  the DM_INLINE_NETWORK_2 object-group network
  network-object 1.0.0.0 255.255.255.0
  network-object 3.0.0.0 255.255.255.0
  network-object 2.0.0.0
  network-object 8.0.0.0
  the DM_INLINE_NETWORK_5 object-group network
  network-object 1.0.0.0 255.255.255.0
  network-object 3.0.0.0 255.255.255.0
  network-object 2.0.0.0
  network-object 8.0.0.0
  the DM_INLINE_NETWORK_6 object-group network
  network-object 6.0.0.0
  object-network 9.0.0.0
  Head of extended NETWORK allowed any one ip access list
  access-list extended hq vpnend permit ip object-group DM_INLINE_NETWORK_3-group of objects DM_INLINE_NETWORK_4
  access-list extended vpnend hq permit ip object-group DM_INLINE_NETWORK_1-group of objects DM_INLINE_NETWORK_2
  Outside_cryptomap_15 list extended access permitted ip object-group DM_INLINE_NETWORK_5-group of objects DM_INLINE_NETWORK_6
  Outside_access_in of access allowed any ip an extended list
  Outside_access_in list extended access allowed icmp any4 any4
  AS1toR2_access_in list extended access allowed icmp any4 any4
  AS1toR2_access_in of access allowed any ip an extended list
  AS1toR1_access_in of access allowed any ip an extended list
  AS1toR1_access_in list extended access allowed icmp any4 any4
  pager lines 24
  Enable logging
  asdm of logging of information
  Outside 1500 MTU
  MTU 1500 AS1toR1
  MTU 1500 AS1toR2
  management of MTU 1500
  no failover
  ICMP unreachable rate-limit 1 burst-size 1
  don't allow no asdm history
  ARP timeout 14400
  no permit-nonconnected arp
  Access-group Outside_access_in in interface outside
  Access-group AS1toR1_access_in in the AS1toR1 interface
  Access-group AS1toR2_access_in in the AS1toR2 interface
  !
  router ospf 1
  network 1.0.0.0 255.255.255.0 area 0
  Network 3.0.0.0 255.255.255.0 area 0
  network 7.0.0.0 255.255.255.0 area 0
  Journal-adj-changes
  !
  Route outside 0.0.0.0 0.0.0.0 7.0.0.1 125
  outdoor 6.0.0.0 255.255.255.0 7.0.0.1 125
  outdoor 9.0.0.0 255.255.255.0 7.0.0.1 125
  Timeout xlate 03:00
  Pat-xlate timeout 0:00:30
  Timeout conn 01:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
  Sunrpc timeout 0:10:00 h323 0:05:00 h225 mgcp from 01:00 0:05:00 mgcp-pat 0:05:00
  Sip timeout 0:30:00 sip_media 0:02:00 prompt Protocol sip-0: 03:00 sip - disconnect 0:02:00
  Timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
  timeout tcp-proxy-reassembly 0:01:00
  Floating conn timeout 0:00:00
  dynamic-access-policy-registration DfltAccessPolicy
  identity of the user by default-domain LOCAL
  EOU allow none
  Enable http server
  http 192.168.1.2 255.255.255.255 management
  No snmp server location
  No snmp Server contact
  Server enable SNMP traps snmp authentication linkup, linkdown warmstart of cold start
  Sysopt preserve-vpn-flow of connection
  Crypto ipsec transform-set ikev1 ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac
  Crypto ipsec transform-set ikev1 ESP-DES-SHA esp - esp-sha-hmac
  Crypto ipsec transform-set ikev1 SHA-ESP-3DES esp-3des esp-sha-hmac
  Crypto ipsec transform-set ikev1 esp ESP-DES-MD5-esp-md5-hmac
  Crypto ipsec transform-set ikev1 ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac
  Crypto ipsec transform-set ikev1 ESP-3DES-MD5-esp-3des esp-md5-hmac
  Crypto ipsec transform-set ikev1 ESP-AES-256-SHA esp-aes-256 esp-sha-hmac
  Crypto ipsec transform-set ikev1 ESP-AES-128-SHA aes - esp esp-sha-hmac
  Crypto ipsec transform-set ikev1 ESP-AES-192-SHA esp-aes-192 esp-sha-hmac
  Crypto ipsec transform-set ikev1 ESP-AES-128-MD5-esp - aes esp-md5-hmac
  Crypto ipsec transform-set ikev1 ESP-AES-128-SHA-TRANS-aes - esp esp-sha-hmac
  Crypto ipsec ikev1 transform-set ESP-AES-128-SHA-TRANS mode transit
  Crypto ipsec transform-set ikev1 ESP-AES-128-MD5-TRANS-aes - esp esp-md5-hmac
  Crypto ipsec ikev1 transform-set ESP-AES-128-MD5-TRANS mode transit
  Crypto ipsec transform-set ikev1 ESP-AES-192-SHA-TRANS esp-aes-192 esp-sha-hmac
  Crypto ipsec ikev1 transform-set ESP-AES-192-SHA-TRANS mode transit
  Crypto ipsec transform-set ikev1 ESP-AES-192-MD5-TRANS esp-aes-192 esp-md5-hmac
  Crypto ipsec ikev1 transform-set ESP-AES-192-MD5-TRANS mode transit
  Crypto ipsec transform-set ikev1 ESP-AES-256-SHA-TRANS esp-aes-256 esp-sha-hmac
  Crypto ipsec ikev1 transform-set ESP-AES-256-SHA-TRANS mode transit
  Crypto ipsec transform-set ikev1 ESP-AES-256-MD5-TRANS esp-aes-256 esp-md5-hmac
  Crypto ipsec ikev1 transform-set ESP-AES-256-MD5-TRANS mode transit
  Crypto ipsec transform-set ikev1 ESP-3DES-SHA-TRANS esp-3des esp-sha-hmac
  Crypto ipsec ikev1 transform-set ESP-3DES-SHA-TRANS mode transit
  Crypto ipsec transform-set ikev1 ESP-3DES-MD5-TRANS esp-3des esp-md5-hmac
  Crypto ipsec ikev1 transform-set ESP-3DES-MD5-TRANS mode transit
  Crypto ipsec transform-set ikev1 ESP-DES-SHA-TRANS esp - esp-sha-hmac
  Crypto ipsec ikev1 transform-set ESP-DES-SHA-TRANS mode transit
  Crypto ipsec transform-set ikev1 ESP-DES-MD5-TRANS esp - esp-md5-hmac
  Crypto ipsec ikev1 transform-set ESP-DES-MD5-TRANS mode transit
  Crypto ipsec transform-set esp-3des esp-md5-hmac map-VPN1 ikev1
  Crypto ipsec ikev2 AES256 ipsec-proposal
  Protocol esp encryption aes-256
  Esp integrity sha - 1, md5 Protocol
  Crypto ipsec ikev2 ipsec-proposal AES192
  Protocol esp encryption aes-192
  Esp integrity sha - 1, md5 Protocol
  Crypto ipsec ikev2 ipsec-proposal AES
  Esp aes encryption protocol
  Esp integrity sha - 1, md5 Protocol
  Crypto ipsec ikev2 proposal ipsec 3DES
  Esp 3des encryption protocol
  Esp integrity sha - 1, md5 Protocol
  Crypto ipsec ikev2 ipsec-proposal OF
  encryption protocol esp
  Esp integrity sha - 1, md5 Protocol
  Crypto ipsec pmtu aging infinite - the security association
  Dynamic crypto map SYSTEM_DEFAULT_CRYPTO_MAP 5 match address Outside_cryptomap_15
  Dynamic crypto map SYSTEM_DEFAULT_CRYPTO_MAP 5 set pfs
  Dynamic crypto map SYSTEM_DEFAULT_CRYPTO_MAP 5 set transform-set of card-VPN1 ikev1
  Crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 5 the value reverse-road
  Dynamic crypto map DYNMAP 10 set pfs
  Dynamic crypto map DYNMAP 10 set transform-set of card-VPN1 ikev1
  Crypto dynamic-map DYNMAP 10 the value reverse-road
  card crypto Outside_map 65535-isakmp dynamic ipsec SYSTEM_DEFAULT_CRYPTO_MAP
  card crypto HQ2REMOTE 10-isakmp dynamic ipsec DYNMAP
  interface card crypto outside HQ2REMOTE
  trustpool crypto ca policy
  Crypto ikev1 allow outside
  IKEv1 crypto policy 1
  preshared authentication
  3des encryption
  md5 hash
  Group 2
  lifetime 28800
  Telnet timeout 5
  SSH timeout 5
  SSH group dh-Group1-sha1 key exchange
  Console timeout 0
  VPN-addr-assign local reuse / deadline 30
  VPN load balancing
  lbpublic outside interface
  lbprivate AS1toR1 interface
  a basic threat threat detection
  Statistics-list of access threat detection
  no statistical threat detection tcp-interception
  WebVPN
  allow outside
  No anyconnect essentials
  attributes of Group Policy DfltGrpPolicy
  value of 10.10.10.10 WINS server
  value of server DNS 201.201.201.201
  VPN-idle-timeout no
  Ikev1 VPN-tunnel-Protocol l2tp ipsec without ssl-client
  Split-tunnel-network-list value network
  value by default-field TEST1.CA
  WebVPN
  disable ActiveX-relays
  IPSec-attributes tunnel-group DefaultL2LGroup
  IKEv1 pre-shared-key *.
  attributes global-tunnel-group DefaultRAGroup
  LOCAL high school-authentication-server-group
  LOCAL authority-server-group
  NAT-assigned-public-ip outside
  IPSec-attributes tunnel-group DefaultRAGroup
  IKEv1 pre-shared-key *.
  NOCHECK Peer-id-validate
  authentication of the user IKEv1 no
  attributes global-tunnel-group DefaultWEBVPNGroup
  LOCAL high school-authentication-server-group
  IPSec-attributes tunnel-group DefaultWEBVPNGroup
  IKEv1 pre-shared-key *.
  NOCHECK Peer-id-validate
  authentication of the user IKEv1 no
  by default-group DefaultL2LGroup tunnel-Group-map
  !
  class-map inspection_default
  match default-inspection-traffic
  !
  !
  type of policy-card inspect dns preset_dns_map
  parameters
  maximum message length automatic of customer
  message-length maximum 512
  Policy-map global_policy
  class inspection_default
  inspect the preset_dns_map dns
  inspect the ftp
  inspect h323 h225
  inspect the h323 ras
  Review the ip options
  inspect the netbios
  inspect the rsh
  inspect the rtsp
  inspect the skinny
  inspect esmtp
  inspect sqlnet
  inspect sunrpc
  inspect the tftp
  inspect the sip
  inspect xdmcp
  !
  global service-policy global_policy
  context of prompt hostname
  no remote anonymous reporting call
  call-home
  Profile of CiscoTAC-1
  no active account
  http https://tools.cisco.com/its/service/oddce/services/DDCEService destination address
  email address of destination [email protected] / * /
  destination-mode http transport
  Subscribe to alert-group diagnosis
  Subscribe to alert-group environment
  Subscribe to alert-group monthly periodic inventory 24
  Subscribe to alert-group configuration periodic monthly 24
  daily periodic subscribe to alert-group telemetry
  Cryptochecksum:022709234965ad8943628e790ed5ed1f
  : end
  ASA1 #.
   
   
   
   
   
  ASA2 # executed sho
  : Saved
  :
  ASA Version 8.2 (5)
  !
  hostname ASA2
  domain TEST2.CA
  activate 8Ry2YjIyt7RRXU24 encrypted password
  2KFQnbNIdI.2KYOU encrypted passwd
  names of
  !
  interface Ethernet0/0
  switchport access vlan 14
  !
  interface Ethernet0/1
  switchport access vlan 24
  !
  interface Ethernet0/2
  Shutdown
  !
  interface Ethernet0/3
  Shutdown
  !
  interface Ethernet0/4
  Shutdown
  !
  interface Ethernet0/5
  Shutdown
  !
  interface Ethernet0/6
  Shutdown
  !
  interface Ethernet0/7
  switchport access vlan 4
  !
  interface Vlan1
  No nameif
  no level of security
  no ip address
  !
  interface Vlan4
  nameif management.
  security-level 0
  192.168.1.101 IP address 255.255.255.0
  management only
  !
  interface Vlan14
  nameif outside
  security-level 100
  IP address dhcp setroute
  !
  interface Vlan24
  nameif inside
  security-level 50
  6.0.0.2 IP address 255.255.255.0
  !
  passive FTP mode
  management of the DNS domain-lookup service.
  DNS domain-lookup outside
  DNS lookup field inside
  DNS server-group DefaultDNS
  domain TEST2.CA
  permit same-security-traffic inter-interface
  permit same-security-traffic intra-interface
  the DM_INLINE_NETWORK_1 object-group network
  network-object 1.0.0.0 255.255.255.0
  network-object 2.0.0.0 255.255.255.0
  network-object 3.0.0.0 255.255.255.0
  network-object 8.0.0.0 255.255.255.0
  the DM_INLINE_NETWORK_2 object-group network
  network-object 6.0.0.0 255.255.255.0
  object-network 9.0.0.0 255.255.255.0
  the DM_INLINE_NETWORK_5 object-group network
  network-object 1.0.0.0 255.255.255.0
  network-object 2.0.0.0 255.255.255.0
  network-object 3.0.0.0 255.255.255.0
  network-object 8.0.0.0 255.255.255.0
  the DM_INLINE_NETWORK_6 object-group network
  network-object 6.0.0.0 255.255.255.0
  object-network 9.0.0.0 255.255.255.0
  access-list extended vpnend hq permit ip object-group DM_INLINE_NETWORK_1-group of objects DM_INLINE_NETWORK_2
  Access extensive list permits all ip a REMOTEEND
  access-list extended hq vpnend permit ip object-group DM_INLINE_NETWORK_5-group of objects DM_INLINE_NETWORK_6
  Outside_access_in of access allowed any ip an extended list
  Outside_access_in list extended access permit icmp any one
  Inside_access_in of access allowed any ip an extended list
  Inside_access_in list extended access permit icmp any one
  pager lines 24
  Enable logging
  asdm of logging of information
  management of MTU. 1500
  Outside 1500 MTU
  Within 1500 MTU
  no failover
  ICMP unreachable rate-limit 1 burst-size 1
  don't allow no asdm history
  ARP timeout 14400
  Access-group Outside_access_in in interface outside
  Inside_access_in access to the interface inside group
  !
  router ospf 1
  Network 6.0.0.0 255.255.255.0 area 0
  network 7.1.0.0 255.255.255.0 area 0
  Journal-adj-changes
  !
  outdoor 1.0.0.0 255.255.255.0 7.0.0.2 125
  outdoor 2.0.0.0 255.255.255.0 7.0.0.2 125
  Outdoor 3.0.0.0 255.255.255.0 7.0.0.2 125
  outdoor 8.0.0.0 255.255.255.0 7.0.0.2 125
  Timeout xlate 03:00
  Timeout conn 01:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
  Sunrpc timeout 0:10:00 h323 0:05:00 h225 mgcp from 01:00 0:05:00 mgcp-pat 0:05:00
  Sip timeout 0:30:00 sip_media 0:02:00 prompt Protocol sip-0: 03:00 sip - disconnect 0:02:00
  Timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
  timeout tcp-proxy-reassembly 0:01:00
  Floating conn timeout 0:00:00
  dynamic-access-policy-registration DfltAccessPolicy
  network-acl REMOTEEND
  EOU allow none
  Enable http server
  http 0.0.0.0 0.0.0.0 management.
  No snmp server location
  No snmp Server contact
  Server enable SNMP traps snmp authentication linkup, linkdown cold start
  Crypto ipsec transform-set ESP-AES-128-SHA aes - esp esp-sha-hmac
  Crypto ipsec transform-set ESP-AES-128-MD5-esp - aes esp-md5-hmac
  Crypto ipsec transform-set ESP-AES-192-SHA esp-aes-192 esp-sha-hmac
  Crypto ipsec transform-set ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac
  Crypto ipsec transform-set ESP-AES-256-SHA 256 - aes - esp esp-sha-hmac
  Crypto ipsec transform-set ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac
  Crypto ipsec transform-set esp-SHA-ESP-3DES-3des esp-sha-hmac
  Crypto ipsec transform-set ESP-DES-SHA esp - esp-sha-hmac
  Crypto ipsec transform-set ESP-DES-MD5 esp - esp-md5-hmac
  Crypto ipsec transform-set ESP-3DES-MD5-esp-3des esp-md5-hmac
  Crypto ipsec transform-set esp-3des esp-md5-hmac map-VPN1
  life crypto ipsec security association seconds 28800
  Crypto ipsec kilobytes of life - safety 4608000 association
  Dynamic crypto map SYSTEM_DEFAULT_CRYPTO_MAP 65535 set pfs
  SYSTEM_DEFAULT_CRYPTO_MAP game 65535 dynamic-map crypto transform-game of card-VPN1
  Crypto than dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 the value reverse-road
  crypto HQ2REMOTE 15 card matches the address vpnend-to-AC
  card crypto HQ2REMOTE 15 set pfs
  card crypto HQ2REMOTE 15 set type of connection are created only
  card crypto HQ2REMOTE 15 peer set 7.0.0.2
  crypto HQ2REMOTE 15 map-VPN1 transform-set card game
  card crypto HQ2REMOTE 15 defined security-association life seconds 28800
  card crypto HQ2REMOTE 15 set security-association kilobytes of life 4608000
  card crypto HQ2REMOTE 15 set reverse-road
  card crypto HQ2REMOTE 65535-isakmp dynamic ipsec SYSTEM_DEFAULT_CRYPTO_MAP
  interface card crypto outside HQ2REMOTE
  crypto ISAKMP allow outside
  crypto ISAKMP policy 15
  preshared authentication
  3des encryption
  md5 hash
  Group 2
  lifetime 28800
  crypto ISAKMP ipsec-over-tcp port 10000
  VPN-addr-assign local reuse / time 5
  Telnet timeout 5
  SSH timeout 5
  Console timeout 0
  interface ID client DHCP-client to the outside
   
  a basic threat threat detection
  Statistics-list of access threat detection
  no statistical threat detection tcp-interception
  SSL encryption, 3des-sha1
  WebVPN
  allow outside
  attributes of Group Policy DfltGrpPolicy
  value of 10.10.10.10 WINS server
  value of server DNS 201.201.201.201
  VPN-idle-timeout no
  Protocol-tunnel-VPN IPSec l2tp ipsec svc webvpn
  value of Split-tunnel-network-list REMOTEEND
  value by default-field TEST2.CA
  chip-removal-disconnect disable card
  IPSec-attributes tunnel-group DefaultL2LGroup
  pre-shared key *.
  attributes global-tunnel-group DefaultRAGroup
  LOCAL authority-server-group
  IPSec-attributes tunnel-group DefaultRAGroup
  pre-shared key *.
  IPSec-attributes tunnel-group DefaultWEBVPNGroup
  pre-shared key *.
  tunnel-group 7.0.0.2 type ipsec-l2l
  tunnel-group 7.0.0.2 ipsec-attributes
  pre-shared key *.
  NOCHECK Peer-id-validate
  by default-group 7.0.0.2 tunnel-Group-map
  !
  class-map inspection_default
  match default-inspection-traffic
  !
  !
  type of policy-card inspect dns preset_dns_map
  parameters
  maximum message length automatic of customer
  message-length maximum 512
  Policy-map global_policy
  class inspection_default
  inspect the preset_dns_map dns
  inspect the ftp
  inspect h323 h225
  inspect the h323 ras
  Review the ip options
  inspect the netbios
  inspect the rsh
  inspect the rtsp
  inspect the skinny
  inspect esmtp
  inspect sqlnet
  inspect sunrpc
  inspect the tftp
  inspect the sip
  inspect xdmcp
  !
  global service-policy global_policy
  context of prompt hostname
  no remote anonymous reporting call
  call-home
  Profile of CiscoTAC-1
  no active account
  http https://tools.cisco.com/its/service/oddce/services/DDCEService destination address
  email address of destination [email protected] / * /
  destination-mode http transport
  Subscribe to alert-group diagnosis
  Subscribe to alert-group environment
  Subscribe to alert-group monthly periodic inventory
  monthly periodicals to subscribe to alert-group configuration
  daily periodic subscribe to alert-group telemetry
  Cryptochecksum:0d04273f55e788e2a4ad4d025084d33d
  : end
  ASA2 #.

  Mike

  It's been a while since I've done these on your ASA 9.1, you use the dynamic map called DYNMAP but you didn't say what the IP addresses are in function, IE. shouldn't you have.

  address crypto dynamic-map 10 DYNMAP  <--- you="" have="" multiple="" acls="" for="" the="" same="" thing="" so="" not="" sure="" what="" you="" want="" to="">

  Also you don't need all these additional channel for cryptographic subnets inputs pointing outward, IE. the default route is sufficient, but it won't hurt.

  Jon

• What does a padlock icon next to my main Inbox folder?

  I use Thunderbird to manage my email and cannot connect the server of the provider. I can connect with another device and directly on the internet. I remember this icon of a padlock next to the front main folder. Could be my problem?

  A lock next to the account means that Thunderbird has this account set in place to use encryption (SSL/TLS) to connect to the remote server.

  If you are not able to access it, it could be that your settings are false, for instance configured to use SSL/TLS, but the server does not support or you have an incorrect address / configured port.

  Find out what encryption settings provider they support and check that Thunderbird is configured to use: look in the account settings, then the server settings.

• Confirm the NEW Security Exception error message!

  It's becoming routine with Thunderbird. My company uses GMail. Periodically, I get the parade without end of popup confirm Security Exception. It doesn't seem to be what I can do. I tried the various "fixes" posted in other threads without result. Contact your provider? Tried to contact Google AND make your job responsibilities?

  I REALLY DO NOT want to use Outlook. Does anyone have an idea?

  You use Avast Anti-virus and said to analyze your incoming and outgoing messages (for some reason any).
  Since Avast cannot look in the SSL/TLS encrypted to your server sessions, it generates a certificate for the Google Server and tries to sneak in. This is what Thunderbird warns you for good reasons:
  Thunderbird can not verify the self-signed certificate Avast. This looks like a man in the middle attack, and in fact it is. Avast is intercepting your connection to the server and connects to the Google Server on your behalf. I hope to have a lot of faith in Avast, I wouldn't be able to analyze all my mail see my Gmail password. And you know what they do with this knowledge?

  For example, you can specify either Avast not to analyze your encrypted SSL/TLS traffic, or live with the warning of Thunderbird. There is nothing to 'fixed' in Thunderbird, it works as expected.

• SOGo connector for Thunderbird

  Hi all

  First of all, I hope that this question was not asked again; I'm sorry if this is the case.

  In fact, after Zindus reached its end of life a year ago, I'm looking for a new way to sync my contacts, managed by Zimbra with Thunderbird.
  In this context, I would like to know what the community Thunderbird SOGo connector for TB (http://www.sogo.nu/fr/downloads/frontends.html). In particular, why is this add-on not installable via interface of Thunderbird?

  Thank you very much in advance for your help,.

  See you soon,.

  Neirda

  Safety is always a difficult question to answer. Certainly the stuff to Add - ons.mozilla.org (AMO) go through a process of code by the moderators control it. But source code is everywhere and the review is effective to the person conducting the review the day. SOGO is an established project open source, so if security is really something to worry about, you can always hire someone to browse the source code. That's what AMO. On a personal note I don't have a lot of concerns about the safety of SOGO simply because it is open source, the code can be examined and it would be a brave project hat would mess in their own nest with malware etc in their package.

  However, the connector is only a part of the package of SoGo, a tool to connect to their server of groupware software. A live demo which can be accessed here http://www.sogo.nu/tour/online_demo.html the fact, that it can be used for other things is really just a bonus for the community as a by-product of them use standards based protocols.

  On a practical level several antivirus editors insert anti-solutions modules Thunderbird when you install packages. Here's what your informal appeal as well (they are not on AMO). Given that many of them intercept and decode encrypted SSL communications, I'd be more concerned that they have a backdoor to three letter agencies and I would be on the sogo connector. My trust in the internet privacy died a long time ago! but I still trust free unless there is some reason not, simply because the source code is available.

• Outlook express emails

  How can I fix my accout email on outlook express, it won't send my emails

  I had this same problem, try this:

  Click Tools > account settings > edit your profile > more settings > advanced.

  For Hotmail users make sure you have these settings:

  Incoming (POP3) server: 995 (check this server requires an encrypted SSL connection)
  Outgoing server (SMTP): 25

  Use the following connection encryption type: AUTO Make sure AUTO is selected, because this is what makes the difference

  OK, then finish and try to send a test email to yourself and wallah (well it worked for me).

  Thank you

  For more information, please see the links below.

  http://support.Microsoft.com/kb/287604

  or

  http://email.about.com/od/outlookexpresstroubles/Qt/et_fix_sending.htm

• Implemented the WVC54GCA so that it sends an email to my account gmail for motion detection.

  Hello... I'm trying to configure the WVC54GCA so that motion detection sends an email to my gmail account. I have configured the smtp and port, but I get a failure when I send a test email.

  If someone managed to get this working?

  My gmail is configured for the transfer of pop.

  It is my understanding that Gmail requires a secure and encrypted (SSL) connection.  However, since the current WVC54GCA doesn't support SSL, you won't be able to connect to your Gmail account.