Cisco have announced the 8.2 version ASA code. Plenty of new features in this one so Ill bullet point some of the key ones and leave the rest for you to dig out from Cisco.com.

* BotNET Traffic Filter
* Transparent Firewalling for IPV6
* Shared SSL VPN Licensing across multiple ASAs
(more…)

It looks like Cisco have finally announced the SSC5 (as well as IPS v7) - an IPS module for the diminutive ASA 5505.
Not sure on pricing or availability yet, but it looks like it is missing some features from the full blown IPS sensors.
(more…)

Here is a quick and dirty config tip.

If you look at your running config you will notice that your ISAKMP keys are stored in plain-text. In other words, unencrypted. This still stands after issuing the “service password-encryption” command.

Click more to find out how to encrypt those keys using AES!

(more…)

A lot of cisco techs are in the same position. You only have remote access to a router but need to perform an IOS upgrade. This might be to squash a bug or simply because Cisco TAC will not proceed with a TAC case until you do so.

How do you verify that the IOS image has not been corrupted between cisco.com and your device? Read on to find out!

(more…)

As any of my colleagues will tell you, I suffer from what is almost an addiction to buying tech related items.
To name a few of my Ebay Cisco bargains, I picked up an ACS 1113 appliance for £129 and sold it for £1200, bought a Cat 500 24 port switch for £35 and an AP1242 for £70.

Its at this point that I am going to point you towards our ebay Feed, which will bring up any Cisco related Auction Items that are in their last 4 hours. This way you will never miss another bargain!

Check it out HERE!

As some of you may know, Cisco VPN support was added to the iPhone as of Firmware 2.0.
I have tested the functionality and can report that not only does it work, but it is very easy to set up.

(more…)

It seemed like a good idea to me, and when searching I found this:

http://www.microdirect.co.uk/ProductInfo.aspx?ProductID=17745&source=googleps

They aren’t cheap that for sure. Security also starts to become a concern, but I can imagine these being exceptionally useful. With the prevalence of Bluetooth in laptops it looks like a tidy idea!

Let us know what you think in the comments section!

Looks like there will be new Cisco routers available soon. It was only a matter of time given the release of the 888, 860, 861 etc, especially given that an ADSL router wasn’t released at the same time.

Release notes here:

http://www.cisco.com/en/US/docs/ios/12_4/12_4x/12_4_15xz/rn_SR520xz.html

Here is an interesting one.

Basically, the ASPROX SQL Injection attack appears to be quite commonplace at the moment, but also quite serious.
To cut it short, there is a 20,000 strong botnet out there trying these attacks against websites which use .asp.
The tool actually uses google to search for these sites and then attempts to exploit them by inserting an HTML iFrame which downloads a malicious Java Script which then installs a Trojan.

Carry on reading to find out how to block this on a Cisco router!
(more…)

This news is a couple of weeks old, but is definitely worth having a look at anyway.

Basically, a guy called Sebastian Muniz of Core Security released a proof of concept root-kit for IOS routers.

(more…)