Tag Info

New answers tagged

0

Setting permissions to 777 and disabling SELinux is almost always the wrong thing to do. You should look at your logs (/var/log/audit.log ?) for AVC denied messages. These should give you some idea of what needs to be done. You can then investiage further and take appropriate action. This may be changing a boolean, adding a suitable filesystem label etc. You ...


0

Despite having chmod 777 on the image file on the tftp server, I was lacking some SELinux settings. I've disabled selinux temporarily by setting "echo 0 >/selinux/enforce" and the copy worked after that.


0

Ok, so I beliveve I figured it out. So even though my Openswan box is not behind a NAT, and has a direct NIC with a public IP I had to turn on NAT-Traversal. With this in mind I had to add leftsoureip=172.16.255.1 to tell Openswan what source address to use when communicating with the right side of the Tunnel. The last thing I had to do was to enable ...


1

If you place your publicly accessible resources in a DMZ that is publicly addressed, hair-pinning will likely not be required.


0

You can apply a management access rule to the control plan of the asa and effectively permit/deny specific source addresses from accessing the webvpn address. Please reference the following: http://www.cisco.com/c/en/us/td/docs/security/asa/asa83/asdm63/configuration_guide/config/access_management.html


0

I'd check the firewall rules ( what ports are allowed and not allowed ex: ssh ) I'd also look at the subnet if they are on two different subnet you may want to route it through or put them on the same


0

I think what you want is to do application layer inspection and alter it to include other ports. http://www.cisco.com/c/en/us/td/docs/security/asa/asa72/configuration/guide/conf_gd/inspect.html



Top 50 recent answers are included