nameif ethernet0 outside security0
nameif ethernet1 inside security100
interface ethernet0 100basetx
interface ethernet1 100basetx
ip address outside 209.165.201.3 255.255.255.224
ip address inside 209.165.202.129 255.255.255.0
hostname saigonlab
arp timeout 14400
no failover
names
pager lines 24
logging buffered debugging
nat (inside) 0 209.165.201.3 255.255.255.224
route outside 0.0.0.0 0.0.0.0 209.165.201.1 1
access-list acl_out permit icmp anyany
access-group acl_out in interface outside
no snmp-server location
no snmp-server contact
snmp-server community public
mtu outside 1500
mtu inside 1500

What Cisco is PIX?

Cisco PIX is one kind of special-purpose hardware firewall. All editions Cisco PIX all has 500 series products numbers. Most common home use and the small network uses the product is PIX 501; But many medium enterprises use PIX 515 to take the enterprise firewall.

The PIX firewall uses the PIX operating system. Although the PIX operating system and Cisco IOS looks like unusual approaching, but said to these extremely familiar IOS user, or has the enough difference to make they dizzy.

The PIX series firewall uses PDM (PIX equipment management, PIX Device Manager) takes the graphical interface. This graphical interface system is the Java procedure which downloads through the homepage browser.

In the ordinary circumstances, a PIX firewall has the extroverted connection, uses for continually to a Internet router in, this router company arrives on again Internet. At the same time, PIX also has an introverted connection, uses for continually to a local area network switchboard on, this switchboard company enters the internal network.

What Cisco is ASA?

But ASA is in the Cisco series the brand-new firewall and the counter- malicious software security apparatus. (Did not have and uses in PIX this product which static state data packet filtered to do mixed)

The ASA series product all is 5,500 series. Enterprise version including 4 kinds: Firewall, IPS, Anti-X, as well as VPN. But said to small and the medium company, but also has the commercial edition.

Generally speaking, Cisco altogether has 5 kind of models. All models use the ASA 7.2.2 editions software, connection also extremely approximate Cisco PIX.Cisco PIX and ASA have the very big difference in the performance aspect, but, even if is the ASA lowest model, its provides the performance also is much higher than foundation PIX.

With PIX similar, ASA also provides such as the invasion protection system (IPS, intrusion prevention system), as well as VPN concentrator. In fact, ASA may substitute for three kind of independent equipment - Cisco the PIX firewall, Cisco the VPN 3,000 series concentrators, as well as Cisco IPS 4,000 series sensors.

Now, we already have looked at two kind of securities tools respective basic situation, under we come the result which sees them mutually to compare.

PIX to ASA

Although PIX is a section extremely outstanding firewall, but the security aspect situation actually is changing with each new day. Merely uses a static state data packet to filter the firewall to come to carry on the protection for your network to be by far insufficient. Speaking of the network, the new threat emerges one after another incessantly - includes the virus, the worm, unnecessary software (for instance P2P software, game, immediate communication software), network cheat, as well as application procedure stratification plane attack and so on.

If an equipment may deal with the many kinds of threats, we called it has provided "anti-X" the ability, or said it has provided "the multiple threat (multi-threat)" the protection. But PIX exactly is unable to provide this kind of level the protection.

The overwhelming majority company did not hope uses installs PIX to carry on the static firewall to filter, simultaneously uses some other tools to protect other threats again the means. They hoped uses "collection all functions to a body" the equipment - perhaps uses UTM (unification threat management) the equipment.

But ASA exactly aimed at these different types the attack to provide the protection. It even compared to a UTM equipment fiercer - but, must become true UTM, it also needs to install a CSC-SSM module (CSC-SSM, content security as well as control safe service, Content Security and Control Security Service) only then is good. This module provides the anti-X function in ASA. If does not have CSC-SSM, that ASA function looks like can like PIX.

Then, which talent suits your enterprise? Just like we usually said, this must think your enterprise the demand decides. But, I or favor first choose ASA, after but is PIX. First, a ASA price must have to be lower than similar function PIX. Did not discuss except the cost reason that, at least said from the logic, chooses ASA to mean chose renewed a better technology.

Basic PIX Configuration
Installing WebSENSE
Config NAT Stats and Conduits
Config Multiple Interfaces
Config Authentication
Config the Primary PIX Firewall
Verify IPSec Configuration
Passwrod Recovery & Image Update
Configuring the CSIS Feature Set
Configure Cisco Secure ACS NT
Configure AAA and Authentication Proxy
Verify Authentication Proxy Configuration
Configure the PIX as a DHCP Server
Configuring PIX as a DHCP Client
Configuring Logging
Configuring Logging -Verification
Denying Outbound Traffic
Allowing Outbound Traffic
Configure PIX to work with Websense
Configure WebSense to Block by URL
WebSense to Block by Workstation
Configure the Fixup Protocol on PIX
Configuring PIX for IDS Signatures
CSACS Install and Add User
Configure IKE and IPsec on the PIX

Microsoft, Juniper, Cisco ...: Pix Firewall Nat 0

Cisco CCNP Video Mentor

http://rapidshare.com/files/33243769/CCNP-Video-Mentor.part01.rar
http://rapidshare.com/files/33243788/CCNP-Video-Mentor.part02.rar
http://rapidshare.com/files/33243762/CCNP-Video-Mentor.part03.rar
http://rapidshare.com/files/33243760/CCNP-Video-Mentor.part04.rar
http://rapidshare.com/files/33243784/CCNP-Video-Mentor.part05.rar
http://rapidshare.com/files/33243765/CCNP-Video-Mentor.part06.rar
http://rapidshare.com/files/33243789/CCNP-Video-Mentor.part07.rar
http://rapidshare.com/files/33243747/CCNP-Video-Mentor.part08.rar

http://rapidshare.com/files/31192350/cnpeurb.part1.rar
http://rapidshare.com/files/31192347/cnpeurb.part2.rar
http://rapidshare.com/files/31192340/cnpeurb.part3.rar

Key:HDRBV-H73DV-7W2Q4-DPWY6-YV893

Key :KK4C4-9JRDR-G3MPR-9KHM6-BJ73Y

Default Windows 2000, XP and 2003 systems in a domain or Active Directory tree cache the passwords and credentials of previously logged in users.This is done so that the users can still login again if the Domain Controller or ADS tree can not be reached either because of Controller failure or network problems. These cached passwords are stored as hashes in the local systems registry at the values HKEY_LOCAL_MACHINE\SECURITY\CACHE\NL$1 through NL$10.
http://www.cr0.net:8040/misc/cachedump-1.0.zip

Windows Command:

cachedump >mydump.txt

If you look in the mydump.txt file it should contain data that looks something like the following:

Mydump.txt Contents:

jdoe:ac45d39d1029a02938b9302918c9210 admin:23acb302913da1293840329a12931ac tjanes:2394820194832ac239104928130ab32

Default Windows 2000, XP and 2003 systems in a domain or Active Directory tree cache the passwords and credentials of previously logged in users.These cached passwords are stored as hashes in the local systems registry at the values HKEY_LOCAL_MACHINE\SECURITY\CACHE\NL$1 through NL$10.

» Microsoft Office 2007 Enterprise Edition (514MB)
Tải Bản Cài Đặt Về: http://urltea.com/hbu

» Microsoft Office 2007 Professional (397MB)
Tải Bản Cài Đặt Về: http://urltea.com/hbv

» Microsoft Office Small Business 2007:
Tải Bản Cài Đặt Về: http://urltea.com/hbw

» Microsoft Office Home and Student 2007:
Tải Bản Cài Đặt Về: http://urltea.com/hbx

» Microsoft Office Publisher 2007:
Tải Bản Cài Đặt Về: http://urltea.com/hby

Note : Cách kích hoạt MS Office 2007 ko cần đăng ký:

1. Cài đặt MS Office 2007 như bình thường, chú ý ko điền serial (cứ bỏ qua mục điền serial).

2. Sau khi cài đặt xong đừng chạy MS Office ngay, mà mở thư mục sau:
C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\Proof.en

3. Dùng Notepad mở tập tin Proof.XML, sẽ thấy đoạn sau:

[Feature Id=”SetupXmlFiles” Cost=”1248″>
[OptionRef Id=”AlwaysInstalled”/>
[/Feature>

Hãy sửa AlwaysInstalled thành NeverInstalled, sau đó save lại.

Mã đăng ký:MVGB2-R88MH-29TQF-Y69Q3-24PYR

pix515efw# sh run
: Saved
:
PIX Version 7.0(5)
!
hostname pix515efw
enable password JcBPsWbJVFSO1Ui/ encrypted
names
dns-guard
!
interface Ethernet0
speed 10
duplex full
nameif outside
security-level 0
ip address 222.xxx.xxx.33 255.255.255.252
!
interface Ethernet1
speed 100
duplex full
nameif inside
security-level 100
ip address 172.21.2.8 255.255.0.0
!
interface Ethernet2
speed 100
duplex full
nameif dmz
security-level 10
ip address 172.16.1.10 255.255.0.0
!
passwd qI*0Y8r.zNm7Q497 encrypted
ftp mode passive

PENU and PC communications

	Weplab Weplab is a tool to review the security of WEP encryption in wireless networks from an educational point of view. Several attacks are available so it can be measured the efectiveness and minimun requirements of each one.
	AirCrack 802.11 sniffer and WEP/WPA key cracker.
	AirSnort AirSnort is a wireless LAN (WLAN) tool which recovers encryption keys. AirSnort operates by passively monitoring transmissions, computing the encryption key when enough packets have been gathered. 802.11b, using the Wired Equivalent Protocol (WEP), is crippled with numerous security flaws. Most damning of these is the weakness described in " Weaknesses in the Key Scheduling Algorithm of RC4 " by Scott Fluhrer, Itsik Mantin and Adi Shamir. Adam Stubblefield was the first to implement this attack, but he has not made his software public. AirSnort, along with WEPCrack, which was released about the same time as AirSnort, are the first publicly available implementaions of this attack.
	dweputils dweputils is a set of utilities that allows you to fully audit and secure a wep encrypted network. it consists of a packet collection tool called dwepdump, which allows you to collect wep encrypted packets using a prism2 card, as well as dwepcrack which allows you to recover wep keys using any of the commonly used methods, and dwepkeygen a secure 40-bit key generator that creates keys that aren't vulnerable to the Tim Newsham 2^21 attack using a variable length seed.
	WEPCrack WEPCrack is an open source tool for breaking 802.11 WEP secret keys. This tool is is an implementation of the attack described by Fluhrer, Mantin, and Shamir in the paper "Weaknesses in the Key Scheduling Algorithm of RC4" While Airsnort has captured the media attention, WEPCrack was the first publically available code that demonstrated the above attack. We released code and announced to bugtraq on Aug 12, 2001. Airsnort released code about a week later, but had a much more useable and complete implementation for both collection and cracking. Adam Stubblefield and AT&T had the first publically announced verification of the attack, but did not release their source code for public review and use.

Microsoft, Juniper, Cisco ...: PENU and PC communications