Search Results

I jump on firewall (Cisco ASA) and did show conn where i found following ASA(config)# show conn 1946 in use, 50002 most used UDP eng 10.0.12.255:44678 inside 10.0.10.92:59654, idle 0:00:00, bytes …

I am testing following ACL on Cisco 3850 L3 switch : C3850#show ip access-lists 101 Extended IP access list 101 10 deny ip any any fragments 20 permit ip any any (268 matches) I applied acc …

I have fully functional cisco Anyconnect VPN running on Cisco ASA5585-X and today i got requirement that there are some remote public sites we need to whitelist our VPN public IP to access them over V …

I have configured Cisco ASA 5585-x with Active/Standby mode, cisco best practice saying you should use Virtual MAC address on interface to avoid traffic disruption when you do failover. now question i …

I am seeing very strange issue and now i am losing my mind so thought ask you folk. I have following two components connected point to point on Cisco CML 2.0 [nxos-9000v]--------------------[ASAv] 90 …

If we use anycast gateway in this design in that case leaf would be my edge gateway for all hosts connected to that leaf so how does Host-A will send traffic to Host-B via firewall? … Should i disable anycast gateway so each VLAN traffic route via firewall (my firewall is gateway for all VLANs) what do you think about this design or this is not something i should be using? …

We have cisco ASA5585-X with SSP-20 running in production and we need more power so planning to replace SSP-20 with SSP-60 module but not sure we can just hot swap with SSP-20? Does ASA5585-X support …

After upgrade to newer version 9.8.2 resolved all of the issue. Thanks for your support.

I have small office where running cisco ASA ASA5506 and version 9.4(1) and it's also configured for IPsec VPN tunnel, My LAN subnet is 10.1.1.0/24 So i have found very interesting things in LAN wher …

I have Cisco ASA 5585 and it has 10G interface in port channel where i configured multiple vlan sub-interface, is it worth to monitor every single sub-interface for failover policy or just monitor phy …

DDoS is essential part of my life so i am back with more question, Yes we started getting memcache based UDP amplification attacks, all source ports are 11211 coming from many random source IPs, we ha …

Finally my settle down with following Rules and it successfully helping us stopping DDoS. 1 deny udp any eq 11211 any You can see in graph we are getting close to ~10Gbps DDoS attack but none able …

How does firewall handle UDP port stat? … because in TCP we know its stateful but how does firewall understand its UDP traffic initiated from inside to outside to keep that port open bi-directional traffic? …

I have noticed on Cisco ASA 5585 (SSP-20) interface error counter going up specially overrun but so far we haven't seen any production impact or issue, error rate is low so its not noticable but would …

I have Cisco Nexus 9396 switch which is running L3 mode and i have configured bunch of IPv4 access-list in Ingress for firewalling to block certain traffic. I am reading about TCAM and wanted to und …