Introduction This is a reminder for me where to find the commands because there is a bug in the web gui that means whenever you try to apply an action-group it will implement it with a next-hop address and next-hop
Domain Controller to Domain Controller through Non-NATing Firewall
Introduction In most situations you are going to have VPN or private network to allow DC to DC traffic to work across the internet, in fact you would need either a VPN or private link as NAT would not allow
Juniper Netscreen Packet-Tracer Alternative (Debug Flow)
Introduction Thought I would write a quick one on this as I often need to look it up as it is incredibly helpful. Cisco ASA has the packet-tracer command for testing but netscreen firewalls have something a bit different. Debug
Modify ASA Startup Config
Introduction If you ever need to modify an ASA startup config for example if you are changing internet provider and need your wife to just reboot the device so it works with your new ISP’s PPPoE settings, here’s what you
Cisco ASA regex blocking
Introduction I was actually doing some research on DDOS attacks and what the ASA is capable of, when I came across this little known feature. Regex or regular expressions are used to match text strings or patterns in text. My
NFSv3 Ports through a firewall
Introduction If you need to use NFS through any security boundary then you will need to know the ports for NFSv3 to add to your ACLs or firewall rule sets. Protocol NFS uses TCP and UDP Ports The standard ports
Cisco ASA SSH Public Key Authentication
Introduction SSH is a truly great and secure protocol. We all know we should be using it instead of telnet right. Right, but are you using all of its amazing abilities? Probably not is my guess, cause I wasn’t for
Creating ASA Inspection Maps
Introduction There is confusion around exactly what class-maps, policy-maps and service-policies achieve on an ASA. When you take the time to look into and test, they are fairly easy to master and very powerful. Class Maps Class maps are used