Subscribe:
RSS feed
Still we cannot find any freely available usefull IKE State Monitoring for our VPN Tunnels in 2018…thats bad. That’s why I have grabbed my laptop for a couple of sleepless nights and created from TIG Stack and Maxmind Geolite Free and with Python an IKE State Monitoring Tool. See the building blocks for that service […]
April 19, 2017
The following Application is a nice tool that was built to automate report generation and to make monthly or weekly report analisys where you can find the changes in the firewall events between months or weeks. The Palo Alto Firewall has a great built-in Reporting Service that can generate any kind of custom reports within […]
May 6, 2014
On packetpushers.net somebody wrote an articel about automatically get the outputs of show command of the cisco asa with lynx. That makes it possible to see if a specific counter for a feature, service or process or just interface counter changes, mainly increases, but you cannot see the size of the increase. In troubleshooting it […]
May 5, 2014
The followings links can be used for the list of Cisco ASA SNMP MIBs. Cisco ASA SNMP MIBs: ftp://ftp.cisco.com/pub/mibs/supportlists/asa/asa-supportlist.html ftp://ftp.cisco.com/pub/mibs/v2/CISCO-IPSEC-FLOW-MONITOR-MIB.my OIDs Information page: http://www.mibdepot.com/cgi-bin/getmib3.cgi?win=mib_av&i=1&n=CISCO-IPSEC-FLOW-MONITOR-MIB&r=hp&f=ipsec-flow.mi2&v=v2&t=tree IKE SNMP Queries example 1. Check my IP in the firewall that terminates vpns. OID 1.3.6.1.4.1.9.9.171.1.2.3.1.3 OID NAME cikeTunRemoteValue OID Description The value of the local peer identity. If the local […]
December 10, 2013
Its now a beautiful saturday afternoon outside and I sit here in this boring room and made this post about useful palo alto commands, that can help us in case of a problem arises. There is no wind, I wanted today go to windsurf… With my requirements for any networking layer 3 security device I […]
December 10, 2013
Yes this is madness! A really old school browser can help me in managing cisco asa firewalls! I have just found this link, since I am developing perl scripts to manage cisco asa firewalls. http://packetpushers.net/interacting-with-the-cisco-asa-cli-using-the-https-interface/ Lynx saves about 50 lines of perl code for me and works much more faster as my perl script with […]
September 18, 2013
With my requirements for any networking layer 3 security device I collected the basic commands that you have to know or you will not be able to manage your device. 1.0 Check the basic settings and firewall states Check the system status Check the hardware performance Check the High Availability state Check the session table […]
September 17, 2013
I wanted to issue show command on multiple firewalls without any expensive software. I have found a script here https://docs.google.com/document/d/1Q0TfyezOTCKZ7DF2kPBps_7LG80D3BJLrFDuOwBUZNI/edit?pli=1 This script is good and can be used as a base. I have changed it a bit. See the pic. I should not hide the codes in pic ;-) . It is here in the […]
September 16, 2013
There are time consuming jobs like creating a topology about the network of big companies, if they have an issue or some problem or it should be just dokumented as our ISO27001 Standard expects and it must be always up-to-date… I created a script that uses perl to build from the cisco asa firewall running […]
September 16, 2013
The “show connection all” command shows the actual session table of a Cisco ASA firewall. If the output is not more million entry you can create a top list from it with a perl script I made. (Actually you can work with an output of more million entry as well, but it may require more […]
November 13, 2018
6