Browsing All Posts filed under »Security«

Palo Alto troubleshooting commands

December 10, 2013

5

Its now a beautiful saturday afternoon outside and I sit here in this boring room and made this post about useful palo alto commands, that can help us in case of a problem arises. There is no wind, I wanted today go to windsurf… With my requirements for any networking layer 3 security device I […]

Lynx for Cisco ASA Management

December 10, 2013

3

Yes this is madness! A really old school browser can help me in managing cisco asa firewalls! I have just found this link, since I am developing perl scripts to manage cisco asa firewalls. http://packetpushers.net/interacting-with-the-cisco-asa-cli-using-the-https-interface/ Lynx saves about 50 lines of perl code for me and works much more faster as my perl script with […]

Checkpoint books for sale

September 18, 2013

7

I am selling my books from Check Point R75 Training. They are really important to read for all Check Point Admins: – Check Point Certified Security Administrator R75 Student & Lab Manual – Check Point Certified Security Expert R75 Student Manual & Lab Manual They contains more then what you can find in the Knowledge […]

Cisco ASA troubleshooting commands

September 18, 2013

22

With my requirements for any networking layer 3 security device I collected the basic commands that you have to know or you will not be able to manage your device. 1.0 Check the basic settings and firewall states Check the system status Check the hardware performance Check the High Availability state Check the session table […]

perl script to query cisco asa

September 17, 2013

0

I wanted to issue show command on multiple firewalls without any expensive software. I have found a script here https://docs.google.com/document/d/1Q0TfyezOTCKZ7DF2kPBps_7LG80D3BJLrFDuOwBUZNI/edit?pli=1 This script is good and can be used as a base. I have changed it a bit. See the pic. I should not hide the codes in pic ;-) . It is here in the […]

Firewall topology within a second – V2.0

September 16, 2013

5

There are time consuming jobs like creating a topology about the network of big companies, if they have an issue or some problem or it should be just dokumented as our ISO27001 Standard expects and it must be always up-to-date… I created a script that uses perl to build from the cisco asa firewall running […]

Analysing Cisco ASA connection table

September 16, 2013

10

The “show connection all” command shows the actual session table of a Cisco ASA firewall. If the output is not more million entry you can create a top list from it with a perl script I made. (Actually you can work with an output of more million entry as well, but it may require more […]

Firewall Datasheets – Behind the scene

April 16, 2013

0

I have just analysed some small office firewalls – with the newer expression UTM devices – from the market leaders and checked their datashits. The vendors have still to much freedom to express the advantages of their products and write performance values without giving complete description on it. The published performance values say not too […]

ClusterXL – New HA mode

February 28, 2013

0

It is just a quick note for fast knowledge recovery about ClusterXL for me :-) There are 4 ClusterXL modes: -Load Sharing Multicast Mode -Load Sharing Unicast Mode -New High Availability Mode -> This is what is under magnifier now. -High Availability Legacy Mode Sniffered packet Command used: # tcpdump -i bond1 -evvxn udp 8116 […]

The nine

February 15, 2013

1

Normally I do not write about new releases from security product manufacturers, but this Cisco ASA version resolves some disadvantages against Checkpoint. IT IS And I would be glad to test those since I am a Cisco fun :-) The HW models are all supported, the question is if the features make it too: … […]