I needed to build a VPN tunnel from Threat Defence to AWS, which seemed to work fine. Until the VPN had been up for an hour that is…
After an hour, I was getting reports of tunnel traffic dropping out. This happened regularly every hour.
After a few hours of watching debugs and discussions with TAC, the answer presented itself.
Dynamic Routing and FEX
A few weeks ago I was working on a customer’s network when I found an OSPF problem. For some reason, an ASA wouldn’t peer with a Nexus switch. To make it a bit weirder, the problem only happened on the default VRF, and only with OSPFv3. On the Nexus side, I could see the ASA neighbour, but it was stuck in INIT. On the ASA side, I couldn’t see the neighbour at all.
Cisco Live Melbourne 2017 – Day 1
We all want to be better at what we do. You wouldn’t be reading this if you didn’t. In the IT industry, we go to vendor events, where we get to broaden our horizons, and network woth potential colleagues.
I was one fortunate man in a crowd of many who just attended day 1 of Cisco Live in Melbourne.
Firepower Threat Defence 6.2
Today, FTD 6.2 was released. In this blog post, I’d like to summarise the new and improved features in this version. I may get into deployments and upgrades in a future post if there’s interest.
how Twinax Cables Ruined My Day
The day actually started out pretty well. The weather was nice, I’d had my morning coffees, and I was expecting some new firewalls to arrive. I was especially excited about this point.
You see, I had spent the last few weeks working on a new network design. I had the hardware picked out. The topology was looking good. I even had my cable maps drawn up. Everything was going well.
Does Your Network Need Some Firepower?
It Started at the End
AKA, It’s Good to Have All the Information Up Front
The Curious Case of the ASA’s Security Levels
A few weeks ago, I found that I did not understand the ASA as well as I thought I did. Again.
Even after years of working with the ASA, I still seem to underestimate them. Just when I think I know them well, I find myself in a scenario that causes me to reevaluate what I thought I knew.
ASA 5500-X Series and Firepower Threat Defence
ASA 5500-X SERIES AND FIREPOWER THREAT DEFENCE Friday October 28, 2016 The History In the old days, Cisco had a strong firewall offering, called the ASA. Unfortunately, they…