Botnet dynamic filter top reports

Sergej Barkovski — Fri, 21 Feb 2020 05:15:14 GMT

Hello everybody,

does anybody know, if the botnet dynamic-filter reports are cleared after ASA updateand reload or only after reload?

(show dynamic-filter reports top botnet-sites

show dynamic-filter reports top infected-hosts

show dynamic-filter reports top botnet-ports(

What about statistics (show dynamic-filter statistic)?

Before ASA Update to 9.3.3.(7) we had for example a lot of Top Botnet Traffic Filter Hits. After reload it's empty.

Statistics 10 days after update and reload:

Result of the command: "show dynamic-filter statis"

Enabled on interface management

Total conns classified 0, ingress 0, egress 0

Total whitelist classified 0, ingress 0, egress 0

Total greylist classified 0, dropped 0, ingress 0, egress 0

Total blacklist classified 0, dropped 0, ingress 0, egress 0

Enabled on interface Inside

Total conns classified 5044001, ingress 5044001, egress 0

Total whitelist classified 5044001, ingress 5044001, egress 0

Total greylist classified 0, dropped 0, ingress 0, egress 0

Total blacklist classified 0, dropped 0, ingress 0, egress 0

Enabled on interface Outside

Total conns classified 212, ingress 212, egress 0

Total whitelist classified 212, ingress 212, egress 0

Also no blacklist entries.

Thanks a lot

Kind regards,

Sergej

After reload I believe. Not

Philip D'Ath — Thu, 25 Feb 2016 18:28:13 GMT

After reload I believe. Not sure.

Hello Philip D'Ath,

Sergej Barkovski — Fri, 26 Feb 2016 07:32:33 GMT

Hello Philip D'Ath,

Thank you.

I believe it too, but need to know it for sure. I was not permitted to reload the ASA to check it. And did not find the info in any cisco FAQs or support forums.

Kind regards,

Sergej

topic Hello Philip D'Ath, in Integrated Security Platform

Botnet dynamic filter top reports

After reload I believe. Not

Hello Philip D'Ath,