topic Thank you...it has helped in Network Security

Botnet filtering 8.2, no license :)

WStoffel1 — Tue, 12 Mar 2019 06:07:00 GMT

I'm currently battling a bot-net on a 8.2 ASA but i dont have the license. So enabling the botnet filter is not an option. Yet.

I'm curious if anyone has struggled with this, and has a few ideas on finding and tracking down the offending machine....?

thank you.

Vibhor Amrodia — Tue, 16 Jun 2015 13:58:27 GMT

Hi,

I think you should be looking for an Internal Address creating many connections outside thru the ASA device.

show local-host connection tcp/udp | in host|count/limit

This should show you the connections per host thru the ASA device and this should help you isolate this issue.

Thanks and Regards,

Vibhor Amrodia

WStoffel1 — Wed, 01 Jul 2015 17:35:12 GMT

Thank you...it has helped immensely.