ASA5505 Botnet Filter

john_rothingham — Mon, 11 Mar 2019 23:12:43 GMT

Hello All,

We have an internal DNS server that all internal hosts do lookups to .. these requests are forwarded onto opendns for anything the dns server isnt authorative for.. My question is we have purchased the botnet filter and this requires the asa5505 dns client to be active on at least one interface .. Should i point the asa dns to an external IP such as 8.8.8.8 and apply DNS enabled on interface outside ( am using asdm)

I dont want the ASA to control DNS for our internal clients we already have a internal server for this, i DO want the asa5505 to check dns packets against its botnet filter, whilst still using open dns for forwarding ... how can one do this ?

TIA

ASA5505 Botnet Filter

Kureli Sankar — Sun, 03 Jun 2012 16:46:53 GMT

This link doesn't really get into ASDM config but, you can use CLI and refersh ASDM and verify the config there.

https://supportforums.cisco.com/docs/DOC-8782

I found an asdm link as well:

http://www.cisco.com/en/US/docs/security/asa/asa83/asdm63/configuration_guide/protect_botnet.html

Good luck.

-Kureli

topic ASA5505 Botnet Filter in Network Security

ASA5505 Botnet Filter

ASA5505 Botnet Filter