cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3919
Views
0
Helpful
2
Replies

Botnet dynamic filter top reports

Hello everybody,

does anybody know, if the botnet dynamic-filter reports are cleared after ASA updateand reload or only after reload? 

(show dynamic-filter reports top botnet-sites

show dynamic-filter reports top infected-hosts

show dynamic-filter reports top botnet-ports(

What about statistics (show dynamic-filter statistic)?

Before ASA Update to 9.3.3.(7) we had for example a lot of Top Botnet Traffic Filter Hits. After reload it's empty.

Statistics 10 days after update and reload:

Result of the command: "show dynamic-filter statis"

 

Enabled on interface management

 Total conns classified 0, ingress 0, egress 0

 Total whitelist classified 0, ingress 0, egress 0

 Total greylist classified 0, dropped 0, ingress 0, egress 0

 Total blacklist classified 0, dropped 0, ingress 0, egress 0

Enabled on interface Inside

 Total conns classified 5044001, ingress 5044001, egress 0

 Total whitelist classified 5044001, ingress 5044001, egress 0

 Total greylist classified 0, dropped 0, ingress 0, egress 0

 Total blacklist classified 0, dropped 0, ingress 0, egress 0

Enabled on interface Outside

 Total conns classified 212, ingress 212, egress 0

 Total whitelist classified 212, ingress 212, egress 0

Also no blacklist entries.

Thanks a lot

Kind regards,

Sergej

 

2 Replies 2

Philip D'Ath
VIP Alumni
VIP Alumni

After reload I believe.  Not sure.

Hello Philip D'Ath,

Thank you.

I believe it too, but need to know it for sure. I was not permitted to reload the ASA to check it. And did not find the info in any cisco FAQs or support forums.

Kind regards,

Sergej

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: