02-25-2016 09:46 AM - edited 02-20-2020 09:15 PM
Hello everybody,
does anybody know, if the botnet dynamic-filter reports are cleared after ASA updateand reload or only after reload?
(show dynamic-filter reports top botnet-sites
show dynamic-filter reports top infected-hosts
show dynamic-filter reports top botnet-ports(
What about statistics (show dynamic-filter statistic)?
Before ASA Update to 9.3.3.(7) we had for example a lot of Top Botnet Traffic Filter Hits. After reload it's empty.
Statistics 10 days after update and reload:
Result of the command: "show dynamic-filter statis"
Enabled on interface management
Total conns classified 0, ingress 0, egress 0
Total whitelist classified 0, ingress 0, egress 0
Total greylist classified 0, dropped 0, ingress 0, egress 0
Total blacklist classified 0, dropped 0, ingress 0, egress 0
Enabled on interface Inside
Total conns classified 5044001, ingress 5044001, egress 0
Total whitelist classified 5044001, ingress 5044001, egress 0
Total greylist classified 0, dropped 0, ingress 0, egress 0
Total blacklist classified 0, dropped 0, ingress 0, egress 0
Enabled on interface Outside
Total conns classified 212, ingress 212, egress 0
Total whitelist classified 212, ingress 212, egress 0
Also no blacklist entries.
Thanks a lot
Kind regards,
Sergej
02-25-2016 10:28 AM
After reload I believe. Not sure.
02-25-2016 11:32 PM
Hello Philip D'Ath,
Thank you.
I believe it too, but need to know it for sure. I was not permitted to reload the ASA to check it. And did not find the info in any cisco FAQs or support forums.
Kind regards,
Sergej
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide