Hello everybody,
does anybody know, if the botnet dynamic-filter reports are cleared after ASA updateand reload or only after reload?
(show dynamic-filter reports top botnet-sites
show dynamic-filter reports top infected-hosts
show dynamic-filter reports top botnet-ports(
What about statistics (show dynamic-filter statistic)?
Before ASA Update to 9.3.3.(7) we had for example a lot of Top Botnet Traffic Filter Hits. After reload it's empty.
Statistics 10 days after update and reload:
Result of the command: "show dynamic-filter statis"
Enabled on interface management
Total conns classified 0, ingress 0, egress 0
Total whitelist classified 0, ingress 0, egress 0
Total greylist classified 0, dropped 0, ingress 0, egress 0
Total blacklist classified 0, dropped 0, ingress 0, egress 0
Enabled on interface Inside
Total conns classified 5044001, ingress 5044001, egress 0
Total whitelist classified 5044001, ingress 5044001, egress 0
Total greylist classified 0, dropped 0, ingress 0, egress 0
Total blacklist classified 0, dropped 0, ingress 0, egress 0
Enabled on interface Outside
Total conns classified 212, ingress 212, egress 0
Total whitelist classified 212, ingress 212, egress 0
Also no blacklist entries.
Thanks a lot
Kind regards,
Sergej
After reload I believe. Not sure.
Hello Philip D'Ath,
Thank you.
I believe it too, but need to know it for sure. I was not permitted to reload the ASA to check it. And did not find the info in any cisco FAQs or support forums.
Kind regards,
Sergej