cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Register for SecureX webinars to learn about our newest integrations and features.

3678
Views
0
Helpful
2
Replies
Sergej Barkovski
Beginner

Botnet dynamic filter top reports

Hello everybody,

does anybody know, if the botnet dynamic-filter reports are cleared after ASA updateand reload or only after reload? 

(show dynamic-filter reports top botnet-sites

show dynamic-filter reports top infected-hosts

show dynamic-filter reports top botnet-ports(

What about statistics (show dynamic-filter statistic)?

Before ASA Update to 9.3.3.(7) we had for example a lot of Top Botnet Traffic Filter Hits. After reload it's empty.

Statistics 10 days after update and reload:

Result of the command: "show dynamic-filter statis"

 

Enabled on interface management

 Total conns classified 0, ingress 0, egress 0

 Total whitelist classified 0, ingress 0, egress 0

 Total greylist classified 0, dropped 0, ingress 0, egress 0

 Total blacklist classified 0, dropped 0, ingress 0, egress 0

Enabled on interface Inside

 Total conns classified 5044001, ingress 5044001, egress 0

 Total whitelist classified 5044001, ingress 5044001, egress 0

 Total greylist classified 0, dropped 0, ingress 0, egress 0

 Total blacklist classified 0, dropped 0, ingress 0, egress 0

Enabled on interface Outside

 Total conns classified 212, ingress 212, egress 0

 Total whitelist classified 212, ingress 212, egress 0

Also no blacklist entries.

Thanks a lot

Kind regards,

Sergej

 

2 REPLIES 2
Philip D'Ath
Advisor

After reload I believe.  Not sure.

Hello Philip D'Ath,

Thank you.

I believe it too, but need to know it for sure. I was not permitted to reload the ASA to check it. And did not find the info in any cisco FAQs or support forums.

Kind regards,

Sergej

Create
Recognize Your Peers
Content for Community-Ad
Additional Cisco Threat Response Resources


August's Community Spotlight Awards