cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3927
Views
0
Helpful
2
Replies

Botnet dynamic filter top reports

Hello everybody,

does anybody know, if the botnet dynamic-filter reports are cleared after ASA updateand reload or only after reload? 

(show dynamic-filter reports top botnet-sites

show dynamic-filter reports top infected-hosts

show dynamic-filter reports top botnet-ports(

What about statistics (show dynamic-filter statistic)?

Before ASA Update to 9.3.3.(7) we had for example a lot of Top Botnet Traffic Filter Hits. After reload it's empty.

Statistics 10 days after update and reload:

Result of the command: "show dynamic-filter statis"

 

Enabled on interface management

 Total conns classified 0, ingress 0, egress 0

 Total whitelist classified 0, ingress 0, egress 0

 Total greylist classified 0, dropped 0, ingress 0, egress 0

 Total blacklist classified 0, dropped 0, ingress 0, egress 0

Enabled on interface Inside

 Total conns classified 5044001, ingress 5044001, egress 0

 Total whitelist classified 5044001, ingress 5044001, egress 0

 Total greylist classified 0, dropped 0, ingress 0, egress 0

 Total blacklist classified 0, dropped 0, ingress 0, egress 0

Enabled on interface Outside

 Total conns classified 212, ingress 212, egress 0

 Total whitelist classified 212, ingress 212, egress 0

Also no blacklist entries.

Thanks a lot

Kind regards,

Sergej

 

2 Replies 2

Philip D'Ath
VIP Alumni
VIP Alumni

After reload I believe.  Not sure.

Hello Philip D'Ath,

Thank you.

I believe it too, but need to know it for sure. I was not permitted to reload the ASA to check it. And did not find the info in any cisco FAQs or support forums.

Kind regards,

Sergej