About stevechege

stevechege · 10-27-2014

For the last one month we have been hit by DDOS attacks that seem to be using SSDP (Port 1900 UPD). It’s just happed today and it lasted 15 mins…during which time our internet connection (Comcast Business line. 100/20 MB) came to a crawl. No one coul...

stevechege · 12-02-2013

Is it necessary to block “bogon” networks on the outside interface or does the Cisco ASA firewall do it by default.I noticed this line below on my logs and it kind of scared me for sec..2013-11-27 T13:27:55.540306-05:00 ga-asa-5505-50 : %ASA-session-...

stevechege · 11-15-2013

We have a 5/5 (Flexlink) connection from Sonic.net on a Adtran NetVsta 832 gateway.We have recently upgraded the firewall on this connection from a PIX515E to a ASA 5505 (ASA 5505 Security Plus license).I have had issues with ARP on this connction wh...

stevechege · 07-28-2016

Thanks Jouni. I run into this on a Cisco ASA 5510. The only way to restore service was to do a painful reboot where the whole office was down. Cisco's documentation regarding TCP syslog: The %ASA-3-201008: Disallowing new connections error message is...

stevechege · 10-20-2015

-If you know the IP addresses, you can use an ACL.- Configure Netflow monitoring and use a free tool like NetFlow Analyzer to see who is hogging your bandwidth and block access to those site using the resolved IP addresses. My solution was to setup ...

stevechege · 10-20-2015

Hello, It could be a license issue.If you can SSH into the device, try and do a show version as shown below.or through the ASDM Configuration > Device Management > Licensing > ASA-PLUS# show versionFor security plus License~ out-put~Licensed featur...

stevechege · 12-02-2013

Thank you.....You are correct...i was just freaking out. It turns out to be a host from a "site-to-site" VPN connection that is allowed.I guess i deal with alot of IPTABLES configurations, so i defaulted to thinking that way.i.e on the public interfa...

stevechege · 11-21-2013

Jumora...i am not sure why you are upset...we are just contributing to the community...i had this issue a while back and i posted how i fixed it for others who might have the same issue.

Member Since	‎07-16-2011 08:32 AM
Date Last Visited	‎03-13-2020 02:22 AM
Posts	18
Total Helpful Votes Received	5

User Statistics

User Activity

DDoS Attack Using SSDP

Blocking "BOGON" traffic. AKA Private IP on the outside interface on an ASA

ASA 5505 loses connection every 4 hrs due to Arp issue (Sonic.net flexlink)

Thanks Jouni. I run into this

-If you know the IP addresses

Hello, It could be a license

Re: Blocking "BOGON" traffic. AKA Private IP on the outside inte

Problem in ASA5520 with Asterisk Server , Softphone can't regist