About captkloss

captkloss · 08-28-2017

I have received ipsec parameters for phase 1/2 from a non-ASA customer: Phase 1authentication-methodpre-shared-keysauthentication-algorithmsha-256 (384)encryption-algorithmaes-192-cbc (256)dh-groupgroup2lifetime-seconds28800 Phase 2authentication-alg...

captkloss · 08-10-2017

Hello, We have couple of catalyst 4500 chassis - all publicly (as in "office space") accessible ports are limited to a specific VLAN. We would like to deny "access" to all devices outside of a list of approved MAC addresses. What would be most eff...

captkloss · 03-28-2017

Hello, have anyone experienced this? I have patched AD servers over the weekend and ever since then we have lost all the user/ip mappings. I have went over AD settings for the CDA user, all is in order... we have discovered this by accident, because ...

captkloss · 01-28-2017

It's great that finally there's no need to enter the microsoft list manually into WSA, however - the lauded xml file includes non-microsoft addresses. notably mail.google.com - took me a while to figure out that by allowing this feed i'm also allowin...

captkloss · 07-26-2016

Hello, I'm looking for web filtering product that would replace CX on ASA we currently use. Does WSA have "application visibility and control" ability - and if so what licensing level is needed? I'm hoping "Web Essentials SW Bundle (WREP+WUC)" has i...

captkloss · 08-30-2017

Hello, The other party claims they use ikev1 - however i cant see an option to match sha256 using ikev1.... so i'm bit confused...

captkloss · 08-10-2017

Correct me if i'm wrong, but from what i see DAI would not prevent someone from bringing a private laptop, plugging it into an available port in the office space and being able to browse the network. Thanks!

captkloss · 03-10-2017

Firepower does not support regular expressions / wildcards - if you need granular url filtering, WSA is the way to go.

captkloss · 07-26-2016

Hi, One thing that killed ASA web filtering for us is the fact that Firepower does not support wildcards/regex.

captkloss · 08-19-2011

it's getting so convoluted - so essentially i need 4 x 5520 to get a secure/redundant internet access... pretty close cost wise to just getting 2 x 5585-x with SSP and IPS SSP...

Member Since	‎08-18-2011 05:59 PM
Date Last Visited	‎07-18-2018 12:03 AM
Posts	14
Total Helpful Votes Received	3

User Statistics

User Activity

Help with ipsec parameters

Best way of denying access to a VLAN port based on MAC address on Catalyst 4500

CDA stopped getting mappings after AD patching

New 10.0 "feature" of "Office365 integration" into WSA issue

Does WSA have AVC?

Re: Help with ipsec parameters

Correct me if i'm wrong, but

Firepower does not support

Hi,

Intrusion prevention AND content security with ASA