About tvirtanen

tvirtanen · 11-04-2019

I want to send all logs regarding Administrator logins, and what changes they have made, to a remote log server.If I choose category "Administrative and Operational Audit" I get way too much information.When an administrator is logged in and clicks o...

tvirtanen · 02-16-2016

Hi, What is the status on this bug? It is marked with status "Fixed", but there isn't any information about how to implement a fix.Contrary to the status flag, the "Known fixed releases" has the counter 0.The description says that "All patches and re...

tvirtanen · 10-31-2012

I saw a strange beaviour in the ACE30 today.We are configuring most of our VIP:s with "loadbalance vip icmp-reply active" and I haven't thought about it that much.I just assumed it would do what the command says.Today an Intel tech called and said th...

tvirtanen · 08-05-2011

Hi,I am interested in using E-DI to automate checks and configurations in our network.But when I read the documents about the latest release 2.2 it seems that the list of supported IOS versions isn't updated.Could it be that there is no interest from...

tvirtanen · 05-23-2016

Thanks James!Now we know that it is finally solved. Tobbe

tvirtanen · 04-16-2013

Hi Jorge,Yes, I know that it is disabled in this version. And I want it disabled.But my test earlier in this thread shows that clients still can do a rehandshake.You haven't mentioned that part.Is this command just there to enable/disable the ACE it...

tvirtanen · 04-16-2013

Thank you for your answer.Our running version is A5(2.0). It should have rehandshake disabled by default.Here are the outputs from some commands:ACE# sh run | i rehandGenerating configuration....ACE# sh parameter-map SSL_TERMINATION Parameter-map : S...

tvirtanen · 04-15-2013

Hi,I am in the same situation.Someone has done a security vulnerability scan and claims that a VIP in the ACE is vulnerable to "SSL/TLS Renegotiation DoS".I have confirmed that rehandshake isn't enabled either globally in the context or in a ssl para...

tvirtanen · 11-01-2012

Hello,Here is the multimatch configuration.There are 74 classes inside the multi-match. And all are configured in the same way.I include only one (with a fake name) to prevent me from inventing 74 fake names.policy-map multi-match PRODUCTION class A...

Member Since	‎08-28-2006 06:42 AM
Date Last Visited	‎06-07-2023 12:03 AM
Posts	15

User Statistics

User Activity

Logging Administrator logins and operations in ISE 2.6

CSCux34781 - Evaluation of acs5 for Java_December_2015

VIP is still responding to ping when both servers are down

Is E-DI still alive?

Thanks James!Now we know that

How to disable SSL Renegotiation

How to disable SSL Renegotiation

How to disable SSL Renegotiation

VIP is still responding to ping when both servers are down