About nikolamitev

nikolamitev · 10-10-2013

Hi,I have just enabled DNS snooping on our ASA5585-X in preparation for enabling Botnet filter.Since we have a fair amount of DNS over TCP and to ensure that I don't leave an easy way around the new protection, I looked at enabling snooping on TCP po...

nikolamitev · 10-25-2012

Hi,I am doing some pre-deployment testing with a ASA5585X and noticed that when I feed it a stream of SYN packets on the outside interface the measured traffic rate on the inside interface going out is about 10x the rate of the outside interface goin...

nikolamitev · 10-30-2012

Thanks for your input Julio,I seems it jogged my brains a bit and I think I figured out what the issue is. The firewall is configured to log to two syslog servers on the inside interface - turning off the syslogging brought the traffic graphs for the...

nikolamitev · 10-29-2012

It might be worth adding that somewhat counterintuitively I am having to do those tests on a live VLAN and the setum is actually PC -- vlanX -- inside FW outside -- laptop (directly plugged into FW)On vlanX there are a number of hosts and some loadba...

nikolamitev · 10-29-2012

Thanks for your reply Julio.I did run a test similar to what you ask for before and I didn't find any differences. I ran it again exactly as you specified just in case and packets are identical - 1:1I also tried making a single but more intensive con...

nikolamitev · 05-30-2012

From this diagram it looks like your 3750 is terminating the vlan and doing the routing between the two vlans?

nikolamitev · 12-11-2009

Could you point me to the new thread?

Member Since	‎04-19-2009 06:34 AM
Date Last Visited	‎08-18-2017 03:56 AM
Posts	10

User Statistics

User Activity

Snooping on DNS over TCP breaks service

Packet rate on inside and outside interface doesn't match

Re: Packet rate on inside and outside interface doesn't match

Packet rate on inside and outside interface doesn't match

Packet rate on inside and outside interface doesn't match

Allow only one host access to VPN site to site tunnel

Re: UC520: Skype SIP Beta Configuration