Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Joe Silver
Stats
Member since
12-07-2011
33
Posts
0
Helpful
0
Solutions
03-29-2016
08:51 AM
Siddharth I ran the command and it appears that we only have 4GB. 4 x 1GB sticks. I'll need the additional RAM. What is my next step?
RAM 1 A Empty RAM 1 B Empty RAM 2 A 1024M ECC 1333MHz RAM 2 B Empty RAM 3 A 1024M ECC 1333MHz RAM 3 B Empty RAM 4 A Empty RAM 4 B Empty RAM 5 A 1024M ECC 1333MHz RAM 5 B Empty RAM 6 A 1024M ECC 1333MHz RAM 6 B Empty RAM 7 A Empty RAM 7 B Empty RAM 8 A Empty RAM 8 B Empty RAM 9 A Empty RAM 9 B Empty RAM Total 0G
Thanks,
Joe
... View more
Created by
Joe Silver
in Web Security
in Web Security
03-28-2016
02:10 PM
03-28-2016
02:10 PM
Currently running 8.5.2-027 on our Cisco WSA S370. When I check available upgrades directly from the appliance I only see the two below options:
AsyncOS 8.8.0 build 085
AsyncOS 8.5.3 build 069
I know that version 9 is available but why doesn't it show this version as an option?
Thanks Guys!
Joe
... View more
Labels:
I'd also like to see if the
in Wireless Security and Network Management
01-13-2015
05:48 AM
01-13-2015
05:48 AM
I'd also like to see if the files can be emailed with just the csv file and not zipped together. Also I know it can send the files in pdf format but you can't sort off a pdf and thus the CSV file type becomes much more useable. Any fix for this? Joe
... View more
11-06-2014
11:36 AM
Thanks Jouni. I was simply looking to do basic troubleshooting by looking at the date and not worrying about exporting the capture off-device for analysis. Maybe I'll submit this as a feature request. Joe
... View more
11-05-2014
01:00 PM
Hello, Quick question...On a Cisco ASA (v8.2) how does one show the date of each packet in a packet capture? When performing a packet capture from CLI you can do a "show capture testcapture" command and you can see that the time is at the beginning of each packet but how does one view the date as well as the time for each packet? I know you can export the packet capture and it will show the date & time in wireshark but sometimes for just quick and dirty capture I'd like to view the capture from the CLI on the ASA itself without doing an export. Sample capture below. Time is displayed but not the date of the packet capture. Issuing command "sh cap test detail" doesn't show the date either. I checked on an ASA running v9 and it also doesn't show the date in the packet capture. ASA5505# sh cap test 1: 08:51:56.112085 802.1Q vlan#12 P0 10.150.40.240.500 > x.x.x.x: udp 404 2: 08:52:18.111871 802.1Q vlan#12 P0 10.150.40.240.29082 > x.x.x.x.53: udp 37 3: 08:52:18.165366 802.1Q vlan#12 P0 y.y.y.y.53 > 10.150.40.240.29082: udp 53 4: 08:52:32.129235 802.1Q vlan#12 P0 10.150.40.240.500 > x.x.x.x4.500: udp 404 5: 08:52:37.111627 802.1Q vlan#12 P0 10.150.40.240.500 > x.x.x.x.500: udp 404 6: 08:52:49.111490 802.1Q vlan#12 P0 10.150.40.240.500 > x.x.x.x.500: udp 404 Thanks for any help. Joe
... View more
Labels:
10-06-2014
12:31 PM
Ken, It appears the re-categorization on Cisco's part has corrected the issue for us. The images load up successfully on the WSA. Joe
... View more
Created by
Joe Silver
in Web Security
in Web Security
10-02-2014
06:11 AM
10-02-2014
06:11 AM
Hello all, Ever since msn changed the look of their website (www.msn.com) I can no longer view many of the images on that site. Logs show that the images are blocked due to this message "BLOCK_UNSUPPORTED_SEARCH_APP_12" Looks like the specific culprit is the "safe search" under the global policy - content filtering (see below). Since msn uses bing as it's search engine the content should be allowed (has been before the site was upgrade). As a work around I can permit access to the address http://img.s-msn.com/tenant/amp/entityid ; where the images are held but how do I fix this so the WSA will mark the new msn website as a safe search engine. Enable Safe Search When Safe Search is enabled, non-safe content, including the cached non-safe content will be blocked from the search result from the following search engines: Dogpile, Yandex, Ask, Blekko, Google, Yahoo, Bing, WebCrawler, DuckDuckGo, Dailymotion and eBay. If safe search failed to be enforced on a supported search engine, it will be blocked. Search engines that don't support safe search Block All search engines other than those that are listed as supporting safe search will be blocked. Thanks as always. Joe
... View more
Labels:
08-11-2014
07:19 PM
Thank you for the response. What I'd like to do is allow my clients to resolve external domain names but I'd like to keep hosts within my local domain (hq.example.org) to stay local and not get forwarded to an external dns server. If for example if I'm trying to resolve a local fileserver.hq.example.org and it's not found on the LAN then I don't want the dns request to be forwarded to external dns server for just the domain "hq.example.org". Joe
... View more
08-11-2014
01:47 PM
Hello, I've configured my old Cisco 2600 router to act as a DNS server for a LAN. My clients successfully resolve internal hosts and external hosts just fine but I have noticed that the router will forward dns queries to our external DNS server for internal hosts within our domain. As an example if I do a nslookup on "no-host.hq.example.org" the router see that the host can't be found on the LAN and will forward the request to our external DNS server even though the domain "hq.example.org" is a local domain on our LAN. I would like to prevent DNS queries for local hosts to never forwared outside our network. How can I prevent this? Essentially I'm looking for the equivalent of the non-valid command "ip host *.hq.example.org" Current configuration : 4209 bytes version 12.4 ! hostname CiscoRTR ! no ip dhcp use vrf connected ip dhcp bootp ignore no ip dhcp conflict logging ip dhcp excluded-address 192.168.100.1 192.168.100.10 ! ip dhcp pool Client-DHCP network 192.168.100.0 255.255.255.0 dns-server 192.168.100.1 default-router 192.168.100.1 domain-name hq.example.org ! ! ip domain name hq.example.org ip host fileserver.hq.example.org 10.1.1.1 ip host webserver.hq.example.org 10.1.1.2 ip name-server 208.67.222.222 ip name-server 208.67.220.220 ! ip dns server ! Thanks! Joe
... View more
Labels:
08-06-2014
02:33 PM
I've also ran into this issue recently in my network. I do receive alerts for high CPU via snmp polling but is there a way to receive an alert of some kind for hosts that I would consider have a high number of UDP or TCP connections? Example: a single host uses over 200 connections on the firewall. This number of connections may indicate malware or possibly some kind of peer to peer activity going on in the host. Having such an alert would allow me to troubleshoot a high CPU issue that much quicker. Thanks, Joe
... View more
05-30-2013
06:32 PM
First of all thank for the detailed and through response Karim. It's very disappointed that the Nexus 7K is limited in this manner. I'm suprised the lack of features for a product that is supposed to be Next Generation core switch. The VACL capture feature which could provide us a solution to our dilemma was possibly due to be introduced in the next code release of code but as of yet the latest version 6.1(4) doesn't support the capture feature. For now I've connected a lowly spare Cisco switch to the 7K and then using that to SPAN to multiple destination servers from the uplink connection. So far it's working with no major problems. I'll keep my fingers crossed that the next code release will support the VACL capture feature or possibly remove the 2 active SPAN limitation (or multiple destination on F2 modules). Joe
... View more
05-23-2013
08:37 AM
Thanks Karim for the response. So based on the Cisco documentation the limitation is around the F2 module, but all information indicates the Nexus 7000 series platform does support multiple destinations in a single SPAN session. My next question is what modules can I purchase M1, M2, etc that will permit me this functionality? Obviously I would need just one module to meet my needs. The other direction I could pursue is to do VACL captures (forward) (which I have used with great results on 6500) unfortunately that feature isn't supportedon the F2 modules either. I'm told it *might* be planned for the next code release. Joe
... View more
05-19-2013
05:43 PM
I have a single Nexus 7K (6.x) with only F2 modules and I would like to SPAN the same source interfaces and vlans to mulitple destination servers (interfaces). When configuring SPAN to a single destination traffic gets replicated successfully but when I add an additional destination to the same SPAN session then none of the destination interfaces receive any traffic. As soon as modify the SPAN to include only a single destination interface it works again. I'm guess this is a limitation of the Nexus 7K 6.x code or the F2 modules. If so someone please confirm this. If this is indeed a limitation with my current hardware I'd appreicate some suggestions to make this work. Thanks! Joe
... View more
Labels:
05-01-2013
05:52 AM
I'm seeing the same messages to on my Nexus 7010 with 6.12. Anyone responses here? Joe
... View more
03-29-2016
Siddharth I ran the command and it appears that we only have 4GB. 4 x
1GB sticks. I'll need the addi...
03-28-2016
Currently running 8.5.2-027 on our Cisco WSA S370. When I check
available upgrades directly from the...
Created by
Joe Silver
in Wireless Security and Network Management
01-13-2015
01-13-2015
I'd also like to see if the files can be emailed with just the csv file
and not zipped together. Als...
11-06-2014
Thanks Jouni. I was simply looking to do basic troubleshooting by
looking at the date and not worryi...
Created by
Joe Silver
in Firewalls
11-05-2014
11-05-2014
Hello, Quick question...On a Cisco ASA (v8.2) how does one show the date
of each packet in a packet ...
10-06-2014
Ken,It appears the re-categorization on Cisco's part has corrected the
issue for us. The images load...
10-02-2014
Hello all,Ever since msn changed the look of their website (www.msn.com)
I can no longer view many o...
08-11-2014
Thank you for the response. What I'd like to do is allow my clients to
resolve external domain names...
Created by
Joe Silver
in Switching
08-11-2014
08-11-2014
Hello,I've configured my old Cisco 2600 router to act as a DNS server
for a LAN. My clients successf...
08-06-2014
I've also ran into this issue recently in my network. I do receive
alerts for high CPU via snmp poll...
05-30-2013
First of all thank for the detailed and through response Karim. It's
very disappointed that the Nexu...
05-23-2013
Thanks Karim for the response. So based on the Cisco documentation the
limitation is around the F2 m...
05-19-2013
I have a single Nexus 7K (6.x) with only F2 modules and I would like to
SPAN the same source interfa...
Public Statistics
| Date Registered | 12-07-2011 08:26 AM |
| Date Last Visited | 08-18-2017 04:00 AM |
| Total Messages Posted | 33 |
