About Jesse Wiener

Jesse Wiener · 02-19-2007

I am just looking for an order of operation. If I have an ASA 7.2(2) and I a default global policy. If I make a service policy, and apply it to an interface does that replace the global policy for traffic traversing that interface, or is it like an A...

Jesse Wiener · 01-18-2007

We have installed a 2811 12.4.6.T1. With the ip inspect %name% http. Is really slowing down web browsering. When I take that command out it is fast. any ideas?

Jesse Wiener · 08-22-2006

I have a 871w that is setup as ezvpn client and it is dropping packet only to sources across vpn, and only from wireless. I can sit with my wireless pc, and ping the internet and ping a server on the other side of the vpn. The internet will not drop ...

Jesse Wiener · 04-18-2012

I know it is a little late for an answer but for anyone that may stumble upon this thread later. Nortel made a tool called multicast hammer (or MC Hammer). It works extremely well for testing multicast. It might be a little hard to find with the stat...

Jesse Wiener · 03-24-2009

If I understand your question correctly. You define and seperate traffic to each context by vlan id's. You would create sub-interfaces in the system context and assign a vlan there. Then assign that sub interface to a context.Example:Eth0/1.10 (Vlan ...

Jesse Wiener · 03-19-2009

It depends on the version you are running.6.x and older.http://www.cisco.com/en/US/docs/security/pix/pix63/configuration/guide/bafwcfg.html#wp11122267.x and newerhttp://www.cisco.com/en/US/docs/security/asa/asa70/configuration/guide/intparam.html#wp1...

Jesse Wiener · 03-18-2009

I would say using an acl is more efficient. From previous reading I recall that the acl happens before the route lookup. So you do not want to waste your resources going those extra steps to get to and do a route lookup. Here is a link about NAT orde...

Jesse Wiener · 03-18-2009

If we are talking the same device in the same security context. I do not think you can. There is support for it if you are running active/active failover.http://www.cisco.com/en/US/docs/security/asa/asa70/configuration/guide/failover.html#wp1102712-J...

Member Since	‎08-11-2004 06:11 AM
Date Last Visited	‎10-08-2021 12:04 AM
Posts	34
Total Helpful Votes Received	20

User Statistics

User Activity

Modular Policy Framework order of operation

IP Inspect http SLOW

871W dropping packets over VPN from wireless

Multicast Testing tool for windows

Re: Firewall context.

Re: Changing IP for eth0 in PIX 515

Re: Best practices for blocking traffic

Re: asymetric routing on ASA