About ryderse69

ryderse69 · 05-21-2015

I am looking for a way to filter out all SSL Downgrade attempts for traffic passing through my FWSMs and/or ASAs. This traffic (the request to downgrade to a weaker cipher) is sent in the clear so this should be filterable by a FW somehow. I found th...

ryderse69 · 04-16-2014

I need to rate limit UDP traffic on a port without affecting other traffic. Would the below work or would this drop all other non-UDP traffic? I could just change the ACL to IP ANY ANY but I would prefer to limit just UDP traffic. mls qosaccess-list...

ryderse69 · 08-21-2013

Hi,I have the need to NAT between IPv6 and v4. I have a a situation where IPv6 Clients will be connecting to our IPv4 only Servers however, the servers use Multicast (SSM Multicast) as well as Unicast. The Clients will connect to the Servers in tradi...

ryderse69 · 07-23-2007

Hello, I have a Cat6509 that I am building. It has a Sup720 (WS-SUP720-3BXL) in slot 6 that I want to boot from (with IOS 12.2)Apparently the bootflash has CatOS on it. Please see Show Ver below. The PCMCIA card I want to boot from has IOS on it ...

ryderse69 · 07-20-2007

Hello, I have a Cat 6509 with a Sup720 card in it. I have two PCMCIA cards. One is running in the switch already (disk0) and the other is blank but formatted (disk1).All I want to do is copy all of disk0 over to disk1. An exact copy of disk0 to dis...

ryderse69 · 05-22-2015

Official word from TAC is that this must be done with an IPS. This can not be done on an ASA/FWSM without one. I had hoped to use some inspect rules or the like but I guess not :-/.

ryderse69 · 05-21-2015

If you could check, that would be extremely helpful. Thank you.

ryderse69 · 05-21-2015

Hi KanwalIs this applicable to traffic flowing through the FW or destined to it?I'm not concerned about traffic destined to the FW, I need to filter out this traffic flowing between hosts connected to the FW. Thank youSR

ryderse69 · 05-21-2015

I found a similar discussion on Sonicwall that include some packet capture info but I can't tell yet what I can filter on. I'm told that in the client hello an export cipher (weaker cipher) is where the downgrade request is sent to the server. https:...

ryderse69 · 04-17-2014

Sweet! I was not certain about that but had a feeling that was the case.

Member Since	‎06-05-2007 03:48 PM
Date Last Visited	‎07-27-2018 12:07 AM
Posts	30
Total Helpful Votes Received	10

User Statistics

User Activity

I need to filter out all SSL Downgrade requests

Rate limit UDP traffic on a single switch port

NAT-PT vs NAT64 and Multicast

Booting a CAT6509 from a Sup720 Disk0: with IOS

Copying disk0: to disk1:

Official word from TAC is

If you could check, that

Hi KanwalIs this applicable

I found a similar discussion

Sweet! I was not certain