About michael_bartho

michael_bartho · 02-15-2022

Hi All, Just the other day I created an outgoing ACL on my OUTSIDE interface on the ASA. The source is a couple of internal servers which I need to deny internet access to. The servers will have to exit other interfaces on the ASA so I thought that i...

michael_bartho · 12-03-2021

Hi Our security team is asking if it's possible to deploy a NDR solution in our datacenter fabric to ingest "all traffic" for analysis. All they're asking is to SPAN all traffic on each Leaf switch into the NDR device. I've made it clear that they ca...

michael_bartho · 04-27-2021

Hi all, We had a RMA on one of our ISR routers, so when getting the new one we uploaded the old config to rebooted the router. We weren't aware that the route had been configured with the Encrypted Preshared Key feature (https://www.cisco.com/c/en/us...

michael_bartho · 11-23-2020

Hi, Very brief, our setup consist of ASAs with FPMs sitting at remote branches, the main office, and datacenter. Currently we're using the same intrusion policy on every edge device. Would it be beneficial to deploy separate intrusion polices on eac...

michael_bartho · 09-18-2020

Hi All, I'm configuring SMS Passcode on AnyConnect using ASA. I'm challenged by the fact that after a successful secondary Auth via SMS, AnyConnect prompts for username and password again in a loop. I've traced the RADIUS traffic, and the RADIUS serv...

michael_bartho · 03-30-2022

Hi Sandeep Thanks for putting the link out there. I looked through Cisco Polices and Processes, and it didn't show the Firewall Best Practices. (https://tools.cisco.com/security/center/securityResources.x) Do you know if there is an extended library ...

michael_bartho · 02-15-2022

You're right, and I didn't pay attention as the ASA creates a new OUTGOING ACL for the new ACE. After all these year, this shouldn't have slipped - rookie mistake!

michael_bartho · 12-06-2021

Hi Rob,It seems that NBR is targeted at specific ports and flows, not the entire switch thus pulling every packet to the NDB or in my case the NDR box. I'm still unclear how a forever running SPAN on the entire switch will impact performance, since S...

michael_bartho · 12-01-2020

The issue was with MSCAHPv2 on that specific ASA code, though it wasn't documented. We switched to PAP auth, and the flow worked.

michael_bartho · 11-30-2020

Thanks Marvin! In my case then, it would make sense to apply a policy to our datacenter, and another to every other location since they act as branches. In regards to intrusion policies, I'm not able to find any documentation that shows how to revert...

Member Since	‎09-06-2015 11:37 AM
Date Last Visited	‎05-16-2022 02:39 PM
Posts	131
Total Helpful Votes Received	11

User Statistics

User Activity

Outgoing ACL on OUTSIDE kills IPSec traffic ASA

ACI and Network NDR

Lost password (Encrypted Preshared Key) on ISR

Recommendations on how to setup intrusion polices

AnyConnect prompts for User/pass after 2FA

Re: Cisco have published a FW

Re: Outgoing ACL on OUTSIDE kills IPSec traffic ASA

Re: ACI and Network NDR

Re: AnyConnect prompts for User/pass after 2FA

Re: Recommendations on how to setup intrusion polices