Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About michael_bartho
08-16-2019
Stats
Member since
09-06-2015
107
Posts
6
Helpful
1
Solution
08-14-2019
04:10 AM
Okay, just to make sure I'm understanding this correctly. ASA 1, int 1, isp 1 + ASA 2 int 2, isp 2, everything configured on the active ASA. Then when ASA 1 fails, it connects to the outside via int 2 on ASA 2.
... View more
08-14-2019
03:51 AM
What about the outside IP for the secondary ISP - how is that applied?
... View more
08-14-2019
03:24 AM
I'm configuring a pair of ASA into HA mode for failover. Active/Standby. But in this case, each ASA has a separate internet connection. ASA 1, with ISP A | ASA 2 with ISP 2. I know how to configure the ASAs into HA mode, but a bit uncertain about on how to configure the secondary ISP on the standby ASA. Can somebody help me with this?
... View more
Labels:
Created by
michael_bartho
in Switching
in Switching
08-04-2019
11:53 PM
08-04-2019
11:53 PM
We resolved the issue - it was due to a firmware bug, that were caused when SVI's was terminate in a VRF. What I'm seeking is an explanation for the CMDlets, and more details about this level of troubleshooting.
... View more
Created by
michael_bartho
in Other Security Subjects
in Other Security Subjects
07-29-2019
01:59 AM
07-29-2019
01:59 AM
Thanks - great presentation, now that I'm that wiser I can see there's plenty of ways to better our current firewalls :)
... View more
07-26-2019
04:57 AM
Hi Cisco When will we see new logical and conceptual Visio stencils packs? The current packs from https://www.cisco.com/c/en/us/about/brand-center/network-topology-icons.html seems graphical outdated comparing to icons used in. CVDs, etc, and the packs contains legacy appliances and technology. Regards, Michael
... View more
Labels:
Created by
michael_bartho
in Other Security Subjects
in Other Security Subjects
07-26-2019
04:44 AM
07-26-2019
04:44 AM
Is there a CVD for firewall HA/Cluster installations, ranging from smaller- to high-end appliances?
... View more
- Tags:
- CVD
Labels:
Created by
michael_bartho
in Firewalls
in Firewalls
12-13-2018
03:53 AM
12-13-2018
03:53 AM
I agree, that CSM wouldn't be a viable solution - did Prime Security Manager provide this feature, despite that it's EOL, in favor for FMC on FTD?
How does NPM handle the dynamic OID?
... View more
Created by
michael_bartho
in Firewalls
in Firewalls
12-13-2018
02:53 AM
12-13-2018
02:53 AM
Yes, I did look at the IP_SEC_FLOW_MONITOR mib, and the output is like this ->
cikeTunStatus.12640256
active(1)
cikeTunStatus.12787712
active(1)
cikeTunStatus.12800000
active(1)
cikeTunStatus.12808192
active(1)
cikeTunStatus.12820480
active(1)
cikeTunStatus.12865536
active(1)
Where cikeTunStatus = 1.3.6.1.4.1.9.9.171.1.2.3.1.+(TUNNEL OID = 12820480). when the tunnel flaps or re-keys den OID changes. I can lookup the remote peer IP multiple places, to get the new OID, but some automation would have to lookup the new value, and update en entire OID in the monitoring software.
I'm trying Cisco security manager, but the installer takes forever. VPNTTG is able to provide the correct output (havn't tried it, but they promise that it can do the job)
... View more
Created by
michael_bartho
in Firewalls
in Firewalls
12-13-2018
01:31 AM
12-13-2018
01:31 AM
I was unaware of Security Manager until now, I'll have to give it a try.
The snmp approach adds additional manual steps, since the OID changes when the tunnel re-keys. One would have to lookup the new value, and then change the monitoring to poll the new OID. This could potential give false alerts in the time span between a new OID and script execution. I might have approached it the wrong why. so there could be someone who has this running?
... View more
Created by
michael_bartho
in Firewalls
in Firewalls
12-13-2018
12:05 AM
12-13-2018
12:05 AM
Picking at an old topic here. We have a PRTG installation for monitoring, but It can't handle all IPSec via SNMP.
How do you monitor IPSec connections on ASA, and alert on them? Tools, scripts, anything...
Best regards,
Michael
... View more
Labels:
Created by
michael_bartho
in Cloud Security
in Cloud Security
12-05-2018
12:56 AM
12-05-2018
12:56 AM
Just a quick question regarding Umbrella Application blocking, is to how its works?
We did some testing with VPN clients, and when we enforced anonymizer block via Umbrella, the VPN disconnected within a minute.
/Michael
... View more
Labels:
11-16-2018
06:31 AM
Just a quick and simpel question.
ASA Syslog messages are grouped in certain ranges, looking here -> https://www.cisco.com/c/en/us/td/docs/security/asa/syslog/b_syslog.html
Does anyone know what the specific ranges cover?
... View more
- Tags:
- syslog
Labels:
Created by
michael_bartho
in Cisco CLI Analyzer
in Cisco CLI Analyzer
10-16-2018
06:35 AM
10-16-2018
06:35 AM
Thanks - It's working again :D
... View more
Created by
michael_bartho
in Cisco CLI Analyzer
in Cisco CLI Analyzer
10-15-2018
12:22 AM
10-15-2018
12:22 AM
Hi
I have the same error on 3.6.2. Tried it on to different machines. One were an upgrade and the other a clean install.
... View more
08-14-2019
Okay, just to make sure I'm understanding this correctly. ASA 1, int 1,
isp 1 + ASA 2 int 2, isp 2, ...
08-14-2019
I'm configuring a pair of ASA into HA mode for failover. Active/Standby.
But in this case, each ASA ...
Created by
michael_bartho
in Switching
08-04-2019
08-04-2019
We resolved the issue - it was due to a firmware bug, that were caused
when SVI's was terminate in a...
07-29-2019
Thanks - great presentation, now that I'm that wiser I can see there's
plenty of ways to better our ...
07-26-2019
Hi Cisco When will we see new logical and conceptual Visio stencils
packs?The current packs from
htt...
07-26-2019
Is there a CVD for firewall HA/Cluster installations, ranging from
smaller- to high-end appliances?
Created by
michael_bartho
in Identity Services Engine (ISE)
07-22-2019
07-22-2019
interface GigabitEthernet2/0/14description DYNAMIC-USERswitchport mode
accessswitchport voice vlan 4...
Created by
michael_bartho
in Identity Services Engine (ISE)
07-22-2019
07-22-2019
Thanks - In my case I haven't configured the interface level "dot1x
reauthentication" command so the...
Created by
michael_bartho
in Identity Services Engine (ISE)
07-22-2019
07-22-2019
I seem to recall that if a switch looses connection to all PSN nodes,
the authentication session wil...
03-29-2019
Hi Guys I'm having an issue when I firepower filtransfers on my ASA
5525. Users report that installe...
03-21-2019
Hi Guys I need to allow the urls found on
https://docs.microsoft.com/en-us/office365/enterprise/urls...
12-13-2018
I agree, that CSM wouldn't be a viable solution - did Prime Security
Manager provide this feature, d...
12-13-2018
Yes, I did look at the IP_SEC_FLOW_MONITOR mib, and the output is like
this -> cikeTunStatus.1264025...
Public Statistics
| Date Registered | 09-06-2015 11:37 AM |
| Date Last Visited | 08-16-2019 04:57 AM |
| Total Messages Posted | 107 |
| Total Helpful Votes Received | 6 |
.jpg "Hall of Fame Master"){kind=icon}
