About andhingr

andhingr · 04-28-2011

Issue: How to restrict FTP commands to allow downloads from certain ftp servers. Default ftp inspection allows all ftp commands and allows all downloads/uploads. If you would like to restrict downloads or uploads to and from certain ftp servers, plea...

andhingr · 06-24-2011

I would recommend that you talk to your local cisco account team and they can suggest you a solution and product.

andhingr · 06-24-2011

Since the failover link is failing. You should restore the failover link as soon as possible because the unit cannot fail over to the standby unit while the failover link is down.Here is a link to document which explains failover actionshttp://www....

andhingr · 06-24-2011

Since the attack has already taken place. If you are not allowing these IPs ASA will be blocking them anyways. The best course of action will be to have it blocked upstream and if upstream is your service provider then talk to provider to have the I...

andhingr · 06-23-2011

Your FW is inspecting all outgoing http traffic so that return packets are allowed through the acl applied inbound on the interface. The return packets will have the source port of 80 so its possible that if there is man-in-the middle attacks somebod...

andhingr · 06-23-2011

You cannot create etherchannel from sub-interfaces however you can create sub-interfaces of etherchannel interface as this essentially becomes a single bundle port so creating a sub-interface on physical or etherchannel interface is same.

Member Since	‎10-08-2009 03:10 PM
Date Last Visited	‎03-12-2021 03:15 PM
Posts	29
Total Helpful Votes Received	19

User Statistics

User Activity

Restricting FTP downloads using MPF on ASA/PIX/FWSM

DDoS Mitigation Appliance

ASA LAN Based Failover not working

Block IP address from Outside interface

ACL issue & DOS attack

ASA 8.4 etherchannel with Sub Interfaces