Todays lesson is about the reload-command. Yes, there is a reload-command in CLI of the Ironport Web Security Appliance. There are only two facts that is good to know about the command. One good thing and one bad thing. Good…

Today I noticed something weird that I have not investigated further yet. There is a change of behavious in how Cisco ASA routes traffic in later versions of software. In later versions it takes NAT into consideration when doing routing…

Mental note: how to request SSL certificate on Cisco ASA:   Verify that time is accurate vpn# sh clock 06:46:19.172 GMT Fri Dec 4 2015 vpn# vpn# sh run ntp ntp server x.x.x.x source outside ntp server x.x.x.x source outside…

Mental note: The default login and password for a virtual Firepower Managment Server, FireSight, is admin and Admin123, nothing else. Took me quite a while to google.

I have created a simple script that runs dnscheck regularily and sends me an email when dnscheck finds any errors. By doing this I am notified if a zone transfer breaks, DNSSec-signatures gets outdated or any other anomalies in the…