Blog Archives

Transparent Firewalling using Palo Alto Virtual Wire

We all know the story. You deploy a network to extremely tight specifications, and when you ask – just to make sure you understand the requirements, of course – if it’s absolutely certain that the client IP ranges will never change,

Tagged with: , , , , , , , ,
Posted in Palo Alto Security

Make drawings to understand the topology of firewall implementations

Every time I see a new implementation of a Cisco ASA firewall I need to know how it is connected. Before doing any changes in the configuration and before answering any answers regarding the functionality of the FW i first

Tagged with: , ,
Posted in Cisco Security

Cisco Cyber Threat Defense

I am currently attending an introduction class in Cisco Cyber Threat Defense. Since I never heard the phrase before I couldn´t wait showing up.   Cisco Cyber Threat Defense is a conceptual thing just like TrustSec. It brings several building

Tagged with: , ,
Posted in Cisco Security

ASA Nat behavior with multiple public ip ranges changed after upgrade

I recently upgraded a customer ASA from v8.2 to 9.0 and while doing that I found out that some (yeah!) of the static NAT translations didn´t work after the upgrade. Skilled ASA-upgraders knows that this happens a lot. That´s why

Tagged with: ,
Posted in Cisco Security

Cisco CLI access using Radius and ISE

When releasing Cisco ISE as a “new ACS” questions quickly raised regarding the fact that there is no Tacacs+ support in ISE. With v1.0 of ISE Cisco said “Tacacs+ will come in a future version” but we haven´t seen it

Tagged with: , , ,
Posted in Cisco Security

Signuppp

[mc4wp_form id="2457"]
Website Security Test