Below is an example on how to configure SSH on a Cisco ASA Firewall. %ASA-3-315004: Fail to establish SSH session because RSA host key retrieval failed. %ASA-6-315011: SSH session from 192.168.0.10 on interface MGMT for user “Unknown” disconnected by SSH server, reason: “Internal error” (0x00) conf t crypto key generate rsa modulus 2048 username ruben … Read more
Welcome back! It’s been a while that i don’t really post anything in here, due to multiple things such:COVID, work, work, work, work. It’s time to get this BLOG back but not to the initial roots, meaning not much technical writing, but instead consulting (How/Where and random thoughts), and lessons learned from a Business Owner … Read more
Apply the following config you if you need to send logs over a IPSEC tunnel ASA-1(config)# logging host INTERNAL 10.2.0.100 WARNING: configured logging host interface conflicts with route table entry
Below is a snippet of config for a SSL VPN in a CSR 1000v aaa new-model ! ! aaa authentication login default local aaa authentication login sslvpn local aaa authorization console aaa authorization exec default local aaa authorization network sslvpn local crypto pki trustpoint TP-self-signed-3568908477 enrollment selfsigned subject-name cn=IOS-Self-Signed-Certificate-3568908477 revocation-check none rsakeypair TP-self-signed-3568908477 ! ! … Read more
Tuesday, June 11, 2019 7:00 AM PST If you are considering taking or actively preparing for the Enterprise Routing and Switching, Expert (JNCIE-ENT) exam (and joining the #JNCIEClub2019), then join us for a free certification prep session. This session will address many of the common questions candidates have prior to taking a JNCIE exam and … Read more
Security landscape is evolving fast, so fast detection and mitigation is important for customers. Many enterprises are looking to firewall vendors to provide cloud-based malware detection instances to aid them in their advanced threat detection efforts, as a cost-effective alternative to stand-alone sandboxing appliances. SSL Decryption is one of the key topics, since TLS 1.2 … Read more
Become a Cisco Champion and discover some of the best reasons for it: Access to some of the brightest minds Access to new Cisco Solutions before your peers Recognized by the industry Really nice swags Apply here http://cs.co/CC2018
Google’s BBR algorithm for handling TCP traffic congestion could announce a new Era on the trasnport Control Protocol (TCP). Google announced integration with Google Cloud, a cloud hosting platform offered by Google to thousands of companies and which serves millions of websites on a daily basis. BBR stands for “Bottleneck Bandwidth and RTT (Round-Trip Time),” … Read more
MOOC course continues to be taught by renowned Bitcoin experts Andreas Antonopoulos and Antonis Polemitis and includes 12 live online sessions. You can register here
Cisco is climbing fast, Fortinet faster, PaloAlto still leading and filling their gaps in portfolio and Check Point released finally the R80 for gateways. I predict 4 Leaders next year, it will be a nice race to watch! Full Report on Report Magic Quadrant for Enterprise Network Firewalls 2017