Category Archives: security

ASA VPN with Address Overlap

More and more, the Internet is being used as a connection to business partners. Typically this requires building an IPSec Tunnel between two VPN capable endpoints. For me the device of choice is the Cisco ASA. Since we are connecting to a business … Continue reading

Posted in security | Tagged | 10 Comments

How Many Different Passwords Will Your Bank Accept?

Do you use upper and lower case letters in your Internet Banking passwords in an attempt to achieve additional security?  What if I told you that in many cases it did not even matter? The FFIEC (Federal Financial Institutions Examination … Continue reading

Posted in security | Leave a comment

How to Upgrade a Basic ASA Configuration to 8.4

The Cisco ASA has gone through a few major evolution regarding its functionality and configuration.  Version 8.4 (as well version 8.3) also results in major changes in some aspects of the configuration syntax.  This article is a first in a … Continue reading

Posted in security | Tagged | Leave a comment

Using an ASA to Establish a Guest Network

It is not uncommon to visit a small to medium sized customer for a first time and find a wireless and/or guest network that compromises security for the rest of the network. Organizations that lack policies and procedures for their … Continue reading

Posted in security | Tagged | Leave a comment

Egress Interface Selection on the Cisco ASA

One of the frustrating things about the Cisco ASA is that it does not support policy based routing, or pbr.  With pbr, an administrator can get very granular with routing IP traffic.  For example, an access-list can match traffic and … Continue reading

Posted in security | Tagged | 6 Comments

The ASA’s ARP Behavior

I think anyone who has dealt with the ASA has to admit that it sometimes doesn’t behave as they’d expect.  One of the more memorable times for me was when I used the alias command to do dns translation.  Unfortunately, … Continue reading

Posted in security | Tagged | 2 Comments

The Elusive “access-class out” Command

 ”Access-class out” seems to never work as expected.  At first, it seems that the reason why this the case is because you must telnet into the router first.  In other words, it has no effect to telnet connections that are attempted from … Continue reading

Posted in network, security | Tagged , | Leave a comment

We Must NOT Kid Ourselves!

With a title like that, I can go in a million directions with this blog post.  The direction I want to go is to expose some of the limits and set some expectations of network security professionals.  As a CCIE … Continue reading

Posted in career, security | Leave a comment

US Government Seeking Back Door Into All Encryption

There is a lot of information circulating the Internet about a US bill the Obama administration plans to submit to lawmakers next year.  This intent of this bill is to give law enforcement access to clear text data similar to … Continue reading

Posted in security | Leave a comment

ASA — Filtering LNK and PIF Files

If you happen to be in the security field or if you deal with a large number of computers, you probably have heard of the new vulnerability in the Microsoft Windows operating system.  This latest vulnerability leaves systems susceptible to … Continue reading

Posted in security | Tagged | Leave a comment

Introduction to AAA on IOS Devices

By default, a Cisco IOS device performs authentication based on a line password and authorization based on a level 15 enable password.  This is a problem for any organization that desires granularity or the ability to track activities back to … Continue reading

Posted in network, security | Tagged , | Leave a comment

Introduction to Extended IP Access Lists Application

This blog entry is a little bit different than other recent posts.  The original intent of Packetu.com was to help people understand how networks operate and function.  During my recent studies, it morphed into a CCIE blog.  This article is … Continue reading

Posted in network, security | Tagged | Leave a comment