IP Addressing for HA Links for ASA/FWSM/ACE Etc- Poll

What IP addressing do you use for the sync / failover / HA links between your highly available devices ? Read more

TCP SYN Cookies - DDoS Defence

A TCP SYN Cookie is typically used in DDoS engines and load balancers to create another level of protocol security for Denial of Service attacks. Lets take a quick dive through the technology. Read more

Lessons in IT Security From the Credit Crunch

I read an article in the Financial Times Corroded to the core: How a staid Swiss bank let ambitions lead it into folly. It struck me how relevant this is to IT Security.

Read more

Cisco ASA Supports Two OSPF Processes

Sometimes, thinking too much stops you from checking the basics. I have often wished that the Cisco ASA supported more than one routing process like the Juniper Netscreen does (which does this brilliantly). Why didn’t I look for this sooner ?-

Read more

Cisco ASA and IOS Command Tip - Test Aaa-Server

I have been working on a VPN setup that loads the Group Policy from a CiscoSecure ACS server. During the process I discovered the test aaa-server command. Its very handy tool when you are doing this kind of stuff.

Read on…..

Read more