Recently in ASA Firewall Category

ASA/PIX Order of Operations

| 2 Comments
Cisco ASA 5505 Unboxing 9/10

Much thanks to Joshua Walton for forwarding this info over to me - handy reference:

====================
Packet Flow Sequence
====================
PIX/ASA - Inside (Higher Sec_Lev) to Outside (Lower SEC_Level)
---------------------------------------------------------------
Eg. Type - [Sub-Type] - Description
1. FLOW-LOOKUP - [] - Check for existing connections, if none found create a new connection.
2. ROUTE-LOOKUP - [input] - Initial Checking (Reverse Path Check, etc.)
3. ACCESS-LIST - [log] - ACL Lookup
4. CONN-SETTINGS - [] - class-map, policy-map, service-policy
5. IP-OPTIONS - [] -
6. NAT - [] - xlate
7. NAT - [host-limits] -
8. IP-OPTIONS - [] -
9. FLOW-CREATION - [] - If everything passes up until this point a connection is created.
10. ROUTE-LOOKUP - [output and adjacency] -

Recover ASA Software from ROMMON

| No Comments
Houston we have a problem...


Just putting these commands in a handy place since this seems to happen more often than I thought...

rommon #1> ADDRESS=192.168.1.10
rommon #2> SERVER=192.168.1.1
rommon #3> GATEWAY=192.168.1.1
rommon #4> IMAGE=asa800-232-k8.bin
rommon #5> PORT=Ethernet0/0
rommon #6> tftp

ASA SSL Clientless VPN Plugins

| 11 Comments
Java

Image via Wikipedia

These plug-ins are buried so deep in the Cisco site, it took me a good hour to track them down. These allow you to add functionality to the clientless SSLVPN on an ASA through Java. These ROCK for setting up remote administration (without a full VPN) for a network.
SSH Plugin
RDP2 Plugin (supports Win2008/W7)
VNC Plugin
*Note - for the RDP2 plugin, the ASA does not have a built-in plugin type for it. You must manually type "RDP2" as the plugin type when uploading it to the ASA* - click thumbnail below for screencap.
rdp2.png

Simple tip to see pre-shared VPN keys:

CiscoASA# more system:running-configuration

About this Archive

This page is an archive of recent entries in the ASA Firewall category.

PIX is the next category.

Find recent content on the main index or look in the archives to find all content.