I’ve been developing content to enhance our Firewall training as of late.  In this video I give you a sample of some of the material I am working on.  Here I walk you through configuring Dynamic Network Object Based NAT on a Cisco ASA running version 8.3.  The NAT configuration is a bit different than [...]

Tonight I worked on the ASA Per-flow policing.  The configuration is fairly straight forward.  After ensuring that the VPN works create a class-map to match the tunnel-group and the destination-address like so: class-map vpn_data match flow ip destination-address match tunnel-group ezvpn Next create the policy map to police based on the class we just created: [...]

For those of you preparing for the SNAF exam, I would recommend the book “IPSec.” It’s an easy read, vendor neutral, and gives a great look into the workings of IPSec. Enjoy!

For a few days now I have been playing with static route tracking in my SNAF class.  The class is running ASA 8.0 (2).  After reading every document I can find and testing in my lab I have concluded that version 8.0 (2) does not work.  Now I can’t find a bug report on it, [...]