About Jerome BERTHIER

Jerome BERTHIER · 04-29-2024

HelloI need to export all events from level informational from an ASA5508 to a syslog server. Basically, I set it as "logging trap informational"This device provides firewall services as well as remote SSL VPN access and WebVPN.I noticed that AAA and...

Jerome BERTHIER · 03-15-2024

[Edited on March 16th to add details]HelloI was a bit confused about the traffic ports used by mobility on WLC AireOS or IOS-XE.Trying a quick review of traffic ports used by mobility :AireOS IRCM other than 8.5 IRCM or 8.8.111 and latersince this do...

Jerome BERTHIER · 11-10-2020

Hi I think that there is already a way to differentiate platform when deploying AC from WebLaunch on the ASA (assuming that the client has not already any AC version installed).You can bind a regex value condition with each AC package activated on th...

Jerome BERTHIER · 05-29-2020

Hi, I'm looking for accurate documentation on how the AnyConnect duid is generated.If I look at DART cli options, there is two ways to print the uid of a device :-u, -udidDisplay global unique device identifier information.-ul, -udid_legacyDisplay un...

Jerome BERTHIER · 06-14-2013

Hi,I'm using a router WAN Cisco ASR1001 connected through BGP AS65075 with our ISP.This router is connected through OSPF with our firewall Cisco 7206VXR/NPE-G2.Topology :ISP <- BGP -> RT 1001 <- OSPF -> FW 7206 <-> LANOn the WAN router, static routes...

Jerome BERTHIER · 05-02-2024

Seriously ?There is so much CVE issue applicable to such an old ASA version ! It is a crazy situation.I don't know what you expect to protect with that but if it is exposed to Internet, I guess it might be already compromised. As @Marius Gunnerud sai...

Jerome BERTHIER · 05-02-2024

I solved the issue by moving syslog export from a dataplane interface.The documentation is not accurate. I faced the opposite effect.The documentation states :When you configure syslog logging on an interface with management-only access enabled, the ...

Jerome BERTHIER · 05-01-2024

HiTo be more accurate, below the typical setup I use on other ASA VPN devices :logging enablelogging timestampno logging hide usernamelogging list my-events-list level informational class authlogging list my-events-list level informational class conf...

Jerome BERTHIER · 04-30-2024

Well not much people inspired by my question Finally, I think I found a good clue in the syslog documentation of version 9.16 :When you configure syslog logging on an interface with management-only access enabled, the dataplane related logs (syslog I...

Jerome BERTHIER · 03-28-2024

From this documentation, only sampled Netflow is supported on this platform 2960X :https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960x/software/15-0_2_EX/security/configuration_guide/b_consolidated_152ex_2960-X_cg/b_consolidated_152ex_29...

Member Since	‎10-28-2010 06:55 AM
Date Last Visited	‎04-29-2024 12:36 AM
Posts	119
Total Helpful Votes Received	139

User Statistics

User Activity

ASA5508 syslog issue - classes session vs auth/webvpn events

Mobility traffic ports

CSCvw38645 - Ability to differentiate between ARM64 and normal ones when deploying AC automatically (web-launch)

AnyConnect - DART - duid is not unique per device

BGP advertisement : how to suppress the attributes "next hop" and "metric" inherited from OSPF ?

Re: Cisco ASA vulnerable

Re: ASA5508 syslog issue - classes session vs auth/webvpn events

Re: ASA5508 syslog issue - classes session vs auth/webvpn events

Re: ASA5508 syslog issue - classes session vs auth/webvpn events

Re: NetFlow Lite (2960X) sampler