Tcpdump or Fw Monitor, which is better ?
FW MONITOR————It is said that it captures at 4 important points in the firewall namely i,I,o & O. You would see them in the capture in the same sequence.i –…
IEEE STANDARD 802.3AD – JunOS Configuration
The 802.3ad standard supports aggregation on full duplex, point to point links, to form a Link Aggregation Group (LAG), so that a Media Access Control (MAC) Client can treat the…
SecureXL Process Details
SecureXL is a patented technology consisting of a software package with an API for the acceleration for multiple, intensive security operations. In addition to the IPS, SecureXL also accelerates operations…
WebUI port change doesn’t survive a firewall policy push or reboot
Change WebUI port to 4434 from Command line: webui disable webui enable 4434 Unfortunately after a cpstop/cpstart or reboot, the 4434 port will not survive. It rolled back to 443…
Route-based VPN between Juniper and Cisco
Another useful post for route-based vpn from http://x443.wordpress.com/page/5/ Cisco router configuration: crypto isakmp policy 1 encr aes 256 authentication pre-share group 5crypto isakmp invalid-spi-recoverycrypto isakmp keepalive 10crypto isakmp key 0…
Policy NAT-ing with overlap message – Order is important
Existing rule : static (dmz,outside) 200.147.90.89 172.17.1.3 netmask 255.255.255.255 There is a special situation come up today. When 172.17.1.3 access to another site 200.200.200.200 , it has to be nat-ed…
Checkpoint Domain Object
Was thinking to use Domain Object as a source in our firewall rule. After consulted with checkpoint support, it seems impossible if your domain object represented multiple ip addresses. SK42128…
Add static route in Smoothwall
Add static route in Smoothwall Firstly, edit the file /etc/rc.d/rc.netaddress.up Above the 'echo "setting up firewall ……."', add: /sbin route add -net destination netmask subnetmask gw gateway devdeviceinterface ————————————– Edit…