IOS 15.0 Security Enhancements and Improvements, Part I
This blog is the first of a series of articles on the new security features of IOS 15.0 code. Our focus will be on what we view as the more significant and complex singular aspects of this major...
View ArticleClik here to view.
“nat-control” versus “no nat-control”
ASA and PIX software version 7.0 introduced the configuration command nat-control which didn’t exist in previous versions of code. Although training course material for both the SNAF (Securing Networks...
View ArticleClik here to view.
Implementing TCP SYN Cookies on Cisco Hardware
Many students who have either taken training classes on the Cisco PIX or ASA security appliances or read associated published material are already acquainted with the phrase “TCP SYN cookie”. This post...
View ArticleClik here to view.
The shun Command on the PIX/ASA
One command that had a fairly long history first with the PIX Firewall and now the ASA is the shun command. In this post we’ll examine this command’s history, why it’s useful, and its new-found...
View Article
