Basic configurations on Cisco ASA Firewall - Part 2 (thenetworkdna)

 

Basic configurations on Cisco ASA Firewall - Part 2

As a part of the understanding on the basics of Cisco ASA firewalls, these are some of the commands used to configure Cisco ASA firewall in real scenario.

Who Is Axellio?

 

The guys at Network DataPedia asked me, “Who is Axellio?” So here is a brief overview. Axellio Inc. is an innovator in high-speed, no-loss network traffic capture, distribution, and analysis. Spun-out from X-IO Technologies in 2018 and with an intellectual pedigree extending to Digital Equipment Corporation and Seagate Technology, Axellio has focused its 20-year legacy of innovation and expertise in providing high-speed enterprise data capture and storage platforms. Addressing network and security operations of defense, intelligence, and commercial enterprise markets, Axellio delivers solutions that combine common off-the-shelf (COTS) hardware with its open source, software-based solution to provide the most comprehensive and economical monitoring and analysis solutions.  Axellio is a US owned, small business with multiple contracts with the US Department of Defense. We also have civilian enterprise-based cybersecurity solutions as well.

Here is a little bit more involved summary of the Axellio solution. Axellio is a data intelligence solution that focusses on streaming and storage of real-time, high-speed data analytics. Axellio’s mission is to control data overload in time-series analysis systems. We have developed a unique software-based solution that simultaneously captures, stores, analyzes, and distributes any streaming data from 1 Gbps to far exceeding 200 Gbps.

The unique storage software is designed for continuous, simultaneous write-to-disk and read-off-disk sustained without impacting read or write performance, access latency, or throughput.

Targeting high-intensive data analytics applications in cybersecurity, electronic warfare, ISR, and AI-powered applications, Axellio’s Xpress Platform and solutions improve the performance and accuracy of your existing analytical systems, while adding detail for on-demand and historical analysis. The DVR-like capabilities can be applied to any time series data, scaling to address the most demanding data analytics in any form factor.

The Axellio Xpress Platform Delivers Groundbreaking Performance

Here is a basic diagram of the Axellio Xpress Platform.

Key benefits of the solution include:

• Any Speed – Scalable speed and processing power that keeps up with real-time capture, processing, and on-demand, forensic analysis

• Anywhere – Software-based, scalable, and flexible architecture for deployment in cloud, virtual, and physical environments -customized for your mission

• Anytime – Data analysis with the latest insights and learning anytime, even weeks after an event happened – empowering learning and superior reconnaissance

• Affordable – Based on the latest storage technology combined with COTS hardware to keep scale affordable – analyze more of your data for accelerated ROI and better visibility

Axellio Delivers A New Approach to High-Performance Data Analytics

The Axellio Xpress Platform delivers groundbreaking performance that integrates via open APIs with your existing analysis systems to improve the analysis performance, accuracy, and detail. The solution is protocol agnostic, using open APIs to control both content and speed of the data to ensure your analysis applications are not overwhelmed. The Axellio solution is hardware agnostic using COTS hardware – to monitor more of your data affordably.

There are two distinct solutions that are part of the Axellio platform – PacketXpress®  and SensorXpressTM. This allows the Axellio Xpress platform to help customers in two distinct areas – cybersecurity and radio frequency (RF).

PacketXpress fortifies your network cybersecurity solution

Key features include:  packet capture, distribution, and analysis that improves the performance, accuracy, and depth of your real-time and forensic analysis:

• Monitor more traffic economically for complete visibility

• Detect sophisticated attacks reliably and prevent missed events under high traffic load

• Analyze, triage, and resolve incidents with complete event details

• Validate countermeasures with actual event traffic before deployment

SensorXpress optimizes radio frequency monitoring

Extend your time monitoring the electromagnetic spectrum at the widest instantaneous bandwidth with the following features:

• Frequency, protocol, and hardware agnostic

• Record more spectrum for longer time periods

• Collect and store more spectrum data for post-mission analytics

• Dense form factors for disconnected operation during forward tactical missions

While these two solutions focus on packet and I/Q data, the Xpress Platform can handle any type of time series data:  packet, RF, video, voice, or log files.

If you want to accelerate into the data fast lane using Axellio’s XpressWay (the Axellio Xpress Platform) to quickly capture, manage, and understand YOUR data, more information is available here. Or if you have questions, reach out to Axellio and we can show you exactly how to optimize your monitoring and analysis solutions.

Fibre cutover and site walkthrough

 I have worked on countless network builds in my career and occasionally prefer to perform a ‘walk through’.

For those that haven’t been through this process, there is always something that isn’t done the way you feel it should be. It could be that a network drop is in the wrong spot, or not labelled, an access point isn’t where you asked it to be installed, incorrect number of cables pulled to a location, etc…

The point is that if you catch it early enough, it isn’t a big deal to fix.

Then there are all those requests or issues you identified that should be followed up on to ensure it was done and it was done the way you had requested.

In this video, I was going to my favorite construction site to cut them over from a temporary wireless internet connection to a fibre one and thought why not go for a walk and check on things.

Monitoring - Step 1 of Visibility

 In the packet world I hear a lot of concerns that when bandwidth increases, the ability to analyze is negatively impacted.

When I present or work on-site, I remind network technicians that network monitoring is the basis of developing a baseline of your network health which can be accomplished many ways.

Why Checking Network Device Logs Should Be Part of Every Troubleshooting Job

I have a habit of always checking logs of any equipment that I work on.

Checking network device logs should be a routine part of troubleshooting, not something reserved for when a network has already failed. Routers, firewalls, switches, wireless controllers, and other infrastructure devices continuously generate information about what is happening on the network. A quick review of those logs can reveal failed login attempts, configuration problems, interface events, blocked traffic, and other activity that may not be obvious from the device's management interface. In my experience, spending a few minutes reviewing the logs while working on a device can sometimes uncover an issue that would otherwise remain hidden.

Two Factors Adversely Affecting U.S. Software and Infrastructure Security – Part 2

 

The last decade has seen a fundamental product development shift — the extensive use of open-source software. This crowd-sourcing effort has made the cost of software development quicker, faster, and potentially riskier. While the rampant use of open-source software (OSS) is a contributor to the problem, this issue extends beyond OSS. The increasing role of Chinese companies in developing software across various sectors, including those deemed critical, raises additional concerns.

Why Packet Analysis (and Wireshark) Should Be In Your Security Toolkit

 

Don’t underestimate the value of packet analysis in your security strategy. And if you’re analyzing packets, the open-source Wireshark software is a go-to tool. On today’s episode, we talk with Chris Greer, a Wireshark trainer and consultant specializing in packet analysis.

Ubiquiti WAN Balancing And Failover Part 2

 I really enjoy hearing from people who read or watch my videos. The feedback is usually very helpful with next article ideas, requests for clarification or help, and most importantly things I may have missed to cover in the article or video.

A great example is when I posted the article “Testing Edgerouter load balancing“ (https://www.networkdatapedia.com/post/testing-edgerouter-load-balancing) . if you didn’t see it, I did a simple video and short write up explaining how I implemented fail over on a Ubiquiti router.

Good old Windows Command Prompt

 i can't tell you how many times someone comments on how they had no idea how powerful the command prompt is and how many things you can do from it. The same applies to the CLI interface of most equipment.

Ok, I will admit and confess that since I started in this field during the late 90's, the command prompt or CLI doesn't spook me at all. Truth be told, I go looking for it since I like to script things, and it's much easier to do so from the CLI, rather than a GUI.

Since Microsoft introduced the Terminal application, i thought it would be helpful to review the basic redirection and the new Export Text feature that is available.

Enjoy