Firewalls: Expensive, Broken Routers

22 March 2013 by 36 Comments

In a previous post on IPS, I made a fairly negative comment on the value that you get from enterprise firewalls in the modern … [Read more...]

Filed Under: Blogs, Security Tagged With: , , , ,

Why Should I Consider IPv6?

10 October 2012 by 14 Comments
Network Overlap

A lot of people are talking about IPv6, but I'm using IPv4 and quite content. I have plenty of public addresses. As long as … [Read more...]

Filed Under: Blogs, IPv6 Tagged With: , , , , ,

Understanding When a Cisco ASA NAT Rule Can Override the ASA Routing Table

7 February 2012 by 8 Comments
cisco-asa

Thanks to @bobmccouch who responded multiple times to my frustrated tweeting about Cisco ASA packet forwarding weirdness … [Read more...]

Filed Under: Blogs, Security Tagged With: , , , , ,

My Utopian Daydreams for 2012

30 December 2011 by 4 Comments

Wouldn't the world be perfect if... QoS schemes were a global standard? Now, you can point to recommended best practices, … [Read more...]

Filed Under: Blogs, Work Life Tagged With: , , , , , , , ,

Cisco ASA 8.3+8.4 Hairpinning NAT Configuration

22 November 2011 by 13 Comments
hairpin

I ran into an issue over the weekend where a VPN client was unable to access a remote office connected via an L2L tunnel … [Read more...]

Filed Under: Blogs, Security Tagged With: , , , ,