CCIE Security v5 Updates

We will be releasing the second part of our CCIE Security VoD (Perimeter Security section) this month – “Basic ASA Technologies”. Those videos are meant to teach you fundamentals of the ASA platform, including features and technologies such as...

DHCP Snooping Illustrated

DHCP Snooping is a subject of many different articles that can be found on the Internet. There are some students, however, who are still having troubles trying to understand the foundations of this feature. In this post we are going to examine a simple network (where...

IOS IPS

IPS functionality available on IOS is limited comparing to NGIPS/FirePOWER4200 or older devices such as ASA’s AIP SSC/SSM modules. We still have plenty of signatures, matching those offered by the above-mentioned products, but only a subset of them can be enabled at a...

Router IP Traffic Export

Router IP Traffic Export (RITE), or simply IP Traffic Export, is a method of copying traffic directly from a router to an external device, such as a Protocol Analyzer or an Intrusion Detection System (IDS). This feature can be used to replace SPAN/RSPAN configurations...

IPv6 DMVPN Routing

In my last post we talked about IPv6 over IPv4 DMVPN configuration, where IPv4 transport was used to tunnel IPv6 traffic. Now I would like to show you how to deploy pure IPv6 DMVPN network, and even more importantly, how to enable different IPv6 Routing Protocols in...