Firewall Security

This category contains 138 posts


Juniper knowledge base search plugin for Firefox

Juniper has a plugin for Firefox that can be used for easy search of their knowledge base articles.

Go to http://kb.juniper.net and click on ‘Install Search Engine PlugIn’

 

 

Command to find REALM for Kerberos Authentication in Cisco ASA firewalls

To find the REALM for configuring Kerberos authentication, run the following DOS command on your domain controller and hit enter

set USERDNSDOMAIN

ThIS output is needed when configuring Cisco ASA firewalls clients for Kerberos authentication

ASA CLI configuration example:

aaa-server KerberosGroup protocol kerberos
aaa-server KerberosGroup (inside) host 192.1.1.100
kerberos-realm XYZ.MYDOMAIN.COM

Configuring HA in Juniper SRX

If you have been a long time Netscreen user and are thinking about upgrading to Juniper SRX, beware of the HA configuration complexity with JunOS, it is very unique and is a real challenge to master. You will definitely wish Juniper would have left it the way it was in Netscreen.

for details Ref. Juniper Knowledge base article

Default Cisco ASA Failover Times

By default failover in ASA HA firewalls will occur in

-  15 secs if the active firewall goes down.

-  25 secs if an interface on active firewall is flapping

-  5 secs if an interface on the firewall goes down

-  2 secs if a module on the active firewall goes down.

Use the failover polltime command on the active firewall to change from the default values.