Configuration Example, Firewalling

Cisco ASA – Reset TCP connection

René Jorissen on August 22, 2011 2 Comments • Tags: #application #asa #cisco #idle #legacy #packet #psh #reset #rset #tcp #timeout

“Normal” TCP applications use a three-way handshake to establish a session. After data has been send the session is closed. Some legacy applications don’t always close a TCP session. They keep the session open, even when the session is idle for a long time (+ 2 hours). When the session is idle and a client … Read More

Configuration Example, Firewalling, Routing

NBAR and smart filtering

René Jorissen on February 15, 2011 2 Comments • Tags: #application #based #http #match #mime #nbar #network #protocol #recognition

NBAR (Network Based Application Recognition) is a cool Cisco tool to identify and classify content flowing through a router. You can identify applications as mission critical, business-related, non-critical or unwanted. Once these mission critical applications are classified they can be guaranteed a minimum amount of bandwidth, policy routed, and marked for preferential treatment. Non-critical applications … Read More

IPSec / SSL VPN, Proxy

Microsoft IAG

René Jorissen on November 25, 2008 0 Comments • Tags: #appliance #application #cag #cisco #csg #gateway #iag #intelligent #isa #juniper #microsoft #sa #ssl #vpn #webvpn

It has been a while since my last post, but time is short these days. Today I had to troubleshoot a Microsoft IAG appliance. Microsoft IAG stands for Microsoft Intelligent Application Gateway. And indeed, intelligent it is. NOT. I have seen and configured multiple SSL VPN solutions like Juniper SA, Citrix Access Gateway, Citrix Secure … Read More