Archive

Posts Tagged ‘ASA’

Cisco ACL Parser

December 13th, 2010 1 comment

>

Greeting all,
As I work with many firewalls, routers and switches, I have often wished I could parse the ACL’s into a spreadsheet. A few years back I found mangeek’s PIX ACL parser, it can be found at http://mangeek.com/portfolio/pixparser.html. I found it to be a great start to what I was looking for, however the script fell short when using object-groups and names. Also it would not parse the IOS based ACL’s. So a couple years back I made my own version of the tool. My tool was extremely ruff, but it did get the job done enough for my uses. Well, I decided to clean up the tool and fix some of the issues with object groups and names.

So I am now proud to release the ACL2CSV.PL version 0.02. The tool takes the name of a cisco configuration as an argument and then parses the data and returns a CSV file. The CSV file can then be used in your favorite spreadsheet tool for more analysis.

The tool does not do anything special with ACL’s nor does it fully look at how the ACL’s are used. But simply parses the ACL’s for review in a CSV format. I hope you enjoy the tool. I am going to doing more with object groups, inactive ACL’s and other features in the near future.

acl2csv.0.02.pl

CLI to Create a CSR on an ASA, along with import the CA Cert

August 23rd, 2009 1 comment

If you don’t ike the way the ASDM handles certificate enrollment with a CA, and always seem to mess somehting up, I know I did.  This config builder will help.  The config builder simply generates the CSR then allows for the Cert to be pushed onto the system.

This config builder has been use on ASA’s with 8.x, but should work on 7.x and 8.x.

ASA SSL CSR Builder0.01.xlsx

Enjoy,

Categories: Cisco ASA Tags: , , ,

ASA URL Filter and File Type Filter

August 15th, 2009 Comments off

Greetings All,

Attached is a Config Builder to make the ASA into a content filter.  Granted, this a very brute force way to be a content filter and should be used with extreme care, but none the less it works and works great.

This was built using ASA 8.04, but should work on any version of ASA or Pix running 7.x or higher.

ASA_URL_and_Domain Filter_with example data.xls

ip arp inspection vlan 85
ip arp inspection vlan 85 logging dhcp-bindings permit
ip arp inspection validate src-
Categories: Cisco ASA Tags: , ,