When using the MPF you can use regular expressions to add functionality. You see this in application policies that let you filter file names and such. I came up with the idea for this post after I read a post on lifehacker that talked about a website that can test regular expressions. That site is here.

I thought I'd show how to test regular expressions on an ASA using the CLI. Well here it goes.

Lets say you want to match a file name, something like reallybad.jpg. You could write a regular expression like this:

"reallybad.jpg"

That would work but thats the only file name that could be matched. You could make it more broad with some special regular expression characters. For example

Read more

So in my last post I talked about the Modular Policy Framework and we too a very short look at how a class-map, policy-map, and service-policy all fit together. I also said that today I would discuss how to add application layer functionality. Where I will, as promised but before I do that I want to take a quick survey. Please use the survey below to answer the following questions:

When it comes to studying for the CCSP, what do you do for lab access?

Does it make sense to build your own lab or does it make more sense to just run though to books?

If you are buying your own gear are you also planning on attempting the CCIE Security?

Read more

I want to start by thanking all of you that took the time to fill out the poll.  It looks as though it’s a pretty close 60/40 thing but the majority (60%) say that the CCSP is in fact worth it.  With that said, I wanted to talk about the Modular Policy Framework over the next few days.

Read more

So is it worth all that time you would have to put in to get the CCSP? For those of you who are just joining me you haven't missed much. This happens to be my first of a month long session of Blogging here at NWW. When I decided to do this I has to choose something that I felt would be relevant to you. I decided to stick with what I'm good at and focus in the realm of security, and since i've been training folks for the last 7 years on how to use the PIX, ASA, IPS, Cisco Routers, and AAA I decided to stick with that.

So to start out, I want to throw the ball into your hands. Do you think its worth it? There are a number of tests you can take. SND, SNRS, IPS, and SNPA are the core but what about CANAC, MARS, HIPS? I'd like to know if you see a benefit in getting certified.

Read more