• cisco
• ASA

Cisco ASA Firewall

• http://www.networksa.org/?p=298

  logging enable
  logging timestamp
  logging buffered warnings
  logging buffer-size 65000
  logging list acl-messages message 106023
   ##106023, which according to Cisco is always generated when an ACL denies a packet,
  logging list acl-messages message 106023
  logging monitor acl-messages
  logging console acl-messages

• Traceroute through ASA

• ASA Packet capture

• Cisco ASA Firewall Best Practices for Firewall Deployment

• packet-tracer

...