Tag: Security

All the articles with the tag "Security".

• Windows Update KB4034681 (August Monthly Rollup)

  Updated:9 Aug, 2017

  Four hours of swearing at servers, kicking switches and rebooting printers and terminals and all because of a Windows Update. Our entire network uses 802.1

• SRX SSH Ciphers, Algorithms & Key Exchange

  Updated:31 Jul, 2017

  When doing a Nessus scan for the first time on the new SRX320 cluster it highlighted some weaknesses in the SSH protocol. This was due to arcfour, cbc and hmac being enabled by default.

• JunOS SRX too clever for it's own good!

  Updated:28 Jul, 2017

  Today the planned migration from a Juniper ScreenOS SSG to a JunOS SRX didn't quite go as smoothly as I'd have liked. We spent many hours last night and th

• Squid Kerberos Nightmare

  25 Jul, 2017

  What a terrible sequence of events we suffered today. Took quite a bit of head scratching, log reading and plenty of Google fu to resolve. We use Squid wit

• Fail2ban - Quick Reference

  20 Jul, 2017

  List your jails: $ sudo fail2ban-client status Show a particular jails status: $ sudo fail2ban-client status [JAILNAME] Unban an IP Address from the jail:

• Juniper HA Woes

  6 Jul, 2017

  I spent quite some time messing around with a pair of Juniper SRX320's trying to get the HA clustering setup. The documentation seems pretty straight forwa

• Sophos UTM HA

  Updated:28 Apr, 2017

  We encountered a few problems with licensing when we looked at moving from the UTM525's to UTM430's so we had to delay the project until yesterday. On the

• STIG

  Updated:26 Apr, 2017

  We're not talking Top Gear. STIG = System Technical Implementation Guide References http://iase.disa.mil/stigs/Pages/index.aspx https://www.stigviewer.com/

• Broken ARP

  Updated:26 Apr, 2017

  Not a fun morning. We spent an hour or two trying to figure out why our GUEST networks was unable to route any packets to the Internet. For many a GUEST ne

• Preventing Martians

  Updated:4 Apr, 2017

  In the process of changing firewalls and routers around we encountered the Juniper detecting what it suspected were malicious MAC address changes that no longer match the IP address it last used. Which is understandable as we're giving the same IP address to new hardware.