Haifeng's Blog

Security

Installing SimpleSAMLphp with Nginx

Setting up Single Sign-On (SSO) can seem daunting, but with tools like SimpleSAMLphp and a robust web server like Nginx, it’s more accessible than you might think. This guide will walk you through the...

Security

Decrypting HTTPS Traffic with SSLKEYLOGFILE

In our daily online activities, HTTPS is the bedrock of our data security. It uses encryption to ensure our online communications, like banking, shopping, and social media interactions, are safe from eavesdropping and tampering....

Security

Understanding TLS/SSL Inspection

In today’s digital landscape, the vast majority of internet traffic is encrypted using TLS (Transport Layer Security), the modern successor to SSL (Secure Sockets Layer). This encryption is crucial for protecting sensitive data as...

Security

Understanding TLS 1.3 with Wireshark

This article focuses on TLS 1.3, the latest and most secure version of the Transport Layer Security protocol. We’ll use actual packet captures (pcap files) from Wireshark to break down its negotiation process step-by-step,...

Security

Installing Symantec Edge SWG on VMware ESXi

Symantec Edge SWG (formerly ProxySG) provides robust web security, and deploying it on a virtualized platform like VMware ESXi offers significant advantages in terms of flexibility, scalability, and resource utilization. This guide will walk...

Security

How to Configure Explicit Proxy for Cloud SWG

In today’s rapidly evolving digital landscape, protecting enterprise networks from increasingly sophisticated threats is crucial. A Cloud Security Web Gateway (Cloud SWG) acts as a robust solution, providing comprehensive security between users and the...

Security

SASE: Cloud-Era Secure Access

Introduction In today’s hyper-connected, cloud-driven world, traditional network architectures are no longer sufficient. With users working remotely, applications moving to the cloud, and cyber threats growing more complex, organizations need a new approach to...

Security

Installing pfSense on ESXi

This guide will walk you through the process of installing pfSense as a virtual machine on VMware ESXi. The pfSense project is a free network firewall distribution, based on the FreeBSD operating system with...

Linux / Other

How To Install Splunk On Ubuntu 20.04

I recently installed Splunk 8.2.4 because older version of Splunk was affected by the Log4j vulnerability, the following is the installation process. Installation Download and install the dpkg package. Initial configuration Entering the following...

Other / Tools

How to capture VLAN tags

We may need to capture vlan tags during troubleshooting, the configuration method is summarized as follows. Switch side configuration Cisco switches can use Switched Port Analyzer (SPAN) to capture packets, and we need to...