Setting up Single Sign-On (SSO) can seem daunting, but with tools like SimpleSAMLphp and a robust web server like Nginx, it’s more accessible than you might think. This guide will walk you through the...
For organizations requiring flexible and secure network connectivity, seamlessly integrating on-premises networks with cloud services is crucial. This article provides a detailed guide on how to establish a reliable VPN connection between your pfSense...
In our daily online activities, HTTPS is the bedrock of our data security. It uses encryption to ensure our online communications, like banking, shopping, and social media interactions, are safe from eavesdropping and tampering....
This article will provide a detailed guide on how to establish an IPsec VPN tunnel between your pfSense firewall and Symantec Cloud Secure Web Gateway (SWG) using a static IP. This connection allows you...
Your home network’s IP address likely changes, making it tricky to consistently access services with a NameSilo domain. This guide offers a simple way to set up your NameSilo domain to automatically track your...
In today’s digital landscape, the vast majority of internet traffic is encrypted using TLS (Transport Layer Security), the modern successor to SSL (Secure Sockets Layer). This encryption is crucial for protecting sensitive data as...
This article focuses on TLS 1.3, the latest and most secure version of the Transport Layer Security protocol. We’ll use actual packet captures (pcap files) from Wireshark to break down its negotiation process step-by-step,...
Symantec Edge SWG (formerly ProxySG) provides robust web security, and deploying it on a virtualized platform like VMware ESXi offers significant advantages in terms of flexibility, scalability, and resource utilization. This guide will walk...
In today’s rapidly evolving digital landscape, protecting enterprise networks from increasingly sophisticated threats is crucial. A Cloud Security Web Gateway (Cloud SWG) acts as a robust solution, providing comprehensive security between users and the...
Introduction In today’s hyper-connected, cloud-driven world, traditional network architectures are no longer sufficient. With users working remotely, applications moving to the cloud, and cyber threats growing more complex, organizations need a new approach to...
This guide will walk you through the process of installing pfSense as a virtual machine on VMware ESXi. The pfSense project is a free network firewall distribution, based on the FreeBSD operating system with...
I need to install a wildcard certificate on Cisco PI for testing purpose, the following is the installation process. Environment Ubuntu 19.10 OpenSSL 1.1.1c Prime Infrastructure 3.10 Google Chrome 109.0.5414.120/Microsoft Edge 109.0.1518.70 FTP Server...
Someone asked me an interesting question, whether lightweight APs can join a Catalyst 9800 Wireless LAN Controller over a mesh network. My first thought was to implement it with Ethernet Bridging, and after testing...
I recently installed Splunk 8.2.4 because older version of Splunk was affected by the Log4j vulnerability, the following is the installation process. Installation Download and install the dpkg package. Initial configuration Entering the following...
The vulnerability of the Apache Log4j Library affects a very wide range, and the Cisco Identity Services Engine also affected. In this article I will discuss how to install Log4j patch to ISE. I...
If you need to validate your QoS configuration, this article may be helpful to you. I will discuss here how to change the DSCP value in the simplest way, including Linux and Windows systems....
Recently I was troubleshooting a wireless problem. The symptom is that the client cannot connect to a certain radio interface. However, in the test, because the client often selects other radio interfaces, the symptom...
We may need to capture vlan tags during troubleshooting, the configuration method is summarized as follows. Switch side configuration Cisco switches can use Switched Port Analyzer (SPAN) to capture packets, and we need to...
Option 43 can be used to discover WLC or convert EWC/ME to CAPWAP. This is a really useful feature, and I often need to use it in my tests. But its format conversion is...
Recent Comments