The Packets, Life and everything
The need to contain software and systems is likened to containing diseases like Ebola and COVID due to their potential threats. Examples of security risks include repojacking, Docker malware, and cloud breaches. How do we deal with Software?Security, Safety, and PrivacySo how do we handle this with computers?Can a computer secure/defend itself?What can we do?2026 …
Continue reading "Full Containment – Do we have to treat software like Ebola?"
Entra ID OIDC-based SSOStep 1: Register the Application in Entra IDStep 2: Create a Client SecretStep 3: Configure API PermissionsStep 4: Configure Keycloak to use Entra IDStep 5: Configure Keycloak for NextcloudStep 6: Configure Nextcloud Common PitfallsEvaluating the Client IP via X-Forwarded-ForDiscovery URLsHow to Fetch the DocumentWith curlLinks Entra ID OIDC-based SSO Step 1: Register …
FreeRadiustac_plusCiscoFortinetCheckPointLinks FreeRadius /usr/local/etc/raddb/clients.conf client cisco { ipaddr = 8.8.8.8 secret = testing123 } /usr/local/etc/raddb/users cisco Cleartext-Password := "cisco" Service-Type = NAS-Prompt-User, Reply-Message := "Hello, %{User-Name}", Cisco-AVpair = "shell:priv-lvl=15" /usr/local/etc/raddb/sites-available/default # Read the 'users' file. In v3, this is located in # raddb/mods-config/files/authorize files # MAC Auth rewrite_called_station_id # Now check against the authorized_macs file authorized_macs …
Avocent ACS – Forcing MTU and MSS per Route The Situation A WAN link did not offer the full Ethernet MTU of 1500 bytes (tunnel/overlay overhead). Two effects came together: The WAN environment did not advertise the lower MTU properly – ICMP "Fragmentation Needed" (type 3, code 4) never made it back to the sender, …
Those are my personal notes towards the certification and do not reflect any training from Check PointFor official Information please refer to sk163417. Primary InterfacesGaia Operating System ShellsCLIGUISmart Console Primary Interfaces Gaia Operating System Shells CLI Gaia Clish - Default Shell Bash - Export Mode Shell GUI Gaia Portal browser based shell Smart Console Smart …
Those are my personal notes towards the certification and do not reflect any training from Check PointFor official Information please refer to sk163417. Review Basic Deployment Standalone DeploymentDistributed Deployment Standalone Deployment All Functions run on the same computer. Security Management Sever and Security Gateway Distributed Deployment Security Management Sever and Security Gateway run on different …
Continue reading "Check Point – Review Basics Deployment Types"
Customer was approaching us if we see an issue to change the tcp behavior of an application interface, due to timing concerns on the server side. -> TCP [SYN] <- TCP [SYN,ACK] -> TCP [ACK] -> COPT [CR] <- COPT [CC] -> COPT [DT] <- TCP [ACK] -> COPT [DR] <- TCP [ACK] -> TCP …
Remove routes from Advertisement on a Forigate firewall Not to myself: 10.255.32.0/20 was wired on C1, local pref was missing. so it might make sens to add this to all incoming routes 'set local-preference 100', incoming there is no issue. show router route-map show router route-map config router route-map edit "EBGP-OUT-R2" config rule edit 1 …
AS-Path FilteringNo-export CommunityPrefix-list FilteringDistribute List Filtering AS-Path Filtering ip as-path access-list 1 permit ^$ neighbor x.x.x.x filter-list 1 out No-export Community ip bgp-community new-format route-map NO-EXPORT set community no-export neighbor x.x.x.x route-map NO-EXPORT in neighbor x.x.x.x send-community Prefix-list Filtering ip prefix-list NO-TRANSIT permit x.x.x.x/x neighbor x.x.x.x prefix-list NO-TRANSIT out Distribute List Filtering access-list x deny x.x.x.x y.y.y.y …
Revisiting an old post. This lab started with a simple customer question: “We have two equal paths through our MPLS network. Why aren't we using both?” BGP and redundancy were already there. Load balancing wasn't. The operator's answer was essentially that this was not part of their supported operational model. Fair enough. But that left …
So this one is done. https://www.credly.com/badges/5f6ac312-1694-404e-a46d-841b8191fe20/public_url