Category: Security
-
Rogue Access Point Detection/Mitigation
This is the article relating to my 2011 MUM presentation. I was trying to think of something fun and different for this year’s MUM, so I came up with rogue access point detection/mitigation. The project surrounds having a Mikrotik probe connect to any open access points it can find. It then trys to access a…
-
Cisco ASA SSH, Don’t Forget To Generate A Key
If you are just now enabling SSH and you get the following error message: SSH session from XXX.XXX.XXX.XXX on interface Outside for user "" disconnected by SSH server, reason "Internal error" (0x00) It looks like you need to generate an RSA key for SSH: crypto key generate rsa modulus 1024
-
Block RFC-1918 Spoofed Traffic
A general rule of thumb in a service provider network is to block RFC-1918(private addressing) address space. You want to block this incoming from your upstream providers also, but generally filtering it in your network is a good idea. You will also want to block any traffic coming from your provider sourced from your address…
-
Show ASA Config PreHash
My boy Yeager posted this up ages ago. It basically allows you to show the running config and read the group-policy shared keys. I found with the newest versions you need to run the command like so: more system:running
-
Upgrade Your ASA To 8.3X – Memory Requirement
It seems that as of version 8.3 of the ASA code, you have to have 2GB of RAM in your 5520 and 5540, a meager 1GB is necessary for your 5510. The funny thing is that prior to February, all of these devices shipped with only 512MB of memory…that’s a pretty significant jump, wouldn’t you…
-
Cisco – VPN Issues From A 6509
I’m doing IPSec tunnels from a 6509 at a remote facility to an ASA. The tunnel would establish, traffic would send from the 6500 to the remote client, the remote client would answer, but it would never go back through the 6500…strange. I noticed that the ASA said that the connection was using NAT traversal,…
-
Panduit Jack Blocker and Cable Locker
So the Panduit rep was here with one of our customers and he had a few things to show us…he just happens to keep this kind of thing in his pocket ;). He showed us the port blocker and the cable locker. The little port blocker guy is a tiny blue piece of plastic that…