Tag: Security
All the articles with the tag "Security".
Azure IPSec VPN Ups and Downs
Updated:Following our IPSec connection setup for Azure and the Juniper SRX we were seeing regular disconnections and a failure to re-establish a tunnel for extende
Sophos Mobile Control EAS Proxy
Updated:Up until this week we've been able to get away with a very simple SMC installation that proxies Exchange ActiveSync (EAS) from the one server with the base Sophos Mobile Control program without using a Standalone EAS Proxy.
Mysql Broken After Apt Upgrade
Updated:My local install of mysql-community-server decided to fail today after applying some updates. I'm running Debian buster/sid so these kind of things are to be expected. But this was a totally new one to me.
Java Keystore Management
Updated:In the process of getting a new queue management system installed I discovered they're using HTTP and not HTTPS. As part of out security process I had to r
Tomcat and HTTPS
Updated:By default Tomcat gets installed with HTTP only and a number of default applications. Previously I linked documents on how to secure Tomcat . But put simpl
Windows, Apache 2.4 and OpenSSL
In order to make Apache 2.4.27 compliant it needs the later version of OpenSSL v1.1.0. To get this you need to install the VC15 version. The VC11 etc. do not include the later OpenSSL and fail because they are compiled with v1.0.2
Apache 2.4 TRACE - Nessus plugin 11213
Updated:If you're using Apache 2.4 then there is a config TraceEnable directive that you should use to simply turn off the TRACE method.
SMB Insecurely Configured Service
Updated:For the first time today I ran into Nessus plugin ID 44676. It highlighted an "insecurely configured Windows service". This related to a Service Discretion
Windows Update KB4034681 (August Monthly Rollup)
Updated:Four hours of swearing at servers, kicking switches and rebooting printers and terminals and all because of a Windows Update. Our entire network uses 802.1
SRX SSH Ciphers, Algorithms & Key Exchange
Updated:When doing a Nessus scan for the first time on the new SRX320 cluster it highlighted some weaknesses in the SSH protocol. This was due to arcfour, cbc and hmac being enabled by default.