Palo Alto Networks has provided a tool for public use - Minemeld - that will collate threat intelligence feeds and other indicators for a more dynamic security policy enforcement strategy with their firewalls: https://www.paloaltonetworks.com/products/secure-the-network/subscriptions/minemeld I have a slightly …

Read More

I've removed NSX-V 6.4.4, and am about to start some more datacenter/route-switch projects - this is the lab network diagram for reference: And, the meatspace version - the cheetos are there in case of an emergency:

Read More

Captive portals suck. We need them for any public access network, but with the widespread adoption of HTTPS, it is really difficult for users to find a hint as to where to go to get their access. How captive portals work In most real-world applications, the client station is placed in a network where all of the …

Read More

Did you know that before you authenticate to your wireless network, it's using the same security mechanisms as open Wi-Fi? With TLS, it's fairly well known how (most) cipher suites implement the Diffie-Hellman exchange to provide reasonably effective forward secrecy. ECC Diffie-Hellman has largely superseded RSA, but …

Read More

Aruba has released for general availability ArubaOS 8.4, which includes WPA3-PSK: https://www.arubanetworks.com/techdocs/ArubaOS/8.4.x.x/Default.htm Understandably, I was pretty excited to try it out and promptly upgraded my instant cluster, contained within the "safe zone" of my home lab. It was running …

Read More