On a network device sometimes we have to collect outputs of multiple commands that contains a counter within its output. To get a state from those counters in outputs we must issue the commands that generates the output multiple times and we should realise if a specific counter value increasing quickly or slowly or does […]
October 25, 2016
yED is an alternative software for those engineers who are working with linux and dont like microsoft visio and want make network topologies faster and simplier for free :-) There is a lot of features like automatic layout and easy data import and so on it realy intuitive when you use it. One of the […]
October 25, 2016
The App sophos-live-protection and the Palo Alto dns-proxy Affair As I first met with this problem I just thought its my first vulnerability that I have found :-), but it wasnt! It was the administrator who forgot to go to a palo alto school before touching a palo alto firewall. :-) The firewall I configured […]
October 25, 2016
Set proxy only at login and unset at logout On some Linux Servers I must reach to the Internet through web proxy with user credentials and i dont have a so called service user everytime. Generally I must set the wget and apt-get and the system wide proxy everytime I login and delete before logout. […]
January 17, 2015
1. What is the difference between machine digital certificate and user certificate? 1.1 Answer Microsoft Windows specifically: ” Local machine certificate store This type of certificate store is local to the computer and is global to all users on the computer. This certificate store is located in the registry under the HKEY_LOCAL_MACHINE root. Current user […]
January 14, 2015
This is the part 2 of the troubleshooting commands that can help you better understand what and how you can troubleshoot on Palo Alto Next Generation Firewall in cli.The Part 1. can be found here. 1. Capture and logging specific traffic2. Logging traffic for global counters3. Updates3.1 Applications and Threats update3.2 Software Upgrades3.3 Licensing 1. […]
September 24, 2014
I try summarize shortly the reasons I collected on google for URL Filtering. I dont find the wikipedia page useful enough for that big topic. On wikipedia it is a part of content-control: http://en.wikipedia.org/wiki/Content-control_software. URL filtering is required to stop the users of an organization from accessing those websites that: – drains their productivity during […]
August 30, 2014
1. The Global Counters The Palo Alto Firewall has released an API, that has some (not all) commands to issue through external programmable interface. This API is based on XML and makes it possible to issue specific commands with that you can check just for example some states of the firewall. Through the API it […]
May 6, 2014
On packetpushers.net somebody wrote an articel about automatically get the outputs of show command of the cisco asa with lynx. That makes it possible to see if a specific counter for a feature, service or process or just interface counter changes, mainly increases, but you cannot see the size of the increase. In troubleshooting it […]
May 5, 2014
The followings links can be used for the list of Cisco ASA SNMP MIBs. Cisco ASA SNMP MIBs: ftp://ftp.cisco.com/pub/mibs/supportlists/asa/asa-supportlist.html ftp://ftp.cisco.com/pub/mibs/v2/CISCO-IPSEC-FLOW-MONITOR-MIB.my OIDs Information page: http://www.mibdepot.com/cgi-bin/getmib3.cgi?win=mib_av&i=1&n=CISCO-IPSEC-FLOW-MONITOR-MIB&r=hp&f=ipsec-flow.mi2&v=v2&t=tree IKE SNMP Queries example 1. Check my IP in the firewall that terminates vpns. OID 1.3.6.1.4.1.9.9.171.1.2.3.1.3 OID NAME cikeTunRemoteValue OID Description The value of the local peer identity. If the local […]
April 11, 2017
0