Welcome to my CyberSecurity Blog



The intentions of this blog are to provide myself with a means of documenting and sharing the various technology based solutions that I am working on or have worked on.

It is my hope that taking the time to document my findings in this blog will help strengthen both my practical and soft skills on the various technologies and topics. Understanding the various technology offerings from the ground up, the "how" and "why" if you will of implementing that technology is extremely beneficial for those Engineers that fill a services or delivery role, as well as those that fill a Pre-Sales Engineering role.

Some technologies I want to cover that I have come across or am currently working on are

Internet Edge Security Solutions
Cisco ASA and FTD Offerings
Palo Alto Networks NGFW
L2L VPN's
SSL VPN's
SSL Offloading and Decryption
Endpoint Security Solutions (e.g. EPP and EDR)
Cloud Access Security Brokers (CASB) Offerings
ZBFW Solutions
Client Identity Solutions
DMVPN Solutions

Some questions I would like explore and potentially provide answers to are:

What is Security? What does it mean to you and your organization?
What is Cisco's latest approach to Security?
What is Palo Alto Networks approach to Security?
What is the replacement for the Cisco CX Module?
What licensing is involved in migrating to FirePOWER?
Why should my customers make the move to FirePOWER?
What is the migration process from traditional IPS to SourceFIRE?

Check back as I will be proving detailed answers and adding to this blog as much as possible

Comments

Post a Comment

Popular posts from this blog

SSL Decryption with Palo Alto NGFW

Image
Palo Alto Networks Firewall v8.0.4 SSL Decryption Policy This walk-through assumes you have an internal CA server in your production environment (e.g. Microsoft). 1. Go to the Device Tab->Certficates. Lets import our CA certificate from the Microsoft Internal CA Server (e.g. http://x.x.x.x/certsrv). Click "Download a CA certificate, certificate chain, or CRL", choose Base64 and click "Download CA Certificate". Save this to an accessible location (e.g. Desktop) so it can be imported into the PAN-FW. 2. Back in the PAN GUI, import the CA cert and give it a comprehensive name (Note: You would click "Shared" if configuring this via Panorama and if you would like this cert to be used by multiple device/s. In this instance, we are configuring on a single local Firewall). Click ok!   Note: Click on the new Domain-RootCA cert, put a check mark next to "Trusted CA" and click ok! You will now see this reflected under the "
Read more

SSL Decryption with Cisco Firepower Management Center

Image
Cisco Firepower Management Center v6.2  SSL Decryption Policy This walk-through assumes you have an internal CA server in your production environment (e.g. Microsoft). 1. Login to Firepower Management Center (FPMC), go to Objects->Object Management->PKI->Internal CA's and click "Generate CA"  2. Fill out each field according to your FPMC setup and click on "Generate CSR" 3. Copy the encrypted information from the certificate signing request, this can also be referred to as a base64 or .pem request. Now open a browser and access your internal certificate server and request a certificate. 4. Click on "Request a certificate", then click on "advanced certificate request" 5. Paste the content of the clipboard to the text box, Certificate Template should be selected as "Subordi
Read more

Cisco Firepower Management Center v6.2 - Reference Guide

Image
Firepower Management Center v6.2 Reference Guide While I have delivered Cisco Firepower to customers over the last several years, I always prefer that my customers are engaged and shadowing me as I install, configure, and tune Firepower. I am more than happy to explain as I go along however after Firepower is up and running I like to leave my customers with a reference guide that can help them better understand their new best of class NGIPS solution. I would like to share with you an example of this reference guide and I hope that it helps you better understand some partcular features or functions within Firepower Management Center, in this case v6.2. Once we understand the underlying features and functions, we can better configure and thereby tune the NGIPS so we can achieve the highly touted efficacy of the product in terms of detecting and preventing threats! Lets start at the beginning: Initial Configuration Steps - Definitions and HowTo Network Discovery Polic
Read more