Kelvin Charles is a Cyber Security Systems Engineer at Cisco Systems who holds multiple certifications including the following: CISSP | CCNA | CCNP Enterprise | CCNP Security Specialist x2 | CCNP Security | ISO 27001 Lead Implementer | CMNA | Microsoft Azure & AI Fundamentals | Network Wizkid provides educational content with a focus on Cyber Security and Networking.
Hello Kelvin My name is Joseph Cooper I wanted to know how to I go about restricting Remote vpn client user to only access a specific server on the DMZ. They are successfully connect to the vpn but I want to limit 1 server to one client and not the entire subnet.
We currently have a multi tenant setup where our logins have multiple organisations underneath. How does this SSO translate to accounts below our master account?
Great video, thanks! I have gone through this setup but on the latest SFMC and FTD versions (7.3.1), same steps but interface is different. I got it to work as per your video but the BVI needs an IP in the same range, taking this away stops the bridging. I am looking for a solution where the outside network IP will change (its a mobile office), so was hoping to not have to reconfigure FTD each time IP/site changes. cheers
Sorry pal, i dont understand where you set the role as a Read_Only. I mean...you wrote all the time "Read only" but these are just descriptions. Where are you actually configure that role to be in ready mode only?Thanks
Great Video. I am running into an issues on my domain joined computer. The mmc snap-in for Certificates only allows me to add Current User, no option for Local Computer. Any ideas ?
Great video Kelvin, looking at doing something similar to this. Quick question, is it possible to give ssh/shell access to a read-only based user for something like a port scanning service rather than full admin. I am guessing that would just be another class defined and another authz policy? Marc
Thank you and thanks for reaching out. Yes, although it's been some time since I've done something like that if I were to do this, I would likely try and leverage TACACS (something like this: networkwizkid.com/cisco-fxos-authentication-using-tacacs/). If I have some time, I'll see whether I can put an article together or a video but I'd be surprised if something doesn't exist already.
@@NetworkWizkid I used firepower appliance for anyconnect and then was forced to buy a support subscription to get an update to fix a flaw in openssl that showed up 2 years ago. There wasn't a way to geo firewall the vpn port easily and retards from wherever would crash the service. The threat defense never did alarm on anything while I had a subscription. Palo alto never finds anything and classifies traffic based on make believe risk spectrums. I tried fortinet and it hasn't helped identity any "threats" yet. Cyber security is sold as a comfort tool and is a huge grift. I can open up ntop and look for odd trends and traffic flows. Local IT staff should be trained to do this instead of farming all their work to silicon valley. That being said, I only manage a few hundred staff on a 1 gig circuit. Focus on backups and disaster recovery, train your staff not to be fools, unplug from the internet. I'm a bitter old man now after 20 years of IT bullshit. lol. I love those cisco business switches but hate how they are trying to "cloud" everything. Cheers fellow computer geek.
This works for smartphone devices using their standard email apps? It's a shame this doesn't work for the native Outlook client (other than logging into a machine).
Thoughts on using hostscan/dap in additional to conditional access/Duo features? Seems like Duo and Conditional Access would make hostscan a bit redundant?
Work with User and group identities from Azure AD integrate with Umbrella DNS-layer? If I setup AD Connect should I consider removing AD Connector and move to just Azure AD integration?
Please see this: networkwizkid.com/free-cisco-umbrella-course/ - The Windows script file is a .wsf script that is run on the domain controller to register it to the Umbrella cloud so that Umbrella can determine when a user has logged onto or off of their account.
The Windows script file is a .wsf script that is run on the domain controller to register it to the Umbrella cloud so that Umbrella can determine when a user has logged onto or off of their account. - You can find more information here: networkwizkid.com/free-cisco-umbrella-course/
