Paloalto SNMPv3 PRTG
Auth Password對應PRTG的Password Priv Password對應PRTG的Encryption Key OID & Option & Mask 文章底部再自行了解 需要改為SHA和AES MGMT的interface需要增加SNMP Reference htt...
Paloalto disable MGMT CBC ciphers & TLS 1.1
首先建立一個SSL/TLS Service Profile, 選擇Certificate, Self-sign或trusted certificate並便用最低TLSv1.2 預設只有2個設定 # show shared ssl-tls-service-profile AAAAAA protocol...
Posted inLinux
Apache2 SSL增加安全性
https://www.ssllabs.com/ssltest/ 刪除支持SSLv2 SSLv3 TLSv1 TLSv1.1, 保留TLSv1.2, TLSv1.3 另外這個SSLCipherSuite SSLHonorCipherOrder應該是以High順序, 停用另外3個 vi /etc/ap...
Paloalto export address and address group
在Paloalto要將舊的Policy搬到另一台機, 最煩的不是Policy太多, 肯定是Object太多, Policy可能好多, 但Object肯定更多 所以使用Cli export & import address & address group便可以更快地設定Policy, ...
Paloalto can not delete Certificates
configure delete shared certificate [your certificate name]
Paloalto on Alicloud interface down
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PPD3CAO Reboot not work https://knowledgebase.paloaltonetworks.com/KCSArticl...
PA-VM console設定MGT IP
admin@fw> show interface management admin@fw# set deviceconfig system type static admin@fw# set deviceconfig system ip-address netmask default-gateway...
Cisco Policy Based Routing (PBR)
https://www.stupid.hk/wordpress/?p=1929 https://www.stupid.hk/wordpress/?p=1571 再一次測試PBR 都是由PC1到R4的lo1 192.168.5.1 PC1 no ip domain-lookup no ip routi...
F5 Big-IP使用iRules指定不同Destination IP用不同的Wan IP
現在我們有4個Wan出口, 首先先設定gw-pool為預設的gateway pool, 和其他情怳用到的external_IP1_pool, external_IP2_pool, external_IP3_pool 按需要設定Priorty和Ratio 下圖的Priorty為0, 中間是5, 即是只...
Cisco AP can not join vWLC
在AP裏看到upgrade.sh: Script called with args:[ABORT], 初時以為是升級Backup image的版本失敗, 原來是不能和vWLC正常溝通 [*02/20/2023 02:26:38.0012] CAPWAP State: DTLS Setup [*02/...