Author: René Jorissen

René Jorissen works as Solution Architect for QMonkeys in the Netherlands. Network Infrastructures are the primary focus. René works with equipment of multiple vendors, like HPE Networks, FortiNet, SentinelOne, Phished, Holm Security, Microsoft services and many more. René is Aruba Certified Edge Expert (ACEX #26), Aruba Certified Mobility Expert (ACMX #438), Aruba Certified ClearPass Expert (ACCX #725), Aruba Certified Design Expert (ACDX #760), CCNP R&S, FCNSP and Certified Ethical Hacker (CEF) certified. You can follow René on Twitter and LinkedIn.

Configuration Example, Security

Windows CA template – web server and private key export

René Jorissen on May 23, 2011 • 1 Comment • Tags: #ca #duplicate #export #grayed #key #out #private #server #template #web #windows

Creating a web server certificate request is very easy when using a Windows CA server. There is one disadvantage. The requested certificate is directly stored in the user store (by default) or the local computer store, if specified during the request. The disadvantage is that you cannot export the requested certificate including the private keys. … Read More

Firewalling

Juniper SSG to Cisco ASA VPN with overlapping subnets

René Jorissen on March 29, 2011 • 0 Comments • Tags: #asa #cisco #juniper #overlapping #screenos #ssg #subnet #vpn

I needed to configure a site-to-site VPN connection between a Juniper SSG firewall and a Cisco ASA firewall. The configuration of a VPN connection is very straightforward, but this time the networks behind the firewalls are overlapping. I have configured the Cisco ASA multiple times in such scenario, but the configuration of the Juniper SSG … Read More

Other stuff...

OpenSSL for testing TLS

René Jorissen on February 17, 2011 • 1 Comment • Tags: #crlf #openssl #smtp #starttls #s_client #s_server #test #tls

I was looking for a way to test the TLS configuration of a secure mail server and stumbled across a website called “OpenSSL Command-Line HOWTO”. This websites explains how to test a TLS connection using OpenSSL. The s_client and s_server options provide a way to launch SSL-enabled command-line clients and servers. There are other examples … Read More

Configuration Example, Firewalling, Routing

NBAR and smart filtering

René Jorissen on February 15, 2011 • 2 Comments • Tags: #application #based #http #match #mime #nbar #network #protocol #recognition

NBAR (Network Based Application Recognition) is a cool Cisco tool to identify and classify content flowing through a router. You can identify applications as mission critical, business-related, non-critical or unwanted. Once these mission critical applications are classified they can be guaranteed a minimum amount of bandwidth, policy routed, and marked for preferential treatment. Non-critical applications … Read More

Firewalling

Cisco ASA remote management via VPN

René Jorissen on February 14, 2011 • 4 Comments • Tags: #access #asa #cisco #interface #management #management-access #remote

By default, remote access VPN users aren’t able to manage a Cisco ASA firewall on the inside interface using any kind of management protocol (SSH, telnet, HTTPS). You can enable remote management by specifying the management-access interface. You can specify the interface via the CLI or via the Cisco Adaptive Security Device Manager (ASDM). Both … Read More

Routing

XS4ALL, Cisco 877 and IPv6

René Jorissen on February 1, 2011 • 1 Comment • Tags: #advertisements #autoconfiguration #bvi #cscej5092 #delegation #dhcpv6 #general-prefix #ipv6 #other-config-flag #prefix #router #routing

A while ago my ISP XS4ALL started with the distribution of IPv6 prefixes to their customers. So as a network engineer I wanted to have my own /48 prefix. Sadly I didn’t had time to start testing at the beginning of the IPv6 “launch”. Last week I found some time to start my testing. I … Read More