Author: René Jorissen

René Jorissen works as Solution Architect for QMonkeys in the Netherlands. Network Infrastructures are the primary focus. René works with equipment of multiple vendors, like HPE Networks, FortiNet, SentinelOne, Phished, Holm Security, Microsoft services and many more. René is Aruba Certified Edge Expert (ACEX #26), Aruba Certified Mobility Expert (ACMX #438), Aruba Certified ClearPass Expert (ACCX #725), Aruba Certified Design Expert (ACDX #760), CCNP R&S, FCNSP and Certified Ethical Hacker (CEF) certified. You can follow René on Twitter and LinkedIn.

Routing, Switching

Cisco ASA & ESX: strange ARP behavior

René Jorissen on January 12, 2009 • 10 Comments • Tags: #arp #behavior #esx #icmp #interface #nat #noproxyarp #path #proxy #reverse #reverse-path #spoofing #strange #sysopt #verify #vmware

Last week I had a very strange problem with a Cisco ASA firewall. The firewall is configured with multiple interfaces, including a DMZ interface. There are multiple servers in the DMZ. These servers are physical and virtual servers. The virtual servers are VMware servers in a blade environment. I configured the feature ip verify reverse-path … Read More

Firewalling

VPN Filtering through Group Policy

René Jorissen on January 9, 2009 • 0 Comments • Tags: #access #connection #filtering #group #lists #permit-ipsec #permit-vpn #policy #sysopt #tunnel #vpn #vpn-filtering

When configuring a Remote Access VPN or a Site to Site VPN connection you have the ability to filter traffic entering and leaving the VPN connection. You have the ability to enable inbound IPsec sessions to bypass interface access lists. Group policy and per-user authorization access lists still apply to the traffic. The sysopt connection … Read More

Management, Security

RSA LDAP query failed

René Jorissen on January 9, 2009 • 0 Comments • Tags: #ldapsearchsearchfailedcheckbasedn #adfind #basedn #browser #filter #ldap #ldap_search_ssizelimitexceeded #maxpagesize #objectclass #query #rsa #sdaceldap #sdldapsync #securid #softerra

While configuring a LDAP mapping for a RSA Authentication Manager 6.1 with an Active Directory Domain Controller, I received the following error while running the Synchronisation task c:\RSA\prog\sdldapsync.exe -j 102 “[LDAP search] Search failed (check Base DN)” At first I thought about a typo while configuring the Synchronisation task. To test the LDAP connection with … Read More

Security

Cisco 877W wireless authentication failed

René Jorissen on January 6, 2009 • 1 Comment • Tags: #dot11-7-cckm_auth_failed #aes #authenticate #broadcast-key #cckm #change #failed #interval

At home I have a Cisco 877W router. I use the wireless functionality to connect the different laptops to the networks. After upgrading the software from the router I have problems with the wireless authentication. The router is working perfectly, but after some time the laptops are able to connect to the wireless network. Vista … Read More

Configuration Example, Security

Access rules DMZ components

René Jorissen on January 6, 2009 • 0 Comments

Finally he first post in 2009, so before starting, HAPPY NEW YEAR!!!!! I know it’s late, but who cares…. This post is about opening specific ports from the DMZ to the internal network. This specific topic often results in discussions about which ports to open. One of the biggest discussion points is the use of … Read More

Firewalling, Management

ASDM Error: Unconnected socket not implemented

René Jorissen on December 23, 2008 • 0 Comments • Tags: #10 #11 #61551 #implemented #java #not #socket #unconnected #update

When you receive the following error, while starting ASDM: ASDM Error: Unconnected socket not implemented You should look at your Java versions. When you are using Java 6 Update 10 or higher and ASDM 6.1.5 or lower, you will receive this error. There are two workarounds for this problem: Downgrade Java to Java 6 Update … Read More