Security

RSA 7.1 with On-Demand

René Jorissen on November 18, 2009 0 Comments • Tags: #35 #71 #clickatell #demand #email #ldap #mail #on #otp #policy #rsa #selfservice #sms #token #vmware

RSA token security provides a way to strengthen the security on public services. Token authentication is most often implemented with hardware tokens. RSA 7.1 has additional methods of token authentication besides the hardware tokens: Token delivery by SMS; Token delivery by e-mail; To enable the above features you have to install at least RSA 7.1 … Read More

Firewalling, Security

Cisco ASA: DNS reply filtering

René Jorissen on August 28, 2009 7 Comments • Tags: #asa #cache #class #dns #drop #expression #filtering #inspect #inspection #map #policy-map #regex #regular #request #url

Today I was asked to block access to multiple websites and the only device capable of doing this was the firewall. This customer is using a Cisco ASA firewall, which supports basic URL filtering. This customers wanted to block HTTP and HTTPS websites. HTTPS websites use a SSL tunnel from the end device to the … Read More

IPSec / SSL VPN, Security

Redundant DMVPN network

René Jorissen on August 20, 2009 0 Comments • Tags: #authenticate #cloud #dmvpn #dual #dynamic #eigrp #hub #isakmp #multicast #multipoint #network-id #nhrp #redundant #resilient #single #spoke #vpn

Today I looked at the configuration DMVPN (Dynamic Multipoint VPN). A Dynamic Multipoint Virtual Private Network is an enhancement of the virtual private network (VPN) configuration process of Cisco IOS-based routers. DMVPN prevents the need for pre-configured (static) IPsec peers in crypto-map configurations and ISAKMP peer statements. This feature of Cisco IOS allows greater scalability … Read More

Security

RSA 7.1 supported under ESX 3.5

René Jorissen on July 23, 2009 7 Comments • Tags: #35 #71 #esx #rsa #support #vmware

More and more people would like to implement OTP (One Time Password) solutions. RSA is one of multiple vendors for OTP solutions. I also notice the wish to implement and support OTP with on-demand tokens, like SMS and e-mail. RSA supports on-demand tokens, but the minimum RSA Authentication Manager version required is 7.1. Not only … Read More

Security

Secure LDAP between Softerra and Novell NDS

René Jorissen on April 22, 2009 0 Comments • Tags: #48 #browser #cert7db #communicator #key3db #ldap #ldaps #nds #netscape #novell #secure #softerra

Softerra LDAP Browser is a powerful tool for browsing servers, which support LDAP. Using Softerra LDAP Browser against a Novell NDS with secure LDAP is a different story. A secure LDAP connection is a connection which uses SSL certificates to encrypt the data stream. I had to use my LDAP Browser to query a Novell … Read More

Management, Security

RSA LDAP query failed

René Jorissen on January 9, 2009 0 Comments • Tags: #ldapsearchsearchfailedcheckbasedn #adfind #basedn #browser #filter #ldap #ldap_search_ssizelimitexceeded #maxpagesize #objectclass #query #rsa #sdaceldap #sdldapsync #securid #softerra

While configuring a LDAP mapping for a RSA Authentication Manager 6.1 with an Active Directory Domain Controller, I received the following error while running the Synchronisation task c:\RSA\prog\sdldapsync.exe -j 102 “[LDAP search] Search failed (check Base DN)” At first I thought about a typo while configuring the Synchronisation task. To test the LDAP connection with … Read More