tag:blogger.com,1999:blog-21992793059263940262024-03-15T00:28:19.405+08:00我的學習手記 A technical geek blogBilly Funghttp://www.blogger.com/profile/09166372535555573277noreply@blogger.comBlogger1677125tag:blogger.com,1999:blog-2199279305926394026.post-74831992347745317502024-03-13T23:37:00.002+08:002024-03-13T23:37:05.500+08:00Aruba AP running on 10.4.0.2 or above hit a horrible bug which is rebooted unexpectedly <html> <head> <meta content="text/html; charset=iso-8859-1" http-equiv="Content-Type"></meta> <style style="display: none;" type="text/css"> P {margin-top:0;margin-bottom:0;} </style> </head> <body dir="ltr"> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><a href="https://blogger.googleusercontent.com/img/a/AVvXsEjWCCnwjh5IsCDEFeoQlWxQSLteD_2-woy-2S9kw2ZqyYmprlBGNxc62ONysOl7IehRPTO04puK4ROIUcXU4NJd5ue0UP2WcelpqA_IGw4_TDRlH28cEAP-PJ_kc5yrMgxKOl0-ZJ_THT24C7tSjNtsHDZbnD0lmPk144CmpeaKlN9efiR3YjjVeIO4JrvX"><img alt="" border="0" id="BLOGGER_PHOTO_ID_7345656678032735746" src="https://blogger.googleusercontent.com/img/a/AVvXsEjWCCnwjh5IsCDEFeoQlWxQSLteD_2-woy-2S9kw2ZqyYmprlBGNxc62ONysOl7IehRPTO04puK4ROIUcXU4NJd5ue0UP2WcelpqA_IGw4_TDRlH28cEAP-PJ_kc5yrMgxKOl0-ZJ_THT24C7tSjNtsHDZbnD0lmPk144CmpeaKlN9efiR3YjjVeIO4JrvX=s320" /></a></span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><br /> </span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Solution:</span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Upgrade to 10.4.1.0 or above.</span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><a class="OWAAutoLink" href="https://www.arubanetworks.com/techdocs/AOS_10.x_RN_WebHelp/Content/10.4.1/0/resolved-issues-10410.htm" id="OWAb24006bc-2d60-6c91-245c-ff17e67d556f">Resolved Issues in ArubaOS 10.4.1.0 (arubanetworks.com)</a></span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><br /> </span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><a href="https://blogger.googleusercontent.com/img/a/AVvXsEjuENrcobM-XhKcv5L4BX_nkskPPgi0Q25MC1otNVmjKFKCE9NzsoI03ZNDABrZGuwPZBXmQICsOBZcUk7sDzdVKyEoiOcDFDxjakbFEa2zfpHxlSw2hnc9Mid1enpQW9f6nJM8fc5zuBcxxyDxnFeLtmoGpxkxXevUTG14GUovoHXRL0BYzbfdsFfUjZZ-"><img alt="" border="0" id="BLOGGER_PHOTO_ID_7345656692868694466" src="https://blogger.googleusercontent.com/img/a/AVvXsEjuENrcobM-XhKcv5L4BX_nkskPPgi0Q25MC1otNVmjKFKCE9NzsoI03ZNDABrZGuwPZBXmQICsOBZcUk7sDzdVKyEoiOcDFDxjakbFEa2zfpHxlSw2hnc9Mid1enpQW9f6nJM8fc5zuBcxxyDxnFeLtmoGpxkxXevUTG14GUovoHXRL0BYzbfdsFfUjZZ-=s320" /></a></span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Recommend to upgrade to 10.4.1.1 since 10.4.1.0 also have another reason to crashed and reboot unexpectedly.</span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><a class="OWAAutoLink" href="https://www.arubanetworks.com/techdocs/AOS_10.x_RN_WebHelp/Content/10.4.1/1/resolved-issues-10411.htm" id="OWA719a763d-1a72-835a-d318-7651d3d2ad45">Resolved Issues in ArubaOS 10.4.1.1 (arubanetworks.com)</a></span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><br /> </span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"></span></div></body></html>Billy Funghttp://www.blogger.com/profile/09166372535555573277noreply@blogger.com0tag:blogger.com,1999:blog-2199279305926394026.post-70687052790611530422024-03-08T21:10:00.001+08:002024-03-08T21:10:02.290+08:00Cisco Firepower Firewall 1000 series - ASA code and FTD code relationship<html> <head> <meta content="text/html; charset=iso-8859-1" http-equiv="Content-Type"></meta> <style style="display: none;" type="text/css"> P {margin-top:0;margin-bottom:0;} </style> </head> <body dir="ltr"> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><a href="https://blogger.googleusercontent.com/img/a/AVvXsEjRxkxT5A0fxwtNsOXQNRvEEHp8xCSW9wgcioABAlNNl-DtywbcaPiZ8i-B0vbcmG9x49f5F02j21Frk2DoGOZVDjKYU0wjRzDEsbSeN0l_Pj2PonnZso421PPSoE3cOCyckhAoilnYy6WWWm-YkoqwkYpDFLAlLIdz5ifbH7C8-sBT6wFCv9lkkiCqCiuC"><img alt="" border="0" id="BLOGGER_PHOTO_ID_7343938779706422210" src="https://blogger.googleusercontent.com/img/a/AVvXsEjRxkxT5A0fxwtNsOXQNRvEEHp8xCSW9wgcioABAlNNl-DtywbcaPiZ8i-B0vbcmG9x49f5F02j21Frk2DoGOZVDjKYU0wjRzDEsbSeN0l_Pj2PonnZso421PPSoE3cOCyckhAoilnYy6WWWm-YkoqwkYpDFLAlLIdz5ifbH7C8-sBT6wFCv9lkkiCqCiuC=s320" /></a></span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><br /> </span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">On 1000 series, it is support either ASA Code or FTD code only.</span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><br /> </span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">In appliance mode, the hardware is configured in ASA CLI. </span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">In platform mode, the hardware is configured in FXOS CLI.</span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><br /> </span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"></span></div></body></html>Billy Funghttp://www.blogger.com/profile/09166372535555573277noreply@blogger.com0tag:blogger.com,1999:blog-2199279305926394026.post-36210430653389413112024-03-08T21:09:00.002+08:002024-03-08T21:09:20.059+08:00H3C Security Management Platform - Firewall Management like Fortimanager<html> <head> <meta content="text/html; charset=gb2312" http-equiv="Content-Type"></meta> <style style="display: none;" type="text/css"> P {margin-top:0;margin-bottom:0;} </style> </head> <body dir="ltr"> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">The H3C Security Management Platform running on H3Linux―H3C proprietary Linux operating system</span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><br /> </span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">H3Linux是基于CentOS进行封装的,所以安装过程和CentOS基本一致(CentOS操作系统最小化安装部署)</span></div> <div class="elementToProof" style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> <br /> </div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><a href="https://blogger.googleusercontent.com/img/a/AVvXsEhskWlSsBC5yYGYT9uVCDntBSqKwoMAtdcBwvujiRRVoXe6BKTNzo_0V4FbDwWrW4dLIELEZop0HZdyqOSaknT1zhEblX7nIT-BqwGdGaxTz0MTz6LwgjdzA-F6RzV_RdgdSHbzk6JJYtDpGEtjb32-6BsUUJ4tD5oQzU61lLQ0peLfPEyfW9pdmnbvetOO"><img alt="" border="0" id="BLOGGER_PHOTO_ID_7343795609563152818" src="https://blogger.googleusercontent.com/img/a/AVvXsEhskWlSsBC5yYGYT9uVCDntBSqKwoMAtdcBwvujiRRVoXe6BKTNzo_0V4FbDwWrW4dLIELEZop0HZdyqOSaknT1zhEblX7nIT-BqwGdGaxTz0MTz6LwgjdzA-F6RzV_RdgdSHbzk6JJYtDpGEtjb32-6BsUUJ4tD5oQzU61lLQ0peLfPEyfW9pdmnbvetOO=s320" /></a></span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><br /> </span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"></span></div></body></html>Billy Funghttp://www.blogger.com/profile/09166372535555573277noreply@blogger.com0tag:blogger.com,1999:blog-2199279305926394026.post-42254910623836868372024-03-08T21:08:00.002+08:002024-03-08T21:08:14.045+08:00Hillstone A Series NGFW Highlight and resource<html> <head> <meta content="text/html; charset=Windows-1252" http-equiv="Content-Type"></meta> <style style="display: none;" type="text/css"> P {margin-top:0;margin-bottom:0;} </style> </head> <body dir="ltr"> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><b>Hillstone A Series NGFW Highlight</b></span></div> <div style="min-height: 15px;"></div> <div style="min-height: 15px;"></div> <ul style="list-style-type: disc; margin-bottom: 0px; margin-top: 0px;"> <li style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> <div style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">High performance</span></div> </li></ul> <div style="min-height: 15px;"></div> <ul style="list-style-type: disc; margin-bottom: 0px; margin-top: 0px;"> <li style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> <div style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Full security protection</span></div> </li></ul> <div style="min-height: 15px;"></div> <ul style="list-style-type: disc; margin-bottom: 0px; margin-top: 0px;"> <li style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> <div style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">SD-WAN ready</span></div> </li></ul> <div style="min-height: 15px;"></div> <ul style="list-style-type: disc; margin-bottom: 0px; margin-top: 0px;"> <li style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> <div style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">ZTNA ready</span></div> </li></ul> <div style="min-height: 15px;"></div> <ul style="list-style-type: disc; margin-bottom: 0px; margin-top: 0px;"> <li style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> <div style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Twin-mode for Active-Active data center</span></div> </li></ul> <div style="min-height: 15px;"></div> <ul style="list-style-type: disc; margin-bottom: 0px; margin-top: 0px;"> <li style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> <div style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Load balancing(Link, server)</span></div> </li></ul> <div style="min-height: 15px;"></div> <ul style="list-style-type: disc; margin-bottom: 0px; margin-top: 0px;"> <li style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> <div style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Advance Qos(iQOS)</span></div> </li></ul> <div style="min-height: 15px;"></div> <ul style="list-style-type: disc; margin-bottom: 0px; margin-top: 0px;"> <li style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> <div style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Intelligent Threat Detection in Encrypted Traffic Without Decryption</span></div> </li></ul> <div style="min-height: 15px;"></div> <ul style="list-style-type: disc; margin-bottom: 0px; margin-top: 0px;"> <li style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> <div style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">ML-based Food Protection Baseline Establishment</span></div> </li></ul> <div style="min-height: 15px;"></div> <ul style="list-style-type: disc; margin-bottom: 0px; margin-top: 0px;"> <li style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> <div class="elementToProof" style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Smart policy operation(policy auto-learning, policy auditing, policy hit analysis, redundancy check, log visibility, hotfix support)</span></div> </li></ul> <div style="min-height: 15px;"></div> <div class="elementToProof" style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><b>FAQ</b></span></div> <div style="min-height: 15px;"></div> <div class="elementToProof" style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Does Hillstone provide a centralized management system?</span></div> <div style="min-height: 15px;"></div> <div style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Yes, HSM (Hillstone Security Management) centrally controls and manages multiple Hillstone devices in the network, providing the below capabilities</span></div> <div style="min-height: 15px;"></div> <div class="elementToProof" style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">NGFW Manager - This module provides basic O&M management for firewalls, including:</span></div> <div style="min-height: 15px;"></div> <div class="elementToProof" style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Status Monitor: View the online status and HA status of devices;</span></div> <div style="min-height: 15px;"></div> <div class="elementToProof" style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Configuration Deployment: Manage security policies and destination-based routes for devices;</span></div> <div style="min-height: 15px;"></div> <div class="elementToProof" style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">O&M Management: Implement device image update, signature database update, and configuration file management.</span></div> <div style="min-height: 15px;"></div> <div class="elementToProof" style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Policy Analyzer - To solve security policy review issues for multiple devices, Policy Analyzer of HSM can be used as a visual management platform. This platform helps you review the security policies of multiple devices, finds abnormal policies or non-compliant policies, and then provides a detailed analysis report.</span></div> <div style="min-height: 15px;"></div> <div style="min-height: 15px;"></div> <div style="min-height: 15px;"></div> <div class="elementToProof" style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">How Hillstone integrates with CyberArk?</span></div> <div style="min-height: 15px;"></div> <div style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Hillstone HSM and NGFW support AAA servers such as the Radius server or LDAP server. CyberArk can integrate with the AAA server for privileged account management and password management for Hillstone HSM and NGFW.</span></div> <div style="min-height: 15px;"></div> <div style="min-height: 15px;"></div> <div style="min-height: 15px;"></div> <div class="elementToProof" style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Does Hillstone's default routing administrative distances align with Cisco or Huawei?</span></div> <div style="min-height: 15px;"></div> <div style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Hillstone default routing administrative distances aligns with Cisco.</span></div> <div style="min-height: 15px;"></div> <div class="elementToProof" style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><br /> </span></div> <div class="elementToProof" style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Hillstone NGFW model supports 10G IPsec VPN</span></div> <div style="min-height: 15px;"></div> <div style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Hillstone NGFW SG-6000-A3800-IN provides IPsec VPN throughput of 12 Gbps and two SFP+ interfaces.</span></div> <div style="min-height: 15px;"></div> <div style="min-height: 15px;"></div> <div style="min-height: 15px;"></div> <div class="elementToProof" style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">How does Hillstone handle when some interface's traffic almost reaches or exceeds the maximum bandwidth of the link?</span></div> <div style="min-height: 15px;"></div> <div class="elementToProof" style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Hillstone supports shaping mode and policing mode for traffic control when traffic excessed. With shaping mode, traffic shaping retains the excessed packets in a queue and then schedules the excessed traffic by increasing the latency. While with policing mode, the system will drop the traffic that exceeds the bandwidth limit.</span></div> <div class="elementToProof" style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><br /> </span></div> <div class="elementToProof" style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><b>Resource (please create an account to log in)</b></span></div> <div style="min-height: 15px;"></div> <div style="min-height: 15px;"></div> <div class="elementToProof" style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Hillstone Official Website</span></div> <div style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><a class="link rich-text-anchor __anchor-intercept-flag__ OWAAutoLink" contenteditable="false" data-eleid="13-0" href="https://www.hillstonenet.com/" rel="noopener noreferrer" target="_blank">https://www.hillstonenet.com/</a></span></div> <div style="min-height: 15px;"></div> <div style="min-height: 15px;"></div> <div class="elementToProof" style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Hillstone User Center</span></div> <div style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><a class="link rich-text-anchor __anchor-intercept-flag__ OWAAutoLink" contenteditable="false" data-eleid="23-0" href="https://passport.hillstonenet.com/" rel="noopener noreferrer" target="_blank">https://passport.hillstonenet.com/</a></span></div> <div style="min-height: 15px;"></div> <div style="min-height: 15px;"></div> <div class="elementToProof" style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Technical Documentation</span></div> <div style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><a class="link rich-text-anchor __anchor-intercept-flag__ OWAAutoLink" contenteditable="false" data-eleid="33-0" href="https://docs.hillstonenet.com/en/Content/Home.htm" rel="noopener noreferrer" target="_blank">https://docs.hillstonenet.com/en/Content/Home.htm</a></span></div> <div style="min-height: 15px;"></div> <div class="elementToProof" style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">CN Version: <a class="link rich-text-anchor __anchor-intercept-flag__ OWAAutoLink" contenteditable="false" data-eleid="37" href="https://docs.hillstonenet.com/cn/Content/Home.htm" rel="noopener noreferrer" target="_blank"> https://docs.hillstonenet.com/</a></span></div> <div style="min-height: 15px;"></div> <div class="elementToProof" style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Knowledge Base</span></div> <div style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><a class="link rich-text-anchor __anchor-intercept-flag__ OWAAutoLink" contenteditable="false" data-eleid="48-0" href="https://kb.hillstonenet.com/en/" rel="noopener noreferrer" target="_blank">https://kb.hillstonenet.com/en/</a></span></div> <div style="min-height: 15px;"></div> <div class="elementToProof" style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">CN Version: <a class="link rich-text-anchor __anchor-intercept-flag__ OWAAutoLink" contenteditable="false" data-eleid="51-1" href="https://kb.hillstonenet.com/cn/" rel="noopener noreferrer" target="_blank"> https://kb.hillstonenet.com/cn/</a></span></div> <div style="min-height: 15px;"></div> <div style="min-height: 15px;"></div> <div class="elementToProof" style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Software Download</span></div> <div style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><a class="link rich-text-anchor __anchor-intercept-flag__ OWAAutoLink" contenteditable="false" data-eleid="63-0" href="https://images-en.hillstonenet.com/" rel="noopener noreferrer" target="_blank">https://images-en.hillstonenet.com/</a></span></div> <div style="min-height: 15px;"></div> <div style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">CN Version: <a class="link rich-text-anchor __anchor-intercept-flag__ OWAAutoLink" contenteditable="false" data-eleid="66-1" href="https://images.hillstonenet.com/" rel="noopener noreferrer" target="_blank"> https://images.hillstonenet.com/</a></span></div> <div style="min-height: 15px;"></div> <div class="elementToProof" style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Hillstone StoneOS 5.5R10 Documentation</span></div> <div class="elementToProof" style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><a href="https://docs.hillstonenet.com/contents.html?cid=2314&selected=0&is_small=1" id="LPlnk405047">https://docs.hillstonenet.com/contents.html?cid=2314&selected=0&is_small=1</a></span></div> <div class="elementToProof" style="min-height: 15px;"><br /> </div> <div class="elementToProof" style="min-height: 15px;"></div></body></html>Billy Funghttp://www.blogger.com/profile/09166372535555573277noreply@blogger.com0tag:blogger.com,1999:blog-2199279305926394026.post-3096351088026073112024-03-05T21:53:00.000+08:002024-03-05T21:53:00.615+08:00How to resolve the login failed after Cisco Anyconnect client update via Cisco ASA connection<html> <head> <meta content="text/html; charset=iso-8859-1" http-equiv="Content-Type"></meta> <style style="display: none;" type="text/css"> P {margin-top:0;margin-bottom:0;} </style> </head> <body dir="ltr"> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">In the previous post <a href="https://billyfung2010.blogspot.com/2024/03/how-to-enable-cisco-asa-anyconect.html" id="LPlnk"> https://billyfung2010.blogspot.com/2024/03/how-to-enable-cisco-asa-anyconect.html</a></span></div> <div class="elementToProof" style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> <br /> </div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">There are solution to upgrade the Cisco Anyconnect client, but after the upgrade. It is failed to login.</span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><br /> </span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">The error message is "Login Failed".</span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><br /> </span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><b>The solution is Reboot the client machine. E.g. Windows laptop</b></span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">It will establish a new connect to Cisco ASA.</span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><br /> </span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">The reason is without reboot the machine, the new client will use the same session to reconnect to ASA. But that session is being interrupted for upgrade. So, it cannot reconnect until the session being expired after 30 mins.</span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><br /> </span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Reference:</span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">If anyconnect session is interrupted, he fails to connect due to IP conflict during 30m</span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><a href="https://community.cisco.com/t5/vpn/if-anyconnect-session-is-interrupted-he-fails-to-connect-due-to/td-p/3416700" id="LPlnk279565">https://community.cisco.com/t5/vpn/if-anyconnect-session-is-interrupted-he-fails-to-connect-due-to/td-p/3416700</a></span></div> <div class="elementToProof"><br /> </div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">When a user cannot connect the AnyConnect VPN Client to the ASA, the issue might be caused by an incompatibility between the AnyConnect client version and the ASA software image version. In this case, the user receives this error message: The installer was not able to start the Cisco VPN client, clientless access is not available. In order to resolve this issue, upgrade the AnyConnect client version to be compatible with the ASA software image. When you log in the first time to the AnyConnect, the login script does not run. If you disconnect and log in again, then the login script runs fine. This is the expected behavior. When you connect the AnyConnect VPN Client to the ASA, you might receive this error: User not authorized for AnyConnect Client access, contact your administrator. This error is seen when the AnyConnect image is missing from the ASA. Once the image is loaded to the ASA, AnyConnect can connect without any issues to the ASA. This error can be resolved by disabling Datagram Transport Layer Security (DTLS). Go to Configuration > Remote Access VPN > Network (Client) Access > AnyConnect Connection Profiles and uncheck the Enable DTLS check box. This disables DTLS. The dartbundle files show this error message when the user gets disconnected: TUNNELPROTOCOLDPDMGR_ERROR_NO_DPD_RESPONSE:The secure gateway failed to respond to Dead Peer Detection packets. This error means that the DTLS channel was torn due to Dead Peer Detection (DPD) failure. This error is resolved if you tweak the DPD keepalives and issue these commands: webvpn svc keepalive 30 svc dpd-interval client 80 svc dpd-interval gateway 80 The svc keepalive and svc dpd-interval commands are replaced by the anyconnect keepalive and anyconnect dpd-interval commands respectively in ASA Version 8.4(1) and later as shown here: webvpn anyconnect ssl keepalive 15 anyconnect dpd-interval client 5 anyconnect dpd-interval gateway 5</span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><a class="link rich-text-anchor __anchor-intercept-flag__ OWAAutoLink" contenteditable="false" data-eleid="3-0" href="https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-firewalls/212972-anyconnect-vpn-client-troubleshooting-gu.html" rel="noopener noreferrer" target="_blank">https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-firewalls/212972-anyconnect-vpn-client-troubleshooting-gu.html</a></span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"></span></div></body></html>Billy Funghttp://www.blogger.com/profile/09166372535555573277noreply@blogger.com0tag:blogger.com,1999:blog-2199279305926394026.post-86498407416014763092024-03-05T21:51:00.004+08:002024-03-05T21:51:53.388+08:00Broadcom Edge Secure Web Gateway (SWG)<html> <head> <meta content="text/html; charset=iso-8859-1" http-equiv="Content-Type"></meta> <style style="display: none;" type="text/css"> P {margin-top:0;margin-bottom:0;} </style> </head> <body dir="ltr"> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Upgrade from <a class="link rich-text-anchor __anchor-intercept-flag__ text-content-link OWAAutoLink" data-eleid="3-1" href="http://7.3.13.2" id="OWA000fbd31-ee0e-2d85-6d34-4d421eba1974" rel="noopener noreferrer" target="_blank"> 7.3.13.2</a> to <a class="link rich-text-anchor __anchor-intercept-flag__ text-content-link OWAAutoLink" data-eleid="3-3" href="http://7.3.14.4" id="OWA19c93841-4721-9a46-219b-39b6fde79cb0" rel="noopener noreferrer" target="_blank"> 7.3.14.4</a> - Reduce the chance of VM crash and fix the SharePoint failed to access word, excel and ppt. (When you click the file, it become "Doc.aspx" to download it without open it)</span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><br /> </span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">The fixed release target to release on end of March 2024</span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><br /> </span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"></span></div></body></html>Billy Funghttp://www.blogger.com/profile/09166372535555573277noreply@blogger.com0tag:blogger.com,1999:blog-2199279305926394026.post-790268866398006132024-03-05T21:51:00.001+08:002024-03-05T21:51:07.924+08:00SVR cyber actors adapt tactics for initial cloud access<html> <head> <meta content="text/html; charset=iso-8859-1" http-equiv="Content-Type"></meta> <style style="display: none;" type="text/css"> P {margin-top:0;margin-bottom:0;} </style> </head> <body dir="ltr"> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">SVR cyber actors adapt tactics for initial cloud access</span></div> <div style="min-height: 15px;"></div> <div style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><a class="link rich-text-anchor __anchor-intercept-flag__ OWAAutoLink" contenteditable="false" data-eleid="11-0" href="https://www.ncsc.gov.uk/news/svr-cyber-actors-adapt-tactics-for-initial-cloud-access" rel="noopener noreferrer" target="_blank">https://www.ncsc.gov.uk/news/svr-cyber-actors-adapt-tactics-for-initial-cloud-access</a></span></div> <div style="min-height: 15px;"></div> <div class="elementToProof" style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><a class="link rich-text-anchor __anchor-intercept-flag__ OWAAutoLink" contenteditable="false" data-eleid="14-0" href="https://www.ncsc.gov.uk/files/Advisory-SVR-cyber-actors-adapt-tactics-for-initial-cloud-access.pdf" rel="noopener noreferrer" target="_blank">https://www.ncsc.gov.uk/files/Advisory-SVR-cyber-actors-adapt-tactics-for-initial-cloud-access.pdf</a></span></div> <div class="elementToProof" style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><br /> </span></div> <div class="elementToProof" style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"></span></div></body></html>Billy Funghttp://www.blogger.com/profile/09166372535555573277noreply@blogger.com0tag:blogger.com,1999:blog-2199279305926394026.post-88306613701780672442024-03-01T23:39:00.005+08:002024-03-01T23:39:45.724+08:00Symantec Endpoint Protection (SEP) being restarted automatically on Linux<html> <head> <meta content="text/html; charset=iso-8859-1" http-equiv="Content-Type"></meta> <style style="display: none;" type="text/css"> P {margin-top:0;margin-bottom:0;} </style> </head> <body dir="ltr"> <div class="elementToProof" style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> If you run the following command to stop and disable the SEP:</div> <div class="elementToProof" style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> <br /> </div> <pre><div class="elementToProof">systemctl stop sisamddaemon</div></pre> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><br /> </span></div> <pre><div class="elementToProof">systemctl disable sisamddaemon</div><div class="elementToProof"><br /></div><div class="elementToProof"><span style="color: black; font-size: 12pt;">The SEP will restart itself later.</span></div><div class="elementToProof"><span style="color: black; font-size: 12pt;"><br /></span></div></pre> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">For SEP Linux agent version 14.3 RU1 and above, you can stop the SEP Linux agent using the ./stop.sh command in /usr/lib/symantec folder.</span></div> <div class="elementToProof" style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><br /> </span></div> <div style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">However, as per product design, stopping SEP Linux agent is not permanent. Services will be resumed if the Linux machine is restarted.</span></div> <div style="min-height: 15px;"></div> <div style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">If you ./stop.sh without reboot. The SEP Linux services will remain fully stop until it is startup using ./start.sh command or on the next system reboot.</span></div> <div style="min-height: 15px;"></div> <div class="elementToProof" style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">The only way to permanently stop the SEP service is uninstall it or temporary ./stop.sh without reboot the system.</span></div> <div class="elementToProof" style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><br /> </span></div> <div class="elementToProof" style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">How to restart the Endpoint Protection Linux daemons</span></div> <div style="margin: 0px; min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><a class="link rich-text-anchor __anchor-intercept-flag__ OWAAutoLink" data-eleid="13" href="https://knowledge.broadcom.com/external/article/151271/how-to-restart-the-endpoint-protection-l.html" id="OWAbc3d93e8-8b05-5a87-1d7c-40fdaf3f124d" rel="noopener noreferrer" style="margin: 0px;" target="_blank">https://knowledge.broadcom.com/external/article/151271/how-to-restart-the-endpoint-protection-l.html</a></span></div> <div class="elementToProof" style="margin: 0px; min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><br /> </span></div> <div class="elementToProof" style="min-height: 15px;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"></span></div></body></html>Billy Funghttp://www.blogger.com/profile/09166372535555573277noreply@blogger.com0tag:blogger.com,1999:blog-2199279305926394026.post-23036297693969609062024-03-01T23:39:00.001+08:002024-03-01T23:39:13.193+08:00How to enable Cisco ASA anyconect client upgrade when they installed early version and connect to Cisco ASA firewall?<html> <head> <meta content="text/html; charset=iso-8859-1" http-equiv="Content-Type"></meta> <style style="display: none;" type="text/css"> P {margin-top:0;margin-bottom:0;} </style> </head> <body dir="ltr"> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Solution: When upgrade the Cisco ASA firewall, upload the latest version of Cisco anyconnect client to ASA (Conifg>RemoteVPN>AnyconnectClientSoftware), and make the latest anyconnect client image top of the list.</span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><br /> </span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Reference:</span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><a href="https://community.cisco.com/t5/vpn/how-to-update-to-anyconnect-secure-mobility-client-v4-x/td-p/3736308" id="LPlnk">https://community.cisco.com/t5/vpn/how-to-update-to-anyconnect-secure-mobility-client-v4-x/td-p/3736308</a></span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><a href="https://community.cisco.com/t5/vpn/cisco-anyconnect-auto-update/td-p/4284803" id="LPlnk951525">https://community.cisco.com/t5/vpn/cisco-anyconnect-auto-update/td-p/4284803</a></span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><a href="https://community.cisco.com/t5/vpn/anyconnect-without-admin-privileges/td-p/1105561" id="LPlnk754624">https://community.cisco.com/t5/vpn/anyconnect-without-admin-privileges/td-p/1105561</a></span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><br /> </span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"></span></div></body></html>Billy Funghttp://www.blogger.com/profile/09166372535555573277noreply@blogger.com0tag:blogger.com,1999:blog-2199279305926394026.post-67188208830203359062024-02-26T22:11:00.003+08:002024-02-26T22:11:44.858+08:00Broadcom Symantec Messaging Gateway Version Upgrade<html> <head> <meta content="text/html; charset=iso-8859-1" http-equiv="Content-Type"></meta> <style style="display: none;" type="text/css"> P {margin-top:0;margin-bottom:0;} </style> </head> <body dir="ltr"> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">If you upgrade from 10.8.0 or earlier to 10.9.0 or above. You need to disable legacy URL reputation and Implement URL categorization policy.</span></div> <div class="elementToProof"><br /> </div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Reference P3. to P4.</span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><a class="link rich-text-anchor __anchor-intercept-flag__ OWAAutoLink" contenteditable="false" data-eleid="6-0" href="https://techdocs.broadcom.com/content/dam/broadcom/techdocs/us/en/dita/symantec-security-software/email-security/messaging-gateway/generated-pdfs/smg_release_notes_10_9_0.pdf" rel="noopener noreferrer" target="_blank">https://techdocs.broadcom.com/content/dam/broadcom/techdocs/us/en/dita/symantec-security-software/email-security/messaging-gateway/generated-pdfs/smg_release_notes_10_9_0.pdf</a><br /> </span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><br /> </span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"></span></div></body></html>Billy Funghttp://www.blogger.com/profile/09166372535555573277noreply@blogger.com0tag:blogger.com,1999:blog-2199279305926394026.post-5890499288430893242024-02-26T22:11:00.001+08:002024-02-26T22:11:21.862+08:00The NSFOCUS SAS-H which is hardware end of support and it is not support Edge. You need to use IE mode on Edge to access.<html> <head> <meta content="text/html; charset=iso-8859-1" http-equiv="Content-Type"></meta> <style style="display: none;" type="text/css"> P {margin-top:0;margin-bottom:0;} </style> </head> <body dir="ltr"> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">The NSFOCUS SAS-H which is hardware end of support and it is not support Edge. You need to use IE mode on Edge to access.</span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">The new product OSMS have been released to replace the SAS-H</span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><br /> </span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Reference:</span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><a href="https://www.nsfocus.com.cn/html/2019/212_0926/20.html" id="LPlnk">https://www.nsfocus.com.cn/html/2019/212_0926/20.html</a></span></div> <span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><a href="https://www.techtarget.com/searchenterprisedesktop/tip/How-to-enable-Internet-Explorer-mode-on-Microsoft-Edge" id="LPlnk">https://www.techtarget.com/searchenterprisedesktop/tip/How-to-enable-Internet-Explorer-mode-on-Microsoft-Edge</a></span> <div style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> <br /> </div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif;"><br /> </span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"></span></div></body></html>Billy Funghttp://www.blogger.com/profile/09166372535555573277noreply@blogger.com0tag:blogger.com,1999:blog-2199279305926394026.post-42630948463526488442024-02-26T22:10:00.005+08:002024-02-26T22:10:53.490+08:00Using different proxy for individual broswering via broswer shortcut<html> <head> <meta content="text/html; charset=iso-8859-1" http-equiv="Content-Type"></meta> <style style="display: none;" type="text/css"> P {margin-top:0;margin-bottom:0;} </style> </head> <body dir="ltr"> <div class="elementToProof" style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> Workaround solution:</div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -proxy-server="x.x.x.x:8080"</span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><br /> </span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">The same setting -proxy-server="Proxy IP:Proxy Port" also work for IE</span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><br /> </span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Reference:</span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><a href="https://stackoverflow.com/questions/22033401/workaround-to-have-a-standalone-proxy-settings-for-chrome" id="LPlnk790646">https://stackoverflow.com/questions/22033401/workaround-to-have-a-standalone-proxy-settings-for-chrome</a></span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><br /> </span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"></span></div></body></html>Billy Funghttp://www.blogger.com/profile/09166372535555573277noreply@blogger.com0tag:blogger.com,1999:blog-2199279305926394026.post-89125004136842919612024-02-25T22:38:00.005+08:002024-02-25T22:38:46.753+08:00Cannot visible the files and folder copy by robocopy (It is visible in old machine)<html> <head> <meta content="text/html; charset=iso-8859-1" http-equiv="Content-Type"></meta> <style style="display: none;" type="text/css"> P {margin-top:0;margin-bottom:0;} </style> </head> <body dir="ltr"> <div><span style="color: black; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt;">Run the command "ATTRIB -h -s -a d:\backups\c" to remove the hidden of the folder.</span></div> <div style="background-color: white; margin: 0px; text-align: left; text-indent: 0px;"> <span style="color: black; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt;"><br /> </span></div> <div style="background-color: white; margin: 0px; text-align: left; text-indent: 0px;"> <span style="color: black; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt;">To prevent the backup folder being hidden by robocopy:</span></div> <div style="background-color: white; margin: 0px; text-align: left; text-indent: 0px;"> <span style="color: black; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt;">You can prevent the new directory from becoming hidden by adding the /A-:SH</span></div> <div style="background-color: white; margin: 0px; text-align: left; text-indent: 0px;"> <span style="color: black; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt;"><br /> </span></div> <div style="background-color: white; margin: 0px; text-align: left; text-indent: 0px;"> <span style="color: black; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt;">Reference:</span></div> <div style="background-color: white; margin: 0px; text-align: left; text-indent: 0px;"> <span style="color: black; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt;"><a class="OWAAutoLink" data-auth="NotApplicable" data-linkindex="0" href="https://stackoverflow.com/questions/6584402/after-robocopy-the-copied-directory-and-files-are-not-visible-on-the-destinatio" id="OWA5f54f2a2-a320-d842-01e4-55f64d65055c" style="margin: 0px;">https://stackoverflow.com/questions/6584402/after-robocopy-the-copied-directory-and-files-are-not-visible-on-the-destinatio</a></span></div> <div style="background-color: white; margin: 0px; text-align: left; text-indent: 0px;"> <span style="color: black; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt;"><a class="OWAAutoLink" data-auth="NotApplicable" data-linkindex="1" href="https://forums.unraid.net/topic/133277-directory-created-by-robocopy-is-not-visible-in-windows-explorer/" id="OWA1ea5669a-318f-4e17-5794-ba0fc959a2f2" style="margin: 0px;">https://forums.unraid.net/topic/133277-directory-created-by-robocopy-is-not-visible-in-windows-explorer/</a></span></div> <div class="elementToProof" style="background-color: white; margin: 0px; text-align: left; text-indent: 0px;"> <br /> </div> <div class="elementToProof" style="background-color: white; margin: 0px; text-align: left; text-indent: 0px;"> <span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"></span></div></body></html>Billy Funghttp://www.blogger.com/profile/09166372535555573277noreply@blogger.com0tag:blogger.com,1999:blog-2199279305926394026.post-60931850902004860802024-02-25T14:40:00.001+08:002024-02-25T14:40:11.482+08:00Full data backup from C Drive to external USB driver by using Robocopy <html> <head> <meta content="text/html; charset=iso-8859-1" http-equiv="Content-Type"></meta> <style style="display: none;" type="text/css"> P {margin-top:0;margin-bottom:0;} </style> </head> <body dir="ltr"> <div class="elementToProof"><span style="color: black; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt;">robocopy /s /z /xj /V /R:0 /W:0 /copy:DT C:\ D:\backups\c\</span></div> <div style="background-color: white; margin: 0px; text-align: left; text-indent: 0px;"> <span style="color: black; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt;"><br /> </span></div> <div style="background-color: white; margin: 0px; text-align: left; text-indent: 0px;"> <span style="color: black; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt;">Reference:</span></div> <div style="background-color: white; margin: 0px; text-align: left; text-indent: 0px;"> <span style="color: black; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt;"><a class="OWAAutoLink" data-auth="NotApplicable" data-linkindex="0" href="https://dylanbeattie.net/2021/11/12/copying-your-hard-drive-with-robocopy.html" id="OWA51044c0c-10f7-38e0-c937-219f8677e67a" style="margin: 0px;">https://dylanbeattie.net/2021/11/12/copying-your-hard-drive-with-robocopy.html</a></span></div> <div style="background-color: white; margin: 0px; text-align: left; text-indent: 0px;"> <span style="color: black; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt;"><a class="OWAAutoLink" data-auth="NotApplicable" data-linkindex="1" href="https://community.spiceworks.com/topic/2344362-robocopy-get-access-denied-error" id="OWA0b6d1994-0b61-23a2-55ca-1afc14352213" style="margin: 0px;">https://community.spiceworks.com/topic/2344362-robocopy-get-access-denied-error</a></span></div> <div style="background-color: white; margin: 0px; text-align: left; text-indent: 0px;"> <span style="color: black; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt;"><a class="OWAAutoLink" data-auth="NotApplicable" data-linkindex="2" href="https://pureinfotech.com/robocopy-recover-and-skip-files-with-errors-from-bad-hard-drive-in-windows/" id="OWA6d4be734-af0c-dfb3-a5e3-07bb4f7dd4d4" style="margin: 0px;">https://pureinfotech.com/robocopy-recover-and-skip-files-with-errors-from-bad-hard-drive-in-windows/</a></span></div> <div style="background-color: white; margin: 0px; text-align: left; text-indent: 0px;"> <span style="color: black; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt;"><a class="OWAAutoLink" data-auth="NotApplicable" data-linkindex="3" href="https://learn.microsoft.com/en-us/answers/questions/47437/robocopy-everything-to-another-drive" id="OWAf5b7f5f0-b3ad-0a22-cceb-4db259458177" style="margin: 0px;">https://learn.microsoft.com/en-us/answers/questions/47437/robocopy-everything-to-another-drive</a></span></div> <div style="background-color: white; margin: 0px; text-align: left; text-indent: 0px;"> <span style="color: black; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt;"><a class="OWAAutoLink" data-auth="NotApplicable" data-linkindex="4" href="https://copyprogramming.com/howto/robocopy-everything-to-another-drive" id="OWAb324a6c7-2ec0-6937-6cf7-52e8c242bf83" style="margin: 0px;">https://copyprogramming.com/howto/robocopy-everything-to-another-drive</a></span></div> <div class="elementToProof" style="background-color: white; margin: 0px; text-align: left; text-indent: 0px;"> <br /> </div> <div class="elementToProof" style="background-color: white; margin: 0px; text-align: left; text-indent: 0px;"> <span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"></span></div></body></html>Billy Funghttp://www.blogger.com/profile/09166372535555573277noreply@blogger.com0tag:blogger.com,1999:blog-2199279305926394026.post-3141726387859928312024-02-25T14:39:00.004+08:002024-02-25T14:39:35.088+08:00Migrate Broadcom Symantec Messaging Gateway from physical to virtual appliance with different hostname and IP address<html> <head> <meta content="text/html; charset=iso-8859-1" http-equiv="Content-Type"></meta> <style style="display: none;" type="text/css"> P {margin-top:0;margin-bottom:0;} </style> </head> <body dir="ltr"> <div class="elementToProof"><span style="color: #242424; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 15px;">How to migrate Broadcom Symantec Messaging Gateway from physical to virtual appliance with different hostname and IP address? </span></div> <div class="elementToProof"><span style="color: #242424; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 15px;"><br /> </span></div> <div class="elementToProof"><span style="color: #242424; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 15px;">The solution is backup in physical appliance by select Custom backup (<a class="OWAAutoLink" data-auth="NotApplicable" data-linkindex="0" href="https://knowledge.broadcom.com/external/article/180646/backup-and-restore-the-messaging-gateway.html" id="OWA94d8b16e-b029-97d0-c823-36ad775d0969" style="margin: 0px;">https://knowledge.broadcom.com/external/article/180646/backup-and-restore-the-messaging-gateway.html</a>) , do <b>not</b> select " Include log data" then the backup will able to restore to different hostname and IP address.</span></div> <div class="elementToProof"><span style="color: #242424; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 15px;"><br /> </span></div> <div class="elementToProof"><span style="color: #242424; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 15px;"></span></div></body></html>Billy Funghttp://www.blogger.com/profile/09166372535555573277noreply@blogger.com0tag:blogger.com,1999:blog-2199279305926394026.post-80201484778111268882024-02-24T15:21:00.002+08:002024-02-24T15:21:23.298+08:00Prepare for NTLM disable in your domain environment<html> <head> <meta content="text/html; charset=iso-8859-1" http-equiv="Content-Type"></meta> <style style="display: none;" type="text/css"> P {margin-top:0;margin-bottom:0;} </style> </head> <body dir="ltr"> <p class="elementToProof" style="margin-bottom: 0px; margin-top: 0px;"><span style="color: #242424; font-family: Calibri, sans-serif; font-size: 11pt;"><br /> Microsoft has made an announcement stating that the NTLM authentication protocol will be disabled in Windows 11. Instead, it will be replaced by Kerberos, which is currently the default authentication protocol in Windows versions above Windows 2000.</span></p> <p style="background-color: white; margin: 0in; text-align: left; text-indent: 0px;"> <span style="color: #242424; font-family: Calibri, sans-serif; font-size: 11pt;"> </span></p> <p style="background-color: white; margin: 0in; text-align: left; text-indent: 0px;"> <span style="color: #0563c1; font-family: Calibri, sans-serif; font-size: 11pt;"><u><a class="OWAAutoLink" data-auth="NotApplicable" data-linkindex="0" href="https://petri.com/microsoft-disable-ntlm-windows-11/" id="OWAa2ab5c3b-5536-52cd-132d-1637e13572ea" style="color: #0563c1; margin: 0px;">https://petri.com/microsoft-disable-ntlm-windows-11/</a></u></span></p> <p style="background-color: white; margin: 0in; text-align: left; text-indent: 0px;"> <span style="color: #242424; font-family: Calibri, sans-serif; font-size: 11pt;"> </span></p> <p style="background-color: white; margin: 0in; text-align: left; text-indent: 0px;"> <span style="color: #242424; font-family: Calibri, sans-serif; font-size: 11pt;">To prepare for this change is coming, you can enable a GPO to audit what application is using NTLM I n your environment and also what version of NTLM still using?</span></p> <p style="background-color: white; margin: 0in; text-align: left; text-indent: 0px;"> <span style="color: #242424; font-family: Calibri, sans-serif; font-size: 11pt;"> </span></p> <p style="background-color: white; margin: 0in; text-align: left; text-indent: 0px;"> <span style="color: #242424; font-family: Calibri, sans-serif; font-size: 11pt;"> </span></p> <p style="background-color: white; margin: 0in; text-align: left; text-indent: 0px;"> <span style="color: #0563c1; font-family: Calibri, sans-serif; font-size: 11pt;"><u><a class="OWAAutoLink" data-auth="NotApplicable" data-linkindex="1" href="https://learn.microsoft.com/en-us/troubleshoot/windows-server/windows-security/audit-domain-controller-ntlmv1" id="OWAa6f0ba8a-3577-33d1-61b2-875f2de44fbc" style="color: #0563c1; margin: 0px;">https://learn.microsoft.com/en-us/troubleshoot/windows-server/windows-security/audit-domain-controller-ntlmv1</a></u></span></p> <p style="background-color: white; margin: 0in; text-align: left; text-indent: 0px;"> <span style="color: #0563c1; font-family: Calibri, sans-serif; font-size: 11pt;"><u><a class="OWAAutoLink" data-auth="NotApplicable" data-linkindex="2" href="https://superuser.com/questions/1694421/how-can-i-find-out-what-is-using-ntlm-in-my-environment" id="OWAd6783569-e0d5-b03b-0236-b2967892689e" style="color: #0563c1; margin: 0px;">https://superuser.com/questions/1694421/how-can-i-find-out-what-is-using-ntlm-in-my-environment</a></u></span></p> <p style="background-color: white; margin: 0in; text-align: left; text-indent: 0px;"> <span style="color: #0563c1; font-family: Calibri, sans-serif; font-size: 11pt;"><u><a class="OWAAutoLink" data-auth="NotApplicable" data-linkindex="3" href="https://mahim-firoj.medium.com/how-to-check-what-ntlm-version-you-are-using-in-your-domain-9eb4aed9f317" id="OWA05da0346-28f5-dfb2-65b4-eccd0f8c4154" style="color: #0563c1; margin: 0px;">https://mahim-firoj.medium.com/how-to-check-what-ntlm-version-you-are-using-in-your-domain-9eb4aed9f317</a></u></span></p> <p style="background-color: white; margin: 0in; text-align: left; text-indent: 0px;"> <span style="color: #0563c1; font-family: Calibri, sans-serif; font-size: 11pt;"><u><a class="OWAAutoLink" data-auth="NotApplicable" data-linkindex="4" href="https://4sysops.com/archives/auditing-and-restricting-ntlm-authentication-using-group-policy/" id="OWA7ec12d4e-3986-083a-41bb-36fc64bfce87" style="color: #0563c1; margin: 0px;">https://4sysops.com/archives/auditing-and-restricting-ntlm-authentication-using-group-policy/</a></u></span></p> <p style="background-color: white; margin: 0in; text-align: left; text-indent: 0px;"> <span style="color: #242424; font-family: Calibri, sans-serif; font-size: 11pt;"> </span></p> <p class="elementToProof" style="background-color: white; margin: 0in; text-align: left; text-indent: 0px;"> <span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"></span></p></body></html>Billy Funghttp://www.blogger.com/profile/09166372535555573277noreply@blogger.com0tag:blogger.com,1999:blog-2199279305926394026.post-10859836704199660492024-02-22T22:11:00.006+08:002024-02-22T22:11:50.723+08:00SSL VPN and ZTNA solution requirement on client side control<html> <head> <meta content="text/html; charset=iso-8859-1" http-equiv="Content-Type"></meta> <style style="display: none;" type="text/css"> P {margin-top:0;margin-bottom:0;} </style> </head> <body dir="ltr"> <table id="table_0" style="border-collapse: collapse; border-spacing: 0px; box-sizing: border-box; height: 1965px; width: 351.016px;"> <tbody> <tr> <td style="background-color: #c00000; border-color: rgb(0, 0, 0); border-style: solid; border-width: 0.5pt; box-sizing: border-box; height: 31px; padding-left: 1px; padding-right: 1px; padding-top: 1px; text-align: center; vertical-align: top; white-space: nowrap; width: 350.016px;"> <div style="text-align: center; white-space: nowrap;"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"></span><span style="color: white; font-family: Calibri; font-size: 16pt; font-weight: 700;">Solution Requirements</span></div> </td> </tr> <tr> <td style="background-color: #70ad47; border-color: rgb(0, 0, 0); border-style: solid; border-width: 0.5pt; box-sizing: border-box; height: 45px; padding-left: 1px; padding-right: 1px; padding-top: 1px; vertical-align: top; white-space: nowrap; width: 350.016px;"> <div style="white-space: nowrap;"><br /> </div> </td> </tr> <tr> <td style="border-color: rgb(0, 0, 0); border-style: solid; border-width: 0.5pt; box-sizing: border-box; height: 88px; padding-left: 1px; padding-right: 1px; padding-top: 1px; text-align: left; vertical-align: middle; width: 350.016px;"> <div style="text-align: left;"><span style="color: black; font-family: Calibri; font-size: 16pt;">Users experience resemble local office LAN access (F&P)</span></div> </td> </tr> <tr> <td style="border-color: rgb(0, 0, 0); border-style: solid; border-width: 0.5pt; box-sizing: border-box; height: 151px; padding-left: 1px; padding-right: 1px; padding-top: 1px; text-align: left; vertical-align: middle; width: 350.016px;"> <div style="text-align: left;"><span style="color: black; font-family: Calibri; font-size: 16pt;">Local office LAN is city based</span></div> </td> </tr> <tr> <td style="border-color: rgb(0, 0, 0); border-style: solid; border-width: 0.5pt; box-sizing: border-box; height: 88px; padding-left: 1px; padding-right: 1px; padding-top: 1px; text-align: left; vertical-align: middle; width: 350.016px;"> <div style="text-align: left;"><span style="color: black; font-family: Calibri; font-size: 16pt;">Connect from Internet or other non-corporate network</span></div> </td> </tr> <tr> <td style="background-color: #c00000; border-color: rgb(0, 0, 0); border-style: solid; border-width: 0.5pt; box-sizing: border-box; height: 31px; padding-left: 1px; padding-right: 1px; padding-top: 1px; text-align: center; vertical-align: top; white-space: nowrap; width: 350.016px;"> <div style="text-align: center; white-space: nowrap;"><span style="color: white; font-family: Calibri; font-size: 16pt; font-weight: 700;">Solution Requirements</span></div> </td> </tr> <tr> <td style="background-color: #70ad47; border-color: rgb(0, 0, 0); border-style: solid; border-width: 0.5pt; box-sizing: border-box; height: 45px; padding-left: 1px; padding-right: 1px; padding-top: 1px; vertical-align: top; white-space: nowrap; width: 350.016px;"> <div style="white-space: nowrap;"><br /> </div> </td> </tr> <tr> <td style="border-color: rgb(0, 0, 0); border-style: solid; border-width: 0.5pt; box-sizing: border-box; height: 200px; padding-left: 1px; padding-right: 1px; padding-top: 1px; text-align: left; vertical-align: middle; width: 350.016px;"> <div style="text-align: left;"><span style="color: black; font-family: Calibri; font-size: 16pt;">ONLY applied on Company owned Laptops with Windows 10 or above, no Apple devices and Android devices</span></div> </td> </tr> <tr> <td style="border-color: rgb(0, 0, 0); border-style: solid; border-width: 0.5pt; box-sizing: border-box; height: 243px; padding-left: 1px; padding-right: 1px; padding-top: 1px; text-align: left; vertical-align: middle; width: 350.016px;"> <div style="text-align: left;"><span style="color: black; font-family: Calibri; font-size: 16pt;">Always ON (Enforce VPN when network connected)</span></div> </td> </tr> <tr> <td style="border-color: rgb(0, 0, 0); border-style: solid; border-width: 0.5pt; box-sizing: border-box; height: 234px; padding-left: 1px; padding-right: 1px; padding-top: 1px; text-align: left; vertical-align: middle; width: 350.016px;"> <div style="text-align: left;"><span style="color: black; font-family: Calibri; font-size: 16pt;">MS KB Posture Check and Antivirus Signature Check (Host Scan)</span></div> </td> </tr> <tr> <td style="border-color: rgb(0, 0, 0); border-style: solid; border-width: 0.5pt; box-sizing: border-box; height: 172px; padding-left: 1px; padding-right: 1px; padding-top: 1px; text-align: left; vertical-align: middle; width: 350.016px;"> <div style="text-align: left;"><span style="color: black; font-family: Calibri; font-size: 16pt;">If the above host scan failed, isolated LAN with limited access will provided instead</span></div> </td> </tr> <tr> <td style="border-color: rgb(0, 0, 0); border-style: solid; border-width: 0.5pt; box-sizing: border-box; height: 87px; padding-left: 1px; padding-right: 1px; padding-top: 1px; text-align: left; vertical-align: middle; width: 350.016px;"> <div style="text-align: left;"><span style="color: black; font-family: Calibri; font-size: 16pt;">Block any Internet connection when VPN is down</span></div> </td> </tr> <tr> <td style="border-color: rgb(0, 0, 0); border-style: solid; border-width: 0.5pt; box-sizing: border-box; height: 266px; padding-left: 1px; padding-right: 1px; padding-top: 1px; text-align: left; vertical-align: middle; width: 350.016px;"> <div style="text-align: left;"><span style="color: black; font-family: Calibri; font-size: 16pt;">Supports Captive Portal Authentication (i.e. Hotel Customer Login)</span></div> </td> </tr> <tr> <td data-editing-info="{"bgColorOverride":true}" style="border-color: rgb(0, 0, 0); border-style: solid; border-width: 0.5pt; box-sizing: border-box; height: 113px; padding-left: 1px; padding-right: 1px; padding-top: 1px; text-align: left; vertical-align: middle; width: 350.016px;"> <div class="elementToProof" style="text-align: left;"><span style="background-color: white; color: black; font-family: Calibri; font-size: 21.3333px;">MFA (Active Directory + Software Token + Cert Auth)</span></div> </td> </tr> <tr> <td data-editing-info="{"bgColorOverride":true}" style="border-color: rgb(0, 0, 0); border-style: solid; border-width: 0.5pt; box-sizing: border-box; height: 85px; padding-left: 1px; padding-right: 1px; padding-top: 1px; text-align: left; vertical-align: middle; width: 350.016px;"> <div class="elementToProof" style="text-align: left;"><span style="background-color: white; color: black; font-family: Calibri; font-size: 21.3333px;">Detect Antivirus being stop after the VPN connection is established</span></div> </td> </tr> </tbody> </table> <div class="elementToProof" style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> <br /> </div> <div class="elementToProof" style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> </div></body></html>Billy Funghttp://www.blogger.com/profile/09166372535555573277noreply@blogger.com0tag:blogger.com,1999:blog-2199279305926394026.post-6508733899975279902024-02-22T22:11:00.002+08:002024-02-22T22:11:17.679+08:00GPO enable Office 365 "click to run" edition to auto update monthly security patches and keep on the target version and channel<html> <head> <meta content="text/html; charset=iso-8859-1" http-equiv="Content-Type"></meta> <style style="display: none;" type="text/css"> P {margin-top:0;margin-bottom:0;} </style> </head> <body dir="ltr"> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><a href="https://blogger.googleusercontent.com/img/a/AVvXsEhewurjSV-pMVr0irX4bf_EXFDb-5XuC-6fcLGmOfCdikixHHGgEB4eNvFwPk-hKcZew6NqQv5vRp2vWDuHr5egIgz-iJRpayzmv78k_3lurnn75_ogF5r3edDP64x1nvsnXDv6d_LdufE2k5WYfZt3eW31zc2iqTSn2LIoTQtEp53aPBolMBxkuGQsiPsu"><img alt="" border="0" id="BLOGGER_PHOTO_ID_7338378441432273922" src="https://blogger.googleusercontent.com/img/a/AVvXsEhewurjSV-pMVr0irX4bf_EXFDb-5XuC-6fcLGmOfCdikixHHGgEB4eNvFwPk-hKcZew6NqQv5vRp2vWDuHr5egIgz-iJRpayzmv78k_3lurnn75_ogF5r3edDP64x1nvsnXDv6d_LdufE2k5WYfZt3eW31zc2iqTSn2LIoTQtEp53aPBolMBxkuGQsiPsu=s320" /></a></span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><br /> </span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"></span></div></body></html>Billy Funghttp://www.blogger.com/profile/09166372535555573277noreply@blogger.com0tag:blogger.com,1999:blog-2199279305926394026.post-30376422437253200372024-02-22T22:10:00.004+08:002024-02-22T22:10:29.443+08:00Failed to login SWIFT RMA port after Edge upgrade<html> <head> <meta content="text/html; charset=iso-8859-1" http-equiv="Content-Type"></meta> <style style="display: none;" type="text/css"> P {margin-top:0;margin-bottom:0;} </style> </head> <body dir="ltr"> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Edge 120.0.2210.144 </span><span style="background-color: white; color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 16px;">failed to login SWIFT RMA portal </span><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> </span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><br /> </span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Edge 115.0.1901.203 or below able to </span><span style="background-color: white; color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 16px;">login RMA portal </span><span style="background-color: white; color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> </span></div> <div class="elementToProof"><span style="background-color: white; color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><br /> </span></div> <div class="elementToProof"><span style="background-color: white; color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"></span></div></body></html>Billy Funghttp://www.blogger.com/profile/09166372535555573277noreply@blogger.com0tag:blogger.com,1999:blog-2199279305926394026.post-13804744957186080792024-02-22T22:10:00.001+08:002024-02-22T22:10:06.512+08:00Edge Favorites offline migration <html> <head> <meta content="text/html; charset=iso-8859-1" http-equiv="Content-Type"></meta> <style style="display: none;" type="text/css"> P {margin-top:0;margin-bottom:0;} </style> </head> <body dir="ltr"> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Edge Favorites - copy from old machine and paste on new machine. If you open the Edge, you need to close the Edge and re-open it.</span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><br /> </span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">All the references of the bookmark file is in C:\Users\<Username>\AppData\Local\Microsoft\Edge\User Data\Default\Bookmarks</span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><br /> </span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"></span></div></body></html>Billy Funghttp://www.blogger.com/profile/09166372535555573277noreply@blogger.com0tag:blogger.com,1999:blog-2199279305926394026.post-68563486696331190382024-02-22T22:09:00.002+08:002024-02-22T22:09:37.777+08:00Hillstone storeID able to raise support case, download image, access free training, manual and document.<html> <head> <meta content="text/html; charset=iso-8859-1" http-equiv="Content-Type"></meta> <style style="display: none;" type="text/css"> P {margin-top:0;margin-bottom:0;} </style> </head> <body dir="ltr"> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">In the support portal, one important information is recommended versions.</span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><a href="https://blogger.googleusercontent.com/img/a/AVvXsEjxsIsGv862mRUg1dL6gCw6CN09T6ya9KxMyL96Vh6APtg0TYMiFakWFoi-mxmGb1MoIQp2XX5AvSgwBEPnOJhW_QPU4qqGBErK3WJLQ3urLnFNim15_QKQOQ7IgdPHw-od8tLjeoHSekcpGrZ1J5hH0lCv02VudBJ_nrJ-qpKs4DBpRe5hCFIPWkDCXitB"><img alt="" border="0" id="BLOGGER_PHOTO_ID_7338376568625659282" src="https://blogger.googleusercontent.com/img/a/AVvXsEjxsIsGv862mRUg1dL6gCw6CN09T6ya9KxMyL96Vh6APtg0TYMiFakWFoi-mxmGb1MoIQp2XX5AvSgwBEPnOJhW_QPU4qqGBErK3WJLQ3urLnFNim15_QKQOQ7IgdPHw-od8tLjeoHSekcpGrZ1J5hH0lCv02VudBJ_nrJ-qpKs4DBpRe5hCFIPWkDCXitB=s320" /></a></span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><br /> </span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">User account portal: <a class="link rich-text-anchor __anchor-intercept-flag__ text-content-link OWAAutoLink" contenteditable="false" data-eleid="4" href="https://passport.hillstonenet.com/Account/login" rel="noopener noreferrer" target="_blank"> Hillstone User Center (hillstonenet.com)</a> </span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Support Portal: <a class="link rich-text-anchor __anchor-intercept-flag__ text-content-link OWAAutoLink" contenteditable="false" data-eleid="8" href="https://support.hillstonenet.com/Account/Login" rel="noopener noreferrer" target="_blank"> Login - Hillstone (hillstonenet.com)</a></span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><br /> </span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"></span></div></body></html>Billy Funghttp://www.blogger.com/profile/09166372535555573277noreply@blogger.com0tag:blogger.com,1999:blog-2199279305926394026.post-48910773662111194452024-02-20T23:53:00.001+08:002024-02-20T23:53:03.444+08:00Outlook CVE-2024-21413 aka MonikerLink - Need to patch now<html> <head> <meta content="text/html; charset=iso-8859-1" http-equiv="Content-Type"></meta> <style style="display: none;" type="text/css"> P {margin-top:0;margin-bottom:0;} </style> </head> <body dir="ltr"> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">MS Security Update <a class="link OWAAutoLink" data-tracking-control-name="public_post_comment-text" data-tracking-will-navigate="" href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21413?trk=public_post_comment-text" id="OWAd2a97e5d-21b5-e875-862e-e103d532d907" rel="nofollow" target="_self"> https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21413</a> </span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><br /> </span></div> <ol data-editing-info="{"orderedStyleType":1,"unorderedStyleType":1}" start="1" style="list-style-type: decimal; margin-bottom: 0px; margin-top: 0px;"> <li style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> <span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">For .msi install based - you can install standalone security patches to fix this vulnerability</span></li><li style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> <span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">For O365/M365 user who is using click-to-run edition, assume you are domain joined machine, you need to deploy office GPO to enable auto update and run or deploy the command to run the whole office update. For example: <code>"C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe" /update user</code></span> <div style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> <span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><br /> </span></div> </li></ol> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><br /> </span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> PoC - <a class="link OWAAutoLink" data-tracking-control-name="public_post_comment-text" data-tracking-will-navigate="" href="https://github.com/duy-31/CVE-2024-21413?trk=public_post_comment-text" id="OWAef772d93-1097-241c-5904-7daaf10d8d88" rel="nofollow" target="_self"> https://github.com/duy-31/CVE-2024-21413</a> </span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> <a class="link OWAAutoLink" data-tracking-control-name="public_post_comment-text" data-tracking-will-navigate="" href="https://github.com/xaitax/CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability?trk=public_post_comment-text" id="OWAd6dc046d-7df3-6c6e-a12f-73715dac520e" rel="nofollow" target="_self">https://github.com/xaitax/CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability</a></span></div> <div class="elementToProof"><br /> </div> <div class="elementToProof"><br /> </div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Reference:</span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><a href="https://office-watch.com/2023/microsoft-office-update-one-click-force/" id="LPlnk">https://office-watch.com/2023/microsoft-office-update-one-click-force/</a></span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><a href="https://serverfault.com/questions/979000/update-office-without-opening-an-office-application" id="LPlnk269844">https://serverfault.com/questions/979000/update-office-without-opening-an-office-application</a></span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><a href="https://www.reddit.com/r/Office365/comments/1252ysz/office_2019_clicktorun_offline_updates/" id="LPlnk">https://www.reddit.com/r/Office365/comments/1252ysz/office_2019_clicktorun_offline_updates/</a></span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><a href="https://windowsreport.com/outlooks-decades-old-vulnerability-allowed-for-catastrophic-attacks-without-any-user-interaction/" id="LPlnk">https://windowsreport.com/outlooks-decades-old-vulnerability-allowed-for-catastrophic-attacks-without-any-user-interaction/</a></span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><a href="https://research.checkpoint.com/2024/the-risks-of-the-monikerlink-bug-in-microsoft-outlook-and-the-big-picture/" id="LPlnk">https://research.checkpoint.com/2024/the-risks-of-the-monikerlink-bug-in-microsoft-outlook-and-the-big-picture/</a></span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><a href="https://medium.com/@chinamayjoshi/monikerlink-meltdown-demystifying-cve-2024-21413-and-dodging-outlooks-booby-trap-43ba52c4b458" id="LPlnk">https://medium.com/@chinamayjoshi/monikerlink-meltdown-demystifying-cve-2024-21413-and-dodging-outlooks-booby-trap-43ba52c4b458</a></span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><br /> </span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"></span></div></body></html>Billy Funghttp://www.blogger.com/profile/09166372535555573277noreply@blogger.com0tag:blogger.com,1999:blog-2199279305926394026.post-72884503638360498792024-02-20T21:55:00.003+08:002024-02-20T21:55:33.909+08:00Migrating a Symantec Messaging Gateway Appliance to the Virtual Edition<html> <head> <meta content="text/html; charset=iso-8859-1" http-equiv="Content-Type"></meta> <style style="display: none;" type="text/css"> P {margin-top:0;margin-bottom:0;} </style> </head> <body dir="ltr"> <div class="elementToProof" style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> Install the same version of the Virtual SMG in the supported virtual platform, use the same IP address and hostname of the physical Symantec Messaging Gateway Appliance.</div> <div class="elementToProof" style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> <br /> </div> <div class="elementToProof" style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> For the detail step, please refer to the following:</div> <div class="elementToProof"><span style="background-color: white; color: black; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 15px;"><a class="OWAAutoLink" data-auth="NotApplicable" data-linkindex="0" href="https://knowledge.broadcom.com/external/article/158058/migrating-a-symantec-messaging-gateway-a.html" id="OWAfc234d43-a2f3-1e42-cdd7-14f083505108" style="background-color: white; margin: 0px; text-align: left;">https://knowledge.broadcom.com/external/article/158058/migrating-a-symantec-messaging-gateway-a.html</a></span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><br /> </span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"></span></div></body></html>Billy Funghttp://www.blogger.com/profile/09166372535555573277noreply@blogger.com0tag:blogger.com,1999:blog-2199279305926394026.post-65551896024565926072024-02-20T02:28:00.002+08:002024-02-20T02:28:36.064+08:00Cisco ASA SSL VPN Vulnerability - CVE-2023-20275<html> <head> <meta content="text/html; charset=Windows-1252" http-equiv="Content-Type"></meta> <style style="display: none;" type="text/css"> P {margin-top:0;margin-bottom:0;} </style> </head> <body dir="ltr"> <div class="elementToProof" style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> <br /> </div> <div class="elementToProof"><span style="color: #242424; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 15px;"><a class="OWAAutoLink" data-auth="NotApplicable" data-linkindex="0" href="https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ssl-vpn-Y88QOm77" id="OWA8da46f90-dad9-0182-672e-eea6383c81d0" style="margin: 0px;">https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ssl-vpn-Y88QOm77</a></span></div> <div style="background-color: white; margin: 0px;"> <div style="direction: ltr; margin: 0px;"><span style="color: #242424; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 15px;"><br /> </span></div> <div style="direction: ltr; margin: 0px;"><span style="color: #242424; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 15px;"><a class="OWAAutoLink" data-auth="NotApplicable" data-linkindex="1" href="https://www.cisco.com/web/software/280775065/152946/ASA-9124-Interim-Release-Notes.html" id="OWAbca8ae7b-4aff-1c93-80b1-32094708ec56" style="margin: 0px;">https://www.cisco.com/web/software/280775065/152946/ASA-9124-Interim-Release-Notes.html</a> </span></div> </div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><br /> </span></div> <div class="elementToProof"><span style="background-color: white; color: #242424; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 16px;">It is required to upgrade to Version 9.12(4)65 – 1/25/2024 or later or higher version with latest patches.</span></div> <div class="elementToProof"><span style="background-color: white; color: #242424; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 16px;"><br /> </span></div> <div class="elementToProof"><span style="background-color: white; color: #242424; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 16px;">Reference:</span></div> <div class="elementToProof"><span style="background-color: white; color: #242424; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 16px;"><a href="https://www.govcert.gov.hk/tc/alerts_detail.php?id=1176" id="LPlnk908783">https://www.govcert.gov.hk/tc/alerts_detail.php?id=1176</a></span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><a href="https://avd.aliyun.com/detail?id=AVD-2023-20275" id="LPlnk">https://avd.aliyun.com/detail?id=AVD-2023-20275</a></span></div> <span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><a href="https://www.cybersecurity-help.cz/vdb/SB2023120533" id="LPlnk">https://www.cybersecurity-help.cz/vdb/SB2023120533</a></span> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><a href="https://cyber.vumetric.com/vulns/CVE-2023-20275/unspecified-vulnerability-in-cisco-adaptive-security-appliance-software/" id="LPlnk838813">https://cyber.vumetric.com/vulns/CVE-2023-20275/unspecified-vulnerability-in-cisco-adaptive-security-appliance-software/</a></span></div> <div class="elementToProof"><span style="background-color: white; color: #242424; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 16px;"><br /> </span></div> <div class="elementToProof" style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> </div></body></html>Billy Funghttp://www.blogger.com/profile/09166372535555573277noreply@blogger.com0tag:blogger.com,1999:blog-2199279305926394026.post-5555822843808075112024-02-18T17:16:00.000+08:002024-02-18T17:16:04.954+08:00Hong Kong Monetary Authority (HKMA) - Secure Tertiary Data Backup (STDB)<html> <head> <meta content="text/html; charset=iso-8859-1" http-equiv="Content-Type"></meta> <style style="display: none;" type="text/css"> P {margin-top:0;margin-bottom:0;} </style> </head> <body dir="ltr"> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">In 2021, in light of recent international developments such as the US Sheltered Harbor initiative to</span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">address this type of cyber threats, the </span><span style="background-color: white; color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 16px;">Hong Kong Monetary Authority (</span><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">HKMA) has invited the Hong Kong</span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Association of Banks (HKAB) to develop guidelines on </span><span style="background-color: white; color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 16px;">Secure Tertiary Data Backup</span><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> (STDB) that are</span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">appropriate for the banking landscape in Hong Kong. HKAB issued the STDB Guideline to banks in an effort to counter the growing risks of potentially catastrophic cyberattacks.</span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><br /> </span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">In 2023, HKMA Made significant inroad in implementing Secure Tertiary Data Backup (STDB) to<br /> enhance recovery capabilities from ransomware attacks.</span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><br /> </span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">8 Principles:</span></div> <ol data-editing-info="{"orderedStyleType":1,"unorderedStyleType":1}" start="1" style="list-style-type: decimal; margin-bottom: 0px; margin-top: 0px;"> <li style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> <span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">STDB Governance Model</span></li><li style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> <span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Identification of Critical Data</span></li><li style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> <span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Data Quality</span></li><li style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Critical Data Lifecycle Management </span></div> </li><li style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Data Extraction and Ingestion</span></div> </li><li style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Secure Repository</span></div> </li><li style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Restoration Planning</span></div> </li><li style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Restoration Validation Process and Drills</span></div> </li></ol> <div class="elementToProof" style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> <br /> </div> <div class="elementToProof" style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> 9 Characteristics:</div> <div class="elementToProof" style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> <br /> </div> <ol data-editing-info="{"orderedStyleType":1,"unorderedStyleType":1}" start="1" style="list-style-type: decimal; margin-bottom: 0px; margin-top: 0px;"> <li style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> <span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Immutable</span></li><li style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> <span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Survivable</span></li><li style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> <span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Air-gapped</span></li><li style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> <span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Secure</span></li><li style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> <span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Controlled</span></li><li style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> <span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Verifiable</span></li><li style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> <span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Assurance</span></li><li style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> <span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Heterogeneous</span></li><li style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> <span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">High-performance</span></li></ol> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><br /> </span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Reference:</span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><a class="OWAAutoLink" href="https://www.hkma.gov.hk/media/eng/doc/key-information/guidelines-and-circular/2021/20210518e1.pdf" id="LPlnk859898">https://www.hkma.gov.hk/media/eng/doc/key-information/guidelines-and-circular/2021/20210518e1.pdf</a></span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><a class="OWAAutoLink" href="https://www.hkma.gov.hk/media/eng/doc/key-information/speeches/s20240131e1.pdf" id="LPlnk384463">https://www.hkma.gov.hk/media/eng/doc/key-information/speeches/s20240131e1.pdf</a></span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">8 Principle-based Guidelines of STDB</span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><a class="OWAAutoLink" href="https://www2.deloitte.com/content/dam/Deloitte/cn/Documents/ined/deloitte-cn-ined-cyberupdates-20210721.pdf" id="LPlnk339223">https://www2.deloitte.com/content/dam/Deloitte/cn/Documents/ined/deloitte-cn-ined-cyberupdates-20210721.pdf</a></span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">9 Characterises of STDB</span></div> <div class="elementToProof"><span style="background-color: white; color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 16px;"><a class="OWAAutoLink" href="https://hktw-resources.awscloud.com/whitepapers-2/technical-whitepaper-building-a-secure-tertiary-data-backup-stdb-on-aws-2" id="OWA75134819-6725-b930-1cad-5906ec4dade1" style="background-color: white; margin: 0px; text-align: left;">https://hktw-resources.awscloud.com/whitepapers-2/technical-whitepaper-building-a-secure-tertiary-data-backup-stdb-on-aws-2</a></span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><a href="https://cpl.thalesgroup.com/sites/default/files/content/compliance_brief/field_document/2023-06/complying-to-secure-tertiary-data-backup-guideline-in-hong-kong.pdf" id="LPlnk360764">https://cpl.thalesgroup.com/sites/default/files/content/compliance_brief/field_document/2023-06/complying-to-secure-tertiary-data-backup-guideline-in-hong-kong.pdf</a></span></div> <div class="elementToProof"><span style="background-color: white; color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 16px;">US Sheltered Harbor</span></div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><a href="https://shelteredharbor.org/" id="LPlnk">https://shelteredharbor.org/</a></span></div> <div style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> <br /> </div> <div class="elementToProof"><br /> </div> <div class="elementToProof"><span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"></span></div></body></html>Billy Funghttp://www.blogger.com/profile/09166372535555573277noreply@blogger.com0