Netscreen – Rule Processing Order

Rule Processing Order The general processing order is as follows, Look for a policy between the ingress and egress zones If no policy is found (in step 1), search for a Global policy If no Global policy is found and if the ingress zone is same as the egress zone, apply the intra-zone block i.e … Read more

ESX Convertor (Windows 7) – The session is not authenticated

When trying to authenticate, and convert machines within your VMware convertor you recieve the following error :      The session is not authenticated Fix Close VMware Convertor Goto ‘Start / Run’ and type services.msc. Restart the services VMware vCenter Converter Agent and VMware vCenter Converter Server Relaunch VMware Convertor. Still have Issues ? If this … Read more

ESX Convertor – The session is not authenticated

Issue When trying to authenticate, and convert machines within your VMware convertor you recieve the following error :        The session is not authenticated Fix Within windows go into your task manger and kill all of your VMware convertor processes that are currently running. Reference http://communities.vmware.com/thread/195575 Still have Issues ? If this has still not … Read more

Netscreen – Changing your Duplex settings

This article was written based on the ns5gt. By default all interfaces are set to auto negotiate. Show Duplex ns5gt-> get interface trust port phy Port 1:  link is up, 100 Mbps, auto negotiated to full duplex Port 2:  link is up, 100 Mbps, auto negotiated to full duplex Port 3:  link is up, 100 … Read more

Check Point – Enabling Gratious ARP (Failover)

If you firewall isn’t Gratuitous ARPing when it fails over, you will need to edit the file $FWDIR/boot/modules/fwkern.conf, and add the following line (if it doesn’t exist create it), fwha_use_arp_packet_queue=1 Then reboot the machine.

ESX – ViClient Cannot connect to host

Issue When trying to connect to the console within the VI Client you receive the following error,               Cannot connect to host my.esx.host.com: no connection could be made because the target machine actively refused it In this example you have the required ports open on both your firewall and your ESX box. You see … Read more

Worm Prevention – Disable Autorun

There are a number of worms which exploit the autorun feature of your removable media. This is normally caused by infecting your autorun.inf file. A counter measure to this is to disable the auto run feature. Fir3net.com has supplied the relevant registry key so that you can disable the auto feature. The registry key to … Read more

Cisco ASA – What is the ‘MSS Exceeded’ ASP Feature ?

Background PIX or ASA running 7.0 later introduce a security feature in which any packets containing an MSS larger then the announced size during the 3 way handshake will be dropped.During the 3 way hand shake both sides announce their MSS (Maximum Segment Size). The MSS is the largest TCP payload that the host can … Read more