IT Security & Network Engineering Knowledge Base

Practical documentation and technical guides on network security, firewalls, Linux systems, monitoring, and automation.
We feature technical articles across the entire IT spectrum - Built from real-world experience and continuously updated.

Cannot log on after you remove the computer from domain

After removing a computer from a domain you cannot login and receive the follow error : The system could not log you on. Make sure your user name and domain are correct, then type your password again. Letters in passwords must be typed using the correct case. Make sure that Caps Lock is not accidentally … Read more

Troubleshooting a Netscreen Site 2 Site VPN

In this example we will run through various steps to troubleshoot a Site 2 Site VPN. Confirm General Details This will give us a general overview of our vpn. netscreen(M)-> get vpn Name            Gateway         Mode RPlay 1st Proposal         Monitor Use Cnt Interface ————— ————— —- —– ——————– ——- ——- ———- sitea_vpn   sitea       tunl Yes   g2-esp-3des-sha      … Read more

Configuring VPN Traffic Policing on an ASA

In this article we will show you how to set traffic policing on traffic which is tranversing a VPN. Please Note : The command usage has changed from 8.0.4 to 8.2.1. When matching on a tunnel-group and policing at the same time you will have to also configure the match flow ip destination-address command to … Read more

ASA – Site to Site VPN Example

In this article I will be showing you how to configure a Site 2 Site VPN on a ASA.Also included within this example is a group-policy (named “GROUPPOLICY100”) which we restrict access between the 2 endpoints to just tcp/80 traffic. Please Note : This example presumes that you have already created the object groups for … Read more

Check Point Per User IP Assignment Using ipassignment.conf

In order to assign individual IPs and ranges to certains remote access users, Check Point provides a configuration file allowing you to configure your gateway as required. This configuration file is : $FWDIR/conf/ipassignment.conf This article we will outline some of the possible gotcha`s and also run through the required steps. Within this example we will … Read more

Netscreen Command Library for ScreenOS 6.2

Below is the list of all the commands (including the hidden commands) from a Netscreen NS5GT running ScreenOS 6.2. set fips-mode enable set fips-mode self-test afterkeygen set fips-mode self-test interval set key protection enable set all set vendor-def set envar set clock dst-off set clock dst recurring start-weekday last end-weekday last set clock dst recurring … Read more

Solaris Backup Script

This script will backup all the major operating system files and save them within /var/tmp. It was also log the MD5 of the backup after each successful backup and rotate the backups to ensure you dont run into disk space issues. #!/sbin/sh ## ## SunOS Backup Script v1.3 ## ## Backups up the the following … Read more

Redhat Server Single User Mode: Enable Serial Connection

Please note : This article is based on RHEL5 and grub. Below shows the 2 methods you can use to ensure serial connectivity when booting into single user mode. You may find without changing this setting your connection is lost just after Redhat starts booting.This configuration change can be via the grub.conf or via the … Read more

SmartView Monitor shows device status as Problem

Issue Within the Smartview Monitor you may find that the device status is shown as “Problem”. Within Smartview Monitor you are unable to find any further details for what is causing the issue. Troubleshooting Steps This article isn’t a solution to the issue but more of a pointer to a stepping stone on finding what … Read more