Palo Alto Networks Firewall Hardware Internals
A lot of effort go into creating spec sheets and publish various numbers on what performance can be expected in order to help chose and size the right firewall model. This post tries to dive…
Read More
Extending the life of your Firepower Lab Enviroment
When working with lab environments it is often an issue obtaining the proper licenses for the devices. This usually yields a tendency of using evaluation licenses of a temporal nature. But what happens when your…
Palo Alto Networks Traps 4.1 – Cryptolocker Module
The Advanced Endpoint Protection (aka. Traps, aka. Cyvera) from Palo Alto Networks have added a seperate ‘Cryptolocker module’ to its range of detection methods. In this post I will go over this particular module. Setting…
Phishing Demonstration Setup with Kali
The post contains a crude example on how to easily clone an existing site for use in a phishing campaign. It is based on rudimentary techniques as it is only meant as a proof-of-concept demonstration…
Cisco ISE 2.3 as authenticator for Palo Alto Networks Firewalls
There are several ways of authenticating toward the management interface of a Palo Alto Networks Firewall (PANW). The authentications options boils down to three distinct ways namely (or mixes of the three): Local Username, Local…
Cisco FMC Intelligence Feeds and Threat Intelligence Director
A common use-case I encounter is the ability to dynamically update object lists referenced in policies at security perimeters (Firepower, FTD or others). This can come in one of two flavors: Security threat intelligence (aka…
Upgrading Cisco FTD 6.2.1 to 6.2.2
Installing the FTD 6.2.2 update on a ASA 5515X I noticed that Cisco released FTD 6.2.2 yesterday (05-sep-2017), why I naturally had to put it in my Demolab right away in order to see if…
WordPress in the Cloud
When I had to re-create my blog installation I had to make a choice on whether I wanted to Fully host it myself (business as usual…) Find it as a full managed service (SaaS) somewhere…
Cisco FTD 6.2 – With Firepower Device Manager
First look When you first log into the FTD for FDM with a browser you will see a nice graphical interface of the units with proper color coding (i.e. green means good and orange mean…
From Cisco ASA to FTD with FDM
Intro I have been playing a little with a ASA 5515X appliance in the lab and have tried running the latest FTD code (6.2) with both stand-alone management (known as Firepower Device Manager) and the…