Groupshield 7 – Blocking Keywords
KB ID 0000438 Problem You would like Groupshield to block email containing certain keywords, for example you are getting a lot of spam containing certain words and phrases, in either the the subject line or message body. Solution Related Articles, References, Credits, or External Links NA
McAfee ePO 5.1 – Adding an LDAP Server
KB ID 0000926 Problem On a new installation, while trying to get some ePO groups to sync with Active Directory, I was getting LDAP errors, that suggested I need to setup an LDAP server. That’s fine but it took me ages to find out where that was done! Solution 1. Connect to to ePO > Registered Servers > New Server. 2. Change the server type to LDAP Server (well hidden McAfee, thanks for that!) > Give it a name >...
McAfee ePO – Client Firewall Exceptions to Allow Agent Deployment
KB ID 0000952 Problem It’s been a while, since I deployed ePO, and as I’ve got a big McAfee roll-out coming up I thought I’d better run it up on the test bench and see how much it’s changed since version 4. As the prospective client is going to use Server 2012 and Windows 8, that’s what I tested it with. Despite my best efforts the the McAfee agent (8.6) refused to deploy to the clients as long as I had...
Cannot Remove McAfee – ‘McAfee Agent cannot be removed while it is in managed mode’
KB ID 0000960 Problem If you have the McAfee Agent installed, (particularly if it was deployed via ePO), when you try and remove it you will see this error; Now normally you would just setup a new deployment task in ePO and set it to remove the agent(s), or replace the agent with a newer one. But what if ePO has been removed? Or the client will never be on the ePO network again? Solution Open a command window, (run as administrator)...
IBM / Lenovo IMM (Integrated Management Module) Default Username and Password
KB ID 0001088 Problem I’m more used to HP servers with iLO’s and Dell servers with DRAC’s, but today I had to put in an IBM System X (now Lenovo) Server with an IMM on it. Once I’d got its IP address from my DHCP servers list of leases I was faced with a logon screen. Solution Took some hunting, but the credentials are as follows; Username: USERID Password: PASSW0RD (That’s a zero, not an ‘O’...
Change Hosts / Connection / Screens on a Belkin Omniview KVM Switch
KB ID 0000194 Problem You are stood in the server room looking like a muppet, because you can’t switch between servers on the Belkin KVM switch, and even though the HP/Fujitsu KVM switches all work with [Print Scrn], these don’t. And putting a model number or something on the exposed part of the KVM so you could Google it and get a handbook would have been far too hard. Solution You need to Press Scroll Lock TWICE {it...
Juniper SRX Firewall – Allow ‘Ping’
KB ID 0000706 Problem I was working on an SRX100B Firewall yesterday, and needed to be able to ping the outside interface. Solution Note: You can quickly enable ping on a physical interface from CLI like so; set security zone security-zone trust interface ge-0/0/0 host-inbound-traffic system services ping 1. Log into the web console of the Juniper. 2. Navigate to Security > Zones/Screen > Select the ‘Untrust’ Zone...
Juniper SRX Firewall – Allow Web Management from Outside
KB ID 0000708 Problem Assuming you already have web management enabled, and you want to access it from the outside (the untrusted zone). Solution 1. Log into the web console of the Juniper. 2. Navigate to Security > Zones/Screen > Select the ‘Untrust’ Zone > Edit > Host inbound traffic – Interface > Select the Outside interface > Under Interface services add in ‘http’ > OK. 3. Then...
Factory Reset Juniper SRX Firewall
KB ID 0001003 Problem If you manage to stuff up your firewall, or you have just done some testing and want to revert back to ‘as new’ here is how to do it. Solution 1. Connect to the firewall either by console cable or via SSH, go to CLI mode then configuration mode. login: PeteL Password: ************ — JUNOS 12.1X47-D10.4 built 2014-08-14 22:21:50 UTC PeteL@Petes-SRX> cli PeteL@Petes-SRX> configure Entering...
JunOS – Using TACACS+ With Cisco ACS
KB ID 0001040 Problem I’ve been configuring a client’s Juniper SRX chassis cluster, for a while now. Their ACS was deployed last week so my task was to configure it to use the TACACS+ from the Cisco ACS server. The client’s setup required them to use their fxp0 management interfaces to perform the authentication. After it was configured and working, (due in no small part, to the ACS skills of Mr SteveH). I decided...