Windows Server: Disabling SSL 3.0,  TLS 1.0, and TLS 1.1
May17

Windows Server: Disabling SSL 3.0, TLS 1.0, and TLS 1.1

KB ID 0001675 What are these protocols? Both SSL and TLS are cryptographic protocols designed to secure communications over a network (remember the internet is just a network). Originally we had SSL version 1 and version 2. But they were, (to be honest) ‘a bit bobbins’ and full of security holes, so never really took off. Version 3 however did and was widely supported. The problem with version 3 was, (again) that was also ‘bobbins’....

Read More
Mac High Sierra – Telnet and FTP Missing?
Nov09

Mac High Sierra – Telnet and FTP Missing?

KB ID 0001364 Problem Why have Apple removed Telnet and FTP, yes they are old, yes they are insecure. For remote management you should be using SSH and for  file transfers you should be using SFTP or FTPS. However what if I want to telnet to a mail server on port 25 and test email flow? What if I need to connect to a Cisco switch that does not have a K9 operating system, and only supports Telnet? -bash: telnet: command not found...

Read More
Windows – How to Join a Wireless Network
Nov17

Windows – How to Join a Wireless Network

KB ID 0000676  Problem You can still right click the networking icon in your task tray and manually join a wireless network, but with the new UI there is a much more user friendly way. Solution 1. Bring up the Settings menu (Press Windows Key+I, or swipe in form the left on a tablet/tablet) > Select the available networks icon. 2. Select the wireless network you want to connect to. 3. If you want to always connect to this network...

Read More
Cisco ASA – Disable SSLv3 (Force TLSv1.0) – Mitigate POODLE
Nov17

Cisco ASA – Disable SSLv3 (Force TLSv1.0) – Mitigate POODLE

KB ID 0001052 Problem By default the Cisco ASA will allow connection via SSLv3. The POODLE exploit works by forcing SSL to fall back to SSLv3 and then decrypting that communication. However you are still not completely protected as per this Threat Validation, so the ASA platform can still be attacked via TLSv1.0. Note: At time of writing TLSv1.2 is not supported, but it is on the road-map for version 9.3(2). So this procedure will not...

Read More