Exchange – Redirect OWA (HTTP to HTTPS)
KB ID 0000697 Problem Out of the box, Exchange (quite rightly) secures Outlook Web Access so that you have to access it via https. The problem is some of your users are used to accessing websites via http, (or simply typing a URL in their browser, without typing any prefix, so it defaults to http). If you try and access OWA via http://server.domain.com/owa.. There are a number of ways to get round this, the simplest is to redirect...
Juniper SRX Firewall – Allow Web Management from Outside
KB ID 0000708 Problem Assuming you already have web management enabled, and you want to access it from the outside (the untrusted zone). Solution 1. Log into the web console of the Juniper. 2. Navigate to Security > Zones/Screen > Select the ‘Untrust’ Zone > Edit > Host inbound traffic – Interface > Select the Outside interface > Under Interface services add in ‘http’ > OK. 3. Then...
Cisco Routers – Port Forwarding
KB ID 0000533 Problem If you have a server or host that you want to be publicly addressable and only have one public IP address then port forwarding is what you require. Solution Assumptions 1. You have a public IP on the outside of your Router. 2. You are performing NAT from your internal range of IP address to your External IP address. To Make Sure 1. Run the following command: PetesRouter#show run | include ip nat inside You...
Cisco – Cracking and Decrypting Passwords (Type 7 and Type 5)
KB ID 0000940 Problem Decrypt Type 7 Cisco Passwords The Internet is full of sites that have something like the tool below, tap your ‘encrypted’ password in and it will reveal the Cisco password. Input Type 7 Obfuscated Password: Output Plain Text Password: As you can see I’ve specifically written ‘obfuscated’ above, because the password isn’t actually encrypted at all. All that happens is the...
Cisco IOS – Enrolling for Certificates with NDES
KB ID 0000948 Problem To get your Cisco Router or Switch to enroll, and obtain a certificate from a Windows Server running NDES, this is the procedure you need to follow. Solution When dealing with certificates, it’s important that your device is maintaining the correct time. You can set this manually, but I’d recommend setting up NTP. Setting IOS Time (Manually and via NTP) 1. Choose either of the options below, (as...