Home » Security

Unknown password on Watchguard Firebox X

Question:
I have the serial number, feature key, and live security license
I also have physical access to the appliance
I took over IT for the company but nobody knows the password to this device
Any ideas how I can get in, or will I have to rebuild?
Solution:
There is no password recovery feature on the Firebox. The password is [...]

Unable to change oassword properties in local security policies in Server 2008

Question:
On server 2008, I am logged in as administrator (also tried local domain admin account).  I am trying to edit the domain password policies.  I open the local security policy console via administtrative tools.  Expand security policies -> account policies -> passwork policy.  In right panel, right click minimum password length policy and select properties.  [...]

Static Nat

Question:
Hi,
Remote users accessing the server via vpn connection, but when I do static nat on the outside interface, remote users can not access the server. Could you please tell me if there’s anything I must do.
Solution:
Is the remote VPN subnet  – inclided in your NAT 0 Acess list? id the server on the inside interface, [...]

Windows 2003 Domain Controller and Certificate issue

Question:
Hi ,
I am getting below error, can any help me on this.
Certificate Services denied request 754 because The permissions on the certificate template do not allow the current user to enroll for this type of certificate. 0×80094012 (-2146877422).  The request was for CN=””.  Additional information: Denied by Policy Module
Solution:
Hello Aariz,
Enrol the web server certificate http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/2003_Server/Q_22580689.html
Regards,
PeteLong

How to installl Tripwire on Centos (RHEL)?

Question:
I want to install a IDS for my some server (install Centos), to alert what file is modified…
I know Tripwire but There are not much document of Tripwire
So, how to install and config it?
Or is there other sollution?
Thank you!
Solution:
Hi,
AIDE is for Snort IDS, Nopius is correct need to configure a EPEL repo
Try this Install Steps:
1.      [...]

Why is my cisco client not connecting to ASA 5505: Reason 412: The remote peer is no longer responding

Question:
Hello fellow experts.  I’m stumped on a VPN connection I’m trying to get working with our ASA 5505.  We have our site-to-site VPN connection up and running, its just that the clients connecting with Cisco Client 5.(x) are not able to connect.
First, our client machines are Windows 7 computers running the Cisco VPN Client 5.0.06.0160
We [...]

How to use intrusion prevention system with firewall?

Question:
we are already having 5500 series firewall. we want to add cisco IPS in our system.
IS cisco IPS come with internel firewall? if not how it will stop access of intrusion.
Kindly refer any document that help this kind of general questions about IPS.
Solution:
there’s CSC IPS cards for the 5505 series, or AIP-SSM modules for the [...]

Iptables Redhat

Question:
I have a web server.
In web server, I install a website with port 8080.
I want when my web server reboot i can access that website.
Additionnaly, I want to open port for CIFS, webdav, and FTP
How to config the iptables?
Thanks advanced!
Solution:
generaly you need this line for every port:
iptables -A INPUT -d  <YOUR SERVER IP>/32 -m tcp [...]

How To Remove a Deny IP From Access-list

Question:

No doubt a simple task for a Cisco expert, but not for a novice such as myself.
I wanted to block an ip address by adding the following: access-list 101 deny ip 88.191.95.65 0.0.0.255 any.
The command took, but the entry in the running config is below what should be my last entry: access-list 101 permit ip [...]

Static route

Question:
Hi,
I have only one public IP Address which I want to use in routing to servers. Below is what I configured in the firewall, when I use the same Public IP Address for the other server, I get an error saying routing already exist.
static (inside,outside) 90.xxx.xxx.xxx Prod_server netmask 255.255.255.255 dns
Solution:
Hi,
I assume, you wrote your access-list?
access-list [...]