CHUV CHUV. Vincent Bex Systems Engineer Patrick Zosso Infrastructure Project Manager

Size: px
Start display at page:

Download "CHUV CHUV. Vincent Bex Systems Engineer Patrick Zosso Infrastructure Project Manager"

Transcription

1 Vincent Bex Systems Engineer Vincent.Bex@chuv.ch Patrick Zosso Infrastructure Project Manager Patrick.Zosso@chuv.ch

2 Agenda Presentation of the Security concepts at The challenge AAI implementation for UNIL students

3 Presentation Some indicators 7100 Employees Students 1300 Beds 2 campuses and several small remote sites

4 Presentation Equipments PC 7000 Printers 1930 Servers 250 Applications 750 Storage 70Tbytes

5 Presentation Locations One LAN spread on 2 main campuses 23 Small remote sites 385 network equipments VPN Firewalls Routers Switches WiFi

6 Agenda Security concepts at The challenge AAI implementation for UNIL students

7 Security concepts at DataCenter Intranet Or tcp any DMZ Internet

8 Security concepts at DataCenter tcp 8080 Intranet DMZ HTTP Proxy tcp any Internet

9 Security concepts at DataCenter UnilStudent tcp 8080 Intranet LDAP DMZ HTTP Proxy HTTP Proxy tcp any Internet

10 Agenda The challenge AAI implementation for UNIL students

11 The Challenge The situation: Users who are not employees (UNIL students) need to access internet from our premises They use specific PCs from the library They use PCs configured to automatically logon with a generic account

12 The Challenge The needs: We need to identify the users who access internet for policy enforcement purpose

13 The Challenge The environment: Our proxies are currently BlueCoat appliances BlueCoat does not support mod_shib authentication Shibboleth is easy to implement on IIS or Apache We need to force the PCs to use the proxy

14 The Challenge The solution: A dedicated BlueCoat proxy A Service Provider on Debian 4.0 Apache 2.2 with mod_shib enabled Open LDAP Two CGI scripts A GPO to force the user s PCs to use the proxy

15 Agenda AAI implementation for UNIL students

16 AAI implementation for UNIL students 1 Internet access request HTTP Proxy HTTP Request/response 1 Internet

17 AAI implementation for UNIL students 2 Redirection to a perl script protected by Shibboleth HTTP Proxy HTTP Request/response HTTP Redirection Internet 2

18 AAI implementation for UNIL students 3 AAI authentication HTTP Proxy HTTP Request/response HTTP Redirection Internet Server to server connection 3 3

19 AAI implementation for UNIL students 4 Creating the LDAP user HTTP Proxy HTTP Request/response HTTP Redirection Internet Server to server connection 4

20 AAI implementation for UNIL students 5 Creating and sending the authentication form HTTP Proxy HTTP Request/response HTTP Redirection Internet Server to server connection 5

21 AAI implementation for UNIL students 6 The proxy requests authentication to the LDAP server HTTP Proxy HTTP Request/response HTTP Redirection Internet Server to server connection 6

22 AAI implementation for UNIL students 7 LDAP user gets deleted HTTP Proxy HTTP Request/response HTTP Redirection Internet Server to server connection 7

23 AAI implementation for UNIL students 8 Redirection to the requested URL HTTP Proxy HTTP Request/response HTTP Redirection Internet Server to server connection 8

24 AAI implementation for UNIL students 9 Internet access HTTP Proxy HTTP Request/response 9 Internet HTTP Redirection Server to server connection

25 AAI implementation for UNIL students HTTP Request/response HTTP Proxy Internet HTTP redirect Server to server connection Internet access request 2 Redirection to a perl script protected by Shibboleth 3 AAI authentication 4 Creating the LDAP user 5 Creating and sending the authentication form 6 The proxy requests authentication to the LDAP server 7 LDAP user gets deleted 8 Redirection to the requested URL 9 Internet access

26 Q&A Q&A

Using AD360 as a reverse proxy server

Using AD360 as a reverse proxy server Using AD360 as a reverse proxy server www.manageengine.com/active-directory-360/ Table of Contents Document summary 1 What is a reverse proxy? 1 Configuring AD360 as a reverse proxy 2 Enabling a context-based

More information

How to Configure SSL VPN Portal for Forcepoint NGFW TECHNICAL DOCUMENT

How to Configure SSL VPN Portal for Forcepoint NGFW TECHNICAL DOCUMENT How to Configure SSL VPN Portal for Forcepoint NGFW TECHNICAL DOCUMENT Ta Table of Contents Table of Contents TA TABLE OF CONTENTS 1 TABLE OF CONTENTS 1 BACKGROUND 2 CONFIGURATION STEPS 2 Create a SSL

More information

Introduction. The Safe-T Solution

Introduction. The Safe-T Solution Secure Application Access Product Brief Contents Introduction 2 The Safe-T Solution 3 How It Works 3 Capabilities 4 Benefits 5 Feature List 6 6 Introduction As the world becomes much more digital and global,

More information

Securing Access to Network Devices

Securing Access to Network Devices Securing Access to Network s Data Track Technology October, 2003 A corporate information security strategy will not be effective unless IT administrative services are protected through processes that safeguard

More information

CyberP3i Course Module Series

CyberP3i Course Module Series CyberP3i Course Module Series Spring 2017 Designer: Dr. Lixin Wang, Associate Professor Firewall Configuration Firewall Configuration Learning Objectives 1. Be familiar with firewalls and types of firewalls

More information

IBM Tivoli Access Manager for e-business V6.1.1 Implementation

IBM Tivoli Access Manager for e-business V6.1.1 Implementation 000-039 IBM Tivoli Access Manager for e-business V6.1.1 Implementation Version 14.23 Topic 1, Volume A QUESTION NO: 1 What is included in the high level configuration document when WebSEAL clustering must

More information

Policing The Borderless Network: Integrating Web Security

Policing The Borderless Network: Integrating Web Security Policing The Borderless Network: Integrating Web Security Hrvoje Dogan Consulting Systems Engineer, Security March 16, 2012 2011 Cisco and/or its affiliates. All rights reserved. Cisco Public 1 About Cisco

More information

Administering Windows Server 2012 (20411D)

Administering Windows Server 2012 (20411D) Administering Windows Server 2012 (20411D) Overview Get hands-on instruction and practice administering Windows Server 2012, including Windows Server 2012 R2, in this five-day Microsoft Official Course.

More information

CYAN SECURE WEB Installing on Windows

CYAN SECURE WEB Installing on Windows CYAN SECURE WEB September 2009 Applies to: 1.7 and above Table of Contents 1 Introduction... 2 2 Preparation... 2 3 Network Integration... 3 3.1 Out-of-line Deployment... 3 3.2 DMZ Deployment... 3 4 Proxy

More information

PASS4TEST. IT Certification Guaranteed, The Easy Way! We offer free update service for one year

PASS4TEST. IT Certification Guaranteed, The Easy Way!   We offer free update service for one year PASS4TEST IT Certification Guaranteed, The Easy Way! \ http://www.pass4test.com We offer free update service for one year Exam : 1Y0-A04 Title : Gateway 8.1.Enterprise Edition: Administration Vendors :

More information

File services. Domains, DNS DHCP. Server Scripts. Intranet and Extranets. Web services. HNC COMPUTING - Network Concepts

File services. Domains, DNS DHCP. Server Scripts. Intranet and Extranets. Web services. HNC COMPUTING - Network Concepts File services Domains, DNS 1 DHCP Server Scripts Intranet and Extranets Web services HNC COMPUTING - Network Concepts A domain is a logical grouping of networked computers that share a central directory

More information

Web Security. Outline

Web Security. Outline Security CS 161/194-1 Anthony D. Joseph November 21, 2005 s Outline Static and Dynamic Content Firewall review Adding a DMZ Secure Topologies 2 1 Polls How many people have set up a personal web server?

More information

Administering Windows Server 2012 (NI104)

Administering Windows Server 2012 (NI104) Administering Windows Server 2012 (NI104) MOC OD20411D - 40 Hours Overview Get hands-on instruction and practice administering Windows Server 2012, including Windows Server 2012 R2, in this five-day Microsoft

More information

ClearPass Design Scenarios

ClearPass Design Scenarios ClearPass Design Scenarios Austin Hawthorne Feb 26, 2015 Agenda 1. Better user experience and tighter security, is that possible? 2. Employees on Guest Network 3. The headless device dilemma 2 CONFIDENTIAL

More information

Using the Terminal Services Gateway Lesson 10

Using the Terminal Services Gateway Lesson 10 Using the Terminal Services Gateway Lesson 10 Skills Matrix Technology Skill Objective Domain Objective # Deploying a TS Gateway Server Configure Terminal Services Gateway 2.2 Terminal Services (TS) Web

More information

ArcGIS Online A Security, Privacy, and Compliance Overview. Andrea Rosso Michael Young

ArcGIS Online A Security, Privacy, and Compliance Overview. Andrea Rosso Michael Young ArcGIS Online A Security, Privacy, and Compliance Overview Andrea Rosso Michael Young ArcGIS Online A Multi-Tenant System Portal Portal Portal ArcGIS Online Agenda Online Platform Security Deployment Architecture

More information

Object of this document

Object of this document Publish applications using Azure AD Application Proxy It s imperative that I clear what application means in this context. A lot of people are confused application with mobile applications and other applications

More information

SAP API Management Cloud Connector PUBLIC

SAP API Management Cloud Connector PUBLIC SAP API Management Cloud Connector PUBLIC Objectives After completing this unit, you will be able to: - Understand Cloud connector and its value proposition - Call an API accessible through Cloud Connector

More information

EGI-InSPIRE. GridCertLib Shibboleth authentication for X.509 certificates and Grid proxies. Sergio Maffioletti

EGI-InSPIRE. GridCertLib Shibboleth authentication for X.509 certificates and Grid proxies. Sergio Maffioletti EGI-InSPIRE GridCertLib Shibboleth authentication for X.509 certificates and Grid proxies Sergio Maffioletti Grid Computing Competence Centre, University of Zurich http://www.gc3.uzh.ch/

More information

WebADM and OpenOTP are trademarks of RCDevs. All further trademarks are the property of their respective owners.

WebADM and OpenOTP are trademarks of RCDevs. All further trademarks are the property of their respective owners. CONFIGURE PUSH LOGIN WITH OPENOTP The specifications and information in this document are subject to change without notice. Companies, names, and data used in examples herein are fictitious unless otherwise

More information

NGFW Security Management Center

NGFW Security Management Center NGFW Security Management Center Release Notes 6.5.3 Revision A Contents About this release on page 2 System requirements on page 2 Build number and checksums on page 4 Compatibility on page 5 New features

More information

The specifications and information in this document are subject to change without notice. Companies, names, and data used

The specifications and information in this document are subject to change without notice. Companies, names, and data used WEBADM PUBLISHING PROXY The specifications and information in this document are subject to change without notice. Companies, names, and data used in examples herein are fictitious unless otherwise noted.

More information

Vendor: Citrix. Exam Code: 1Y Exam Name: Designing, Deploying and Managing Citrix XenMobile Solutions. Version: Demo

Vendor: Citrix. Exam Code: 1Y Exam Name: Designing, Deploying and Managing Citrix XenMobile Solutions. Version: Demo Vendor: Citrix Exam Code: 1Y0-370 Exam Name: Designing, Deploying and Managing Citrix XenMobile Solutions Version: Demo QUESTION NO: 1 Which connection type is used when WorxWeb for ios is configured to

More information

PASS4TEST 専門 IT 認証試験問題集提供者

PASS4TEST 専門 IT 認証試験問題集提供者 PASS4TEST 専門 IT 認証試験問題集提供者 http://www.pass4test.jp 1 年で無料進級することに提供する Exam : 1Y0-401 Title : Designing Citrix XenDesktop 7.6 Solutions Vendor : Citrix Version : DEMO Get Latest & Valid 1Y0-401 Exam's Question

More information

The Bomgar Appliance in the Network

The Bomgar Appliance in the Network The Bomgar Appliance in the Network The architecture of the Bomgar application environment relies on the Bomgar Appliance as a centralized routing point for all communications between application components.

More information

NGFW Security Management Center

NGFW Security Management Center NGFW Security Management Center Release Notes 6.4.4 Revision A Contents About this release on page 2 System requirements on page 2 Build version on page 3 Compatibility on page 5 New features on page 5

More information

Identify the features of network and client operating systems (Windows, NetWare, Linux, Mac OS)

Identify the features of network and client operating systems (Windows, NetWare, Linux, Mac OS) Course Outline Network+ Duration: 5 days (30 hours) Learning Objectives: Install and configure a network card Define the concepts of network layers Understand and implement the TCP/IP protocol Install

More information

Introduction to ArcGIS Server Architecture and Services. Amr Wahba

Introduction to ArcGIS Server Architecture and Services. Amr Wahba Introduction to ArcGIS Server 10.1 - Architecture and Services Amr Wahba awahba@esri.com Agenda Architecture Features Publishing Security Cloud Powerful GIS capabilities Delivered as Web services To help

More information

Using Your Own Authentication System with ArcGIS Online. Cameron Kroeker and Gary Lee

Using Your Own Authentication System with ArcGIS Online. Cameron Kroeker and Gary Lee Using Your Own Authentication System with ArcGIS Online Cameron Kroeker and Gary Lee Agenda ArcGIS Platform Structure What is SAML? Meet the Players Relationships Are All About Trust What Happens During

More information

Administering Windows Server 2012

Administering Windows Server 2012 Administering Windows Server 2012 20411D; 5 days, Instructor-led Course Description Get hands-on instruction and practice administering Windows Server 2012, including Windows Server 2012 R2, in this five-day

More information

New methods to protect the network. Deeper visibility with Cisco NGFW Next Generation Firewall

New methods to protect the network. Deeper visibility with Cisco NGFW Next Generation Firewall New methods to protect the network. Deeper visibility with Cisco NGFW Next Generation Firewall Claudiu Onisoru, Senior Network Specialist Cisco Connect - 15 May 2014 1 Agenda Frontal Communication: Who

More information

CISNTWK-440. Chapter 5 Network Defenses

CISNTWK-440. Chapter 5 Network Defenses CISNTWK-440 Intro to Network Security Chapter 5 Network Defenses 1 Objectives Explain how to enhance security through network design Define network address translation and network access control List the

More information

Security Provider Integration Kerberos Authentication

Security Provider Integration Kerberos Authentication Security Provider Integration Kerberos Authentication 2017 Bomgar Corporation. All rights reserved worldwide. BOMGAR and the BOMGAR logo are trademarks of Bomgar Corporation; other trademarks shown are

More information

NGFW Security Management Center

NGFW Security Management Center NGFW Security Management Center Release Notes 6.4.3 Revision A Contents About this release on page 2 System requirements on page 2 Build version on page 3 Compatibility on page 4 New features on page 5

More information

Desktop Central Managing Windows Computers in WAN

Desktop Central Managing Windows Computers in WAN Overview ManageEngine Desktop Central is Web-Based windows desktop administration software that helps administrators to effectively manage the desktops from a central point. It provides Software Deployment,

More information

NGFW Security Management Center

NGFW Security Management Center NGFW Security Management Center Release Notes 6.4.0 Revision B Contents About this release on page 2 System requirements on page 2 Build version on page 3 Compatibility on page 4 New features on page 5

More information

Administering Windows Server 2012

Administering Windows Server 2012 Course 20411D: Administering Windows Server 2012 Module 1: Configuring and Troubleshooting Domain Name System This module explains how to configure and troubleshoot DNS, including DNS replication and caching.

More information

KillTest *KIJGT 3WCNKV[ $GVVGT 5GTXKEG Q&A NZZV ]]] QORRZKYZ IUS =K ULLKX LXKK [VJGZK YKX\OIK LUX UTK _KGX

KillTest *KIJGT 3WCNKV[ $GVVGT 5GTXKEG Q&A NZZV ]]] QORRZKYZ IUS =K ULLKX LXKK [VJGZK YKX\OIK LUX UTK _KGX KillTest Q&A Exam : 000-936 Title : IBM Tivoli Access Manager for e-business V6.1 Implementation Version : Demo 1 / 11 1. What is the proper sequence of steps in the client-side certificate authentication

More information

CSC Network Security

CSC Network Security CSC 474 -- Security Topic 9. Firewalls CSC 474 Dr. Peng Ning 1 Outline Overview of Firewalls Filtering Firewalls Proxy Servers CSC 474 Dr. Peng Ning 2 Overview of Firewalls CSC 474 Dr. Peng Ning 3 1 Internet

More information

Troubleshooting and Supporting Windows 7 in the Enterprise

Troubleshooting and Supporting Windows 7 in the Enterprise Course 6293A: Troubleshooting and Supporting Windows 7 in the Enterprise Course Details Course Outline Module 1: Implementing a Troubleshooting Methodology This module describes the steps involved in establishing

More information

Secure Container DME. SecureContainer - DME is available for ios and Android.

Secure Container DME. SecureContainer - DME is available for ios and Android. Secure Container DME Soliton SecureContainer - DME is a remote access solution enabling employees to securely access corporate data using their mobile devices. Corporate e-mail, calendar, to-do s and other

More information

Pre-Installation Checklist v5.0

Pre-Installation Checklist v5.0 Pre-Installation Checklist v5.0 November 2010 Table of Contents Introduction 3 Network infrastructure 4 ShareScan Manager PC 5 Devices 7 ecopy Connectors 8 Network Communication 13 Document Management

More information

NGFW Security Management Center

NGFW Security Management Center NGFW Security Management Center Release Notes 6.4.7 Revision A Contents About this release on page 2 System requirements on page 2 Build version on page 3 Compatibility on page 5 New features on page 5

More information

Check Point Virtual Systems & Identity Awareness

Check Point Virtual Systems & Identity Awareness Check Point Virtual Systems & Identity Awareness Jason Card, Senior Security Consultant, CISSP card@avantec.ch Agenda Check Point Virtual Systems Private Cloud Simplify Security Overview Identity Awareness

More information

Building an Enterprise Infrastructure to Securely Manage Access to Web Applications

Building an Enterprise Infrastructure to Securely Manage Access to Web Applications Building an Enterprise Infrastructure to Securely Manage Access to Web Applications Paul Munsen IT Architect Navistar, Inc. IIT Netsecure 09 March 12, 2009 About Navistar World class commercial truck and

More information

Fundamentals of Windows Server 2008 Network and Applications Infrastructure

Fundamentals of Windows Server 2008 Network and Applications Infrastructure COURSE OVERVIEW This five-day instructor-led course introduces students to network and applications infrastructure concepts and configurations provided by Window Server 2008. Students will be able to acquire

More information

Administering Windows Server 2012

Administering Windows Server 2012 Page 1 of 10 Overview Get hands-on instruction and practice administering Windows Server 2012, including Windows R2, in this five-day Microsoft Official Course. This course is part two in a series of three

More information

NE Administering Windows Server 2012

NE Administering Windows Server 2012 NE-20411 Administering Windows Server 2012 Summary Duration 5 Days Audience IT Professionals Level 200 Technology Windows Server 2012 Delivery Method Instructor-led (Classroom) Training Credits N/A Introduction

More information

White Paper. Fabasoft on Linux - Fabasoft Folio Web Management. Fabasoft Folio 2017 R1 Update Rollup 1

White Paper. Fabasoft on Linux - Fabasoft Folio Web Management. Fabasoft Folio 2017 R1 Update Rollup 1 White Paper Fabasoft on Linux - Fabasoft Folio Web Management Fabasoft Folio 2017 R1 Update Rollup 1 Copyright Fabasoft R&D GmbH, Linz, Austria, 2018. All rights reserved. All hardware and software names

More information

Destiny Library Manager

Destiny Library Manager Destiny Library Manager Setting Up One Search Your teachers and students can take advantage of your school s subscription databases all in one place through Destiny One Search. One Search saves staff and

More information

Web Security Deployment. Ryan Wager Technical Marketing Engineer

Web Security Deployment. Ryan Wager Technical Marketing Engineer Web Security Deployment Ryan Wager Technical Marketing Engineer Agenda Overview Web Security Web Security with Cisco Ironport Web Security Critical Functionalities Places in the Network Authentication

More information

WatchGuard XCS and Outlook Web Access 2013

WatchGuard XCS and Outlook Web Access 2013 WatchGuard XCS and Outlook Web Access 2013 The Secure WebMail proxy provides a highly secure mechanism for accessing Microsoft OWA (Outlook Web Access). OWA uses a very similar interface to Outlook and

More information

User guide NotifySCM Installer

User guide NotifySCM Installer User guide NotifySCM Installer TABLE OF CONTENTS 1 Overview... 3 2 Office 365 Users synchronization... 3 3 Installation... 5 4 Starting the server... 17 2 P a g e 1 OVERVIEW This user guide provides instruction

More information

Cisco AnyConnect Secure Mobility & VDI Demo Guide

Cisco AnyConnect Secure Mobility & VDI Demo Guide Cisco AnyConnect Secure Mobility & VDI Demo Guide (partner version) Overview... 2 Value Proposition... 2 Deployment Scenario... 3 Role Play Demo Script... 5 Demo Equipment Bill of Material... 9 Demo Documentation

More information

Deploying VMware Identity Manager in the DMZ. JULY 2018 VMware Identity Manager 3.2

Deploying VMware Identity Manager in the DMZ. JULY 2018 VMware Identity Manager 3.2 Deploying VMware Identity Manager in the DMZ JULY 2018 VMware Identity Manager 3.2 You can find the most up-to-date technical documentation on the VMware website at: https://docs.vmware.com/ If you have

More information

The Privileged Remote Access Appliance in the Network

The Privileged Remote Access Appliance in the Network The Privileged Remote Access Appliance in the Network The architecture of the BeyondTrust application environment relies on the BeyondTrust Appliance as a centralized routing point for all communications

More information

Chapter Three test. CompTIA Security+ SYO-401: Read each question carefully and select the best answer by circling it.

Chapter Three test. CompTIA Security+ SYO-401: Read each question carefully and select the best answer by circling it. Chapter Three test Name: Period: CompTIA Security+ SYO-401: Read each question carefully and select the best answer by circling it. 1. What protocol does IPv6 use for hardware address resolution? A. ARP

More information

IPv4 Firewall Rule configuration on Cisco SA540 Security Appliance

IPv4 Firewall Rule configuration on Cisco SA540 Security Appliance IPv4 Firewall Rule configuration on Cisco SA540 Security Appliance Objective The objective of this document to explain how to configure IPv4 firewall rules on Cisco SA540 Security Appliance. Firewall provide

More information

Prerequisites CNS-220 Citrix NetScaler Essentials and Traffic Management

Prerequisites CNS-220 Citrix NetScaler Essentials and Traffic Management CNS-221 Citrix NetScaler Unified Gateway Learn the skills required to configure and manage NetScaler Gateway and Unified Gateway features, including how to implement Gateway components including NetScaler

More information

Trusted Login Connector (Hosted SSO)

Trusted Login Connector (Hosted SSO) Trusted Login Connector (Hosted SSO) Table of Contents Summary... 3 Frequently Asked Questions... 3 Architecture... 5 Installation/configuration... 5 2 Summary New functionality allows SelectHR users to

More information

User Directories and Campus Network Authentication - A Wireless Case Study

User Directories and Campus Network Authentication - A Wireless Case Study User Directories and Campus Network Authentication - A Wireless Case Study Sean Convery Identity Engines Kevin Jones Metropolitan Community College Agenda Role-based Access Control About MCC Wireless project

More information

CompTIA Network+ Study Guide Table of Contents

CompTIA Network+ Study Guide Table of Contents CompTIA Network+ Study Guide Table of Contents Course Introduction Table of Contents Getting Started About This Course About CompTIA Certifications Module 1 / Local Area Networks Module 1 / Unit 1 Topologies

More information

This course prepares candidates for the CompTIA Network+ examination (2018 Objectives) N

This course prepares candidates for the CompTIA Network+ examination (2018 Objectives) N CompTIA Network+ (Exam N10-007) Course Description: CompTIA Network+ is the first certification IT professionals specializing in network administration and support should earn. Network+ is aimed at IT

More information

How to open ports in the DSL router firmware version 2.xx and above

How to open ports in the DSL router firmware version 2.xx and above How to open ports in the DSL router firmware version 2.xx and above This example shows how to open port 3389 (which is used by Remote Desktop service) in the DSL router running firmware version 2.xx or

More information

Leverage the Citrix WANScaler Software Client to Increase Application Performance for Mobile Users

Leverage the Citrix WANScaler Software Client to Increase Application Performance for Mobile Users Leverage the Citrix WANScaler Software Client to Increase Application Performance for Mobile Users Daniel Künzli System Engineer ANG Switzerland Citrix Systems International GmbH Specifications and Architecture

More information

Cisco ASA Next-Generation Firewall Services

Cisco ASA Next-Generation Firewall Services Q&A Cisco ASA Next-Generation Firewall Services Q. What are Cisco ASA Next-Generation Firewall Services? A. Cisco ASA Next-Generation Firewall Services are a modular security service that extends the Cisco

More information

EnterpriseLink and LDAP

EnterpriseLink and LDAP Case Requirement A client has an EnterpriseLink application and wishes to utilize their Linux LDAP server to validate Users against, then use the EnterpriseLink feature of pooled logons to the mainframe.

More information

NGFW Security Management Center

NGFW Security Management Center NGFW Security Management Center Release Notes 6.4.1 Revision A Contents About this release on page 2 System requirements on page 2 Build version on page 3 Compatibility on page 4 New features on page 5

More information

Paperspace. Security Primer & Architecture Overview. Business Whitepaper. 20 Jay St. Suite 312 Brooklyn, NY 11201

Paperspace. Security Primer & Architecture Overview. Business Whitepaper. 20 Jay St. Suite 312 Brooklyn, NY 11201 Paperspace Security Primer & Architecture Overview Copyright 2017 Paperspace, Co. All Rights Reserved - 1 - Business Whitepaper Paperspace www.paperspace.com Paperspace Virtual Desktops: A foundation for

More information

Secured Browsing with SmartBrowser

Secured Browsing with SmartBrowser d Below is a brief description of a product subject to the Internet d in sensitive business environments and is named SmartBrowser developed by Aman Group. As well known, threats that rely on the Web browser

More information

Administering Windows Server 2012

Administering Windows Server 2012 Administering Windows Server 2012 Course Details Course Outline Module 1: Configuring and Troubleshooting Domain Name System This module explains how to configure and troubleshoot DNS, including DNS replication

More information

Deploying VMware Identity Manager in the DMZ. SEPT 2018 VMware Identity Manager 3.3

Deploying VMware Identity Manager in the DMZ. SEPT 2018 VMware Identity Manager 3.3 Deploying VMware Identity Manager in the DMZ SEPT 2018 VMware Identity Manager 3.3 You can find the most up-to-date technical documentation on the VMware website at: https://docs.vmware.com/ If you have

More information

Server Installation and Administration Guide

Server Installation and Administration Guide NetApp Connect 5.1 Server Installation and Administration Guide NetApp, Inc. 495 East Java Drive Sunnyvale, CA 94089 U.S. Telephone: +1 (408) 822-6000 Fax: +1 (408) 822-4501 Support telephone: +1 (888)

More information

VMware AirWatch Integration with F5 Guide Enabling secure connections between mobile applications and your backend resources

VMware AirWatch Integration with F5 Guide Enabling secure connections between mobile applications and your backend resources VMware AirWatch Integration with F5 Guide Enabling secure connections between mobile applications and your backend resources Workspace ONE UEM v9.6 Have documentation feedback? Submit a Documentation Feedback

More information

ARCHITECTURAL OVERVIEW REVISED 6 NOVEMBER 2018

ARCHITECTURAL OVERVIEW REVISED 6 NOVEMBER 2018 REVISED 6 NOVEMBER 2018 Table of Contents Architectural Overview Workspace ONE Logical Architecture GUIDE 2 VMware Workspace ONE Cloud-Based Reference Architecture - Architectural Overview Architectural

More information

Trend Micro Incorporated reserves the right to make changes to this document and to the service described herein without notice. Before installing and using the service, review the readme files, release

More information

High Availability Deployment

High Availability Deployment April 18, 2005 Overview Introduction This addendum provides connectivity and configuration task overviews for connecting two M appliances as a high availability (HA) cluster pair. For detailed configuration

More information

The Privileged Access Appliance in the Network

The Privileged Access Appliance in the Network The Privileged Access Appliance in the Network The architecture of the Bomgar application environment relies on the Bomgar Appliance as a centralized routing point for all communications between application

More information

World Skills Competition. Trade 39: IT PC and Network Support. Day 4 Competition. Competitor Name: Country Code:

World Skills Competition. Trade 39: IT PC and Network Support. Day 4 Competition. Competitor Name: Country Code: World Skills Competition Trade 39: IT PC and Network Support Day 4 Competition - Network Security and Management Competitor Name: Country Code: www.worldskills.org, Tel: +31 23 5311071, Fax:+31 23 5316360

More information

Technical Background Information

Technical Background Information Technical Background Information Ueli Kienholz, SWITCH Rolf Gartmann, SWITCH Claude Lecommandeur, EPFL December 2, 2002 2002 SWITCH PAPI Rolf Gartmann, SWITCH Security Group December 2, 2002 2002 SWITCH

More information

PT Activity 5.6.1: Packet Tracer Skills Integration Challenge Topology Diagram

PT Activity 5.6.1: Packet Tracer Skills Integration Challenge Topology Diagram Topology Diagram All contents are Copyright 2008 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 1 of 6 Addressing Table Device Interface IP Address Subnet Mask

More information

Windows Server : Administering Windows Server 2012 R2. Upcoming Dates. Course Description. Course Outline

Windows Server : Administering Windows Server 2012 R2. Upcoming Dates. Course Description. Course Outline Windows Server 2012 20411: Administering Windows Server 2012 R2 Acquire the skills necessary to administrate and implement the core infrastructure services in a Windows Server 2012 R2 environment. Learn

More information

COURSE OUTLINE MOC 20411: ADMINISTERING WINDOWS SERVER 2012 MODULE 1: CONFIGURING AND TROUBLESHOOTING DOMAIN NAME SYSTEM

COURSE OUTLINE MOC 20411: ADMINISTERING WINDOWS SERVER 2012 MODULE 1: CONFIGURING AND TROUBLESHOOTING DOMAIN NAME SYSTEM COURSE OUTLINE MOC 20411: ADMINISTERING WINDOWS SERVER 2012 MODULE 1: CONFIGURING AND TROUBLESHOOTING DOMAIN NAME SYSTEM This module explains how to configure and troubleshoot DNS, including DNS replication

More information

Cisco - ASA Lab Camp v9.0

Cisco - ASA Lab Camp v9.0 Cisco - ASA Lab Camp v9.0 Code: 0007 Lengt h: 5 days URL: View Online Based on our enhanced SASAC v1.0 and SASAA v1.2 courses, this exclusive, lab-based course, provides you with your own set of equipment

More information

G/On. G/On is available for Windows, MacOS and Linux (selected distributions).

G/On. G/On is available for Windows, MacOS and Linux (selected distributions). G/On Soliton G/On is a remote access solution which establishes connections between a remote device and application servers inside an organisations network. A secure gateway is used to separate the remote

More information

Designing a System. We have lots of tools Tools are rarely interesting by themselves Let s design a system... Steven M. Bellovin April 10,

Designing a System. We have lots of tools Tools are rarely interesting by themselves Let s design a system... Steven M. Bellovin April 10, Designing a System We have lots of tools Tools are rarely interesting by themselves Let s design a system... Steven M. Bellovin April 10, 2007 1 Some of Our Tools Encryption Authentication mechanisms Access

More information

NetExtender for SSL-VPN

NetExtender for SSL-VPN NetExtender for SSL-VPN Document Scope This document describes how to plan, design, implement, and manage the NetExtender feature in a SonicWALL SSL-VPN Environment. This document contains the following

More information

Lab Student Lab Orientation

Lab Student Lab Orientation Lab 1.1.1 Student Lab Orientation Objective In this lab, the students will complete the following tasks: Review the lab bundle equipment Understand the security pod topology Understand the pod naming and

More information

The UCOPIA ADvAnCe SOlUTIOn The UCOPIA express SOlUTIOn

The UCOPIA ADvAnCe SOlUTIOn The UCOPIA express SOlUTIOn The UCOPIA advance Solution The UCOPIA Express Solution www.ucopia.com EXPRESS With the proliferation of mobile devices and the increasing trend of BYOD, the network operators are facing increased challenges

More information

Installation Guide. McAfee Web Gateway Cloud Service

Installation Guide. McAfee Web Gateway Cloud Service Installation Guide McAfee Web Gateway Cloud Service COPYRIGHT Copyright 2017 McAfee, LLC TRADEMARK ATTRIBUTIONS McAfee and the McAfee logo, McAfee Active Protection, epolicy Orchestrator, McAfee epo, McAfee

More information

Managing Machines over the Internet with BMC FootPrints Asset Core

Managing Machines over the Internet with BMC FootPrints Asset Core Managing Machines over the Internet with BMC FootPrints Asset Core Customer Requirements: A. I have desktop/servers at multiple sites which do not have a dedicated link to my datacenter, but have access

More information

Installing and Configuring Windows Server 2012

Installing and Configuring Windows Server 2012 Course Code: M20410 Vendor: Microsoft Course Overview Duration: 5 RRP: POA Installing and Configuring Windows Server 2012 Overview Get hands-on instruction and practice installing and configuring Windows

More information

Certified SonicWALL Security Administrator (CSSA) Instructor-led Training

Certified SonicWALL Security Administrator (CSSA) Instructor-led Training Instructor-led Training Comprehensive Services from Your Trusted Security Partner Additional Information Recommended prerequisite for the Certified SonicWALL Security Administrator (CSSA) exam Course Description:

More information

The UCOPIA express solution

The UCOPIA express solution The UCOPIA Solution www.ucopia.com Facilitate a productive environment for your contractors, partners and visitors with guest internet access on your premises. UCOPIA mainly targets small organisations

More information

A Technical Overview of the Lucent Managed Firewall

A Technical Overview of the Lucent Managed Firewall Lucent Managed Version 2.0 A Technical Overview of the Lucent Managed This document provides a technical overview of the Lucent Managed architecture. Key technical features and potential application scenarios

More information

bwsync&share: A cloud solution for academia in the state of Baden-Württemberg

bwsync&share: A cloud solution for academia in the state of Baden-Württemberg bwsync&share: A cloud solution for academia in the state of Baden-Württemberg Nico Schlitter, Alexander Yasnogor Steinbuch Centre for Computing Karlsruhe Institute of Technology 76128 Karlsruhe Nico.Schlitter@kit.edu

More information

Unified Secure Access Beyond VPN

Unified Secure Access Beyond VPN Unified Secure Access Beyond VPN Luboš Klokner F5 Systems Engineer lubos@f5.com +421 908 755152 @lklokner Humans v. Technology F5 Networks, Inc Agenda Introduction General APM Use-Cases APM Use-Cases from

More information

NGFW Security Management Center

NGFW Security Management Center NGFW Security Management Center Release Notes 6.4.8 Revision A Contents About this release on page 2 System requirements on page 2 Build version on page 3 Compatibility on page 5 New features on page 5

More information

Novell Access Manager

Novell Access Manager Setup Guide AUTHORIZED DOCUMENTATION Novell Access Manager 3.1 SP3 February 02, 2011 www.novell.com Novell Access Manager 3.1 SP3 Setup Guide Legal Notices Novell, Inc., makes no representations or warranties

More information

Unified Access Gateway Double DMZ Deployment for Horizon. Technical Note 04 DEC 2018 Unified Access Gateway 3.4

Unified Access Gateway Double DMZ Deployment for Horizon. Technical Note 04 DEC 2018 Unified Access Gateway 3.4 Unified Access Gateway Double DMZ Deployment for Horizon Technical Note 04 DEC 2018 Unified Access Gateway 3.4 Unified Access Gateway Double DMZ Deployment for Horizon You can find the most up-to-date

More information