Skip to main content
Share Your Experience: Take the 2024 Developer Survey
4 votes
Accepted

What's the difference between RED and VPN?

"Remote Ethernet Device" is a Sophos marketing term for their (slave/remote-site) VPN appliances. https://docs.sophos.com/nsg/sophos-firewall/17.5/Help/en-us/webhelp/onlinehelp/glossentries/...
Zac67's user avatar
  • 84.8k
3 votes
Accepted

MAC Authentication using RADIUS with redundant links to hosts

Before we get to the radius part, a comment about this: And since the these links going to both switches are having the same MAC Be sure to understand how your host handles MAC addresses when ...
Marc 'netztier' Luethi's user avatar
2 votes
Accepted

DH groups support for isakmp policy

You should pick the highest group number that both devices have in common. The strength of the key doesn't matter if both ends of the tunnel can't use it.
Ron Trunk's user avatar
  • 67.6k
2 votes

enable https on Dell Networking N1548P

The log message points in the right direction - you first need to generate key pairs on the switch: console(config)#crypto key generate dsa console(config)#crypto key generate rsa console(config)#ip ...
Zac67's user avatar
  • 84.8k
1 vote

Difference between Zero Trust Architecture and VPN + MitM Access Rights Management at Gateway

Don't forget about all your IOT/OT devices that cannot accept a vendor ZTNA client when working on this framework. There are ways to create micro-segmentation of the LAN in a campus environment to ...
Dan Kennison's user avatar
1 vote

Why is IPsec transport mode "vulnerable" for not having integrity of variable fields? Why is this so important?

In transport mode, only the payload is encrypted. The header is suspect to manipulation unless the authentication header (AH) option is used. AH protects against manipulating the immutable fields and ...
Zac67's user avatar
  • 84.8k
1 vote
Accepted

juniper-security answer

Term 1 logs all traffic from 10/8, next term means evaluation of firewall filter rules continues. Term 2 rejects all traffic. So traffic gets rejected.
Teun Vink's user avatar
  • 17.4k
1 vote

Scenarios in which a host (e.g. Debian) would update its ARP table

For examples 1 and 2, the host would update the ARP table. Since in ARP requests the target is unknown, there is nothing to update. So nothing happens in examples 3 and 4. You can read more in RFC ...
Ron Trunk's user avatar
  • 67.6k
1 vote
Accepted

How can we use "source port randomization" in BGP?

Asking such a question, you should summarize the essence of the linked paper - few potential responders are likely to click the link and skim the paper. The paper seems to be about mitigating a brute-...
Zac67's user avatar
  • 84.8k
1 vote

How can we use "source port randomization" in BGP?

'We' can only change the default port number for any given service if the organization who makes the service software allows a configuration to do so. So if your router has the option to configure the ...
FrameHowitzer's user avatar
1 vote

Wifi air encription

Yes. That's the key drawback to a shared password. It's only "secure" by who you tell. From there it's not much of a secret at all. (there are numerous programs that will read the ...
Ricky's user avatar
  • 32.2k

Only top scored, non community-wiki answers of a minimum length are eligible