290 reputation
319
bio website
location London, United Kingdom
age 29
visits member for 5 years, 3 months
seen yesterday

Security consultant for a Big 4 professional services firm.


1d
comment Snort not sending alert log file to syslog server?
If you specify . /var/log/everything.log, will it record messages to the local syslog instance?
1d
answered Forwarding traffic from one virtual interface to another
1d
accepted How to avoid hairpin VPN on cisco
1d
asked ASA/AnyConnect will only allow 53/udp to the DNS servers listed in the profile
Sep
15
comment AnyConnect certificate/CA pinning on Cisco ASA 5510
using client-certificate authentication is a half-way house: clients could still establish an insecure tunnel, but this tunnel could not be relayed to the real vpn server. It also forces someone to do the whole cert management which can be painful.. :)
Sep
9
comment AnyConnect certificate/CA pinning on Cisco ASA 5510
AnyConnect to the best of my knoweldge relies on windows builtin trusted root cert store. Which means that in order to force it use only "my" CA, I'd have to kill the cert store. Seems such a basic feature - trust my own CA only, but alas I can't find that it exists.
Aug
9
revised Android to openswan/xl2tpd/pppd error: result_code_avp: avp is incorrect size. 8 < 10
added 68 characters in body
Aug
9
asked Android to openswan/xl2tpd/pppd error: result_code_avp: avp is incorrect size. 8 < 10
Aug
4
awarded  Popular Question
Jul
8
answered sshd logging attempts to login without a private key
Jul
2
awarded  Curious
Jun
24
awarded  Popular Question
May
17
awarded  Popular Question
May
6
asked AnyConnect certificate/CA pinning on Cisco ASA 5510
Apr
7
asked How to avoid hairpin VPN on cisco
Mar
12
awarded  Popular Question
Feb
15
asked BCC every incoming and outgoing e-mail in Microsoft Exchange
Jan
30
awarded  Popular Question
Nov
26
comment Get a list of missing hotfixes for windows
@john-homer Not everything has a WSUS attached to it. Think of stand-alone installations.
Nov
26
asked AnyConnect certificate/CA restriction or pinning