16

Unfortunately AWS has been severely neglecting meaningful IPv6 support. Their "solution", if you can call it that, is to throw a non-VPC ELB in front of your application. For many reasons that is a non-tenable solution for many use cases. As a stopgap fix, the tactic I've seen used by several organizations is to stand up an IPv6-capable VPS with another ...


12

If you are using self-signed ssl then,While generating self-signed ssl certificate in server side,generate identity.p12 certificate and this certificate you need to use in identity section of IPCU. These few lines you can use to generate the idendtity.p12 //Creating the device Identity key and certificate request openssl genrsa 2048 > identity.key ...


7

You can create IPv6 records for your ELB by prepending ipv6. to your ELB's public hostname. Hostnames and IPs redacted due to it being a customer environment - this is in the eu-west-1 region in a non-default VPC. craig@zeus:~$ dig AAAA ipv6.blah-0000000000.eu-west-1.elb.amazonaws.com +short 2a01:xxx:3::xxx:3314 2a01:xxx:3::xxx:ff14 2a01:xxx:3::xxx:7f20 ...


4

It's not possible. The way to solve this problem is with a layer on top of the TCP layer that provides the semantics you need. This layer would have to add an identifier to each message, implement message acknowledgements, re-establish the TCP connection if it broken, and re-send all unacknowledged messages.


4

man tcp - look for tcp_retries[1,2] for Linux machines. I have no idea what to do for Android and given Apples attitude to system-level tweaking there is probably absolutely no way to do this on iOS except when you jailbreak. TCP socket timeouts put aside, most applications will implement their own timeouts which are probably considerably shorter than the ...


4

AirWatch has an MS Exchange client for iOS and Android. They support encryption and have a number of other security features as well. http://www.air-watch.com/solutions/apple-ios


4

Apple apparently made sure Apple TVs don't work with unicast DNS-SD as "a concession they made to content providers and that no amount of DNS records or search domains would allow the Apple TV to be contacted/used from another network." So you're out of luck, unfortunately.


4

I've gotten this to work, but the method wasn't pretty. Because the multicast address for airplay is subnet local -only- it can't be propagated as-is by a standard router. I ended up setting up Avahi on a Linux vm with interfaces into each required subnet. Avahi was, in turn, configured for service reflection (enable-reflector=yes). This allows the ...


4

The data you want to cache isn't meant to be cached. It's specific to the user(s) who are downloading them. (Caching paid apps as they're downloaded would also make a great way to steal them, as well.) This is why the origin server is sending headers like Cache-Control: private or no-cache along with it, to specifically instruct downstream caches like your ...


4

To announce a printer for Android's Mopria-Print-Service via Bonjour use: bonjour-service-type: _ipp._tcp txt-record pdl: one or more of these pdls image/pwg-raster application/PCLm application/pdf txt-record ty: must exist, e.g. CUPS txt-record rp: the appropriate IPP-URI-Path (cups-printer-name) (code geeks may look into mopria/wfds java source code) ...


3

In us-east I use an IPv6 tunnel broker to provide an IPv6 tunnel which allows the instance to be addressed directly using an IPv6 address. Since the tunnel broker's point of presence is cross-connected to Amazon locally, this adds only about 1ms of latency. The down side is that, to get IPv6 to other instances in the subnet, you have to route it yourself (e....


3

Came across an interesting article (published 1 December 2016). https://aws.amazon.com/about-aws/whats-new/2016/12/announcing-internet-protocol-version-6-support-for-ec2-instances-in-amazon-virtual-private-cloud/ You can enable IPv6 on VPC's in the "Ohio" region.


3

There is certainly no way built in to Activesync as this covers a broad spectrum of manufacturers using Activesync and does not include vendor-specific options or software policies. Also, having looked through the iPhone configuration utility, I'm not sure Apple provide a workaround either. Seeing as nowadays from iOS 5 and up a connection to itunes is not ...


3

Take a look into Juniper's MAG or SA series gateways. They're not that expensive, have an iPad/Iphone/Droid client, and can authenticate against certificates, users, LDAP, whatever. You can very strictly control access. The "methods" you describe are merely authentication mechanisms, and those can be used in conjunction with such a solution, or a PPTP vpn, ...


3

Many vendors offer iPad clients for their VPN solutions, including OpenVPN. These can be downloaded from the App Store. You'll have to weigh the costs/benefits of each yourself, though. Once you have a client connecting to a VPN server in your network, it is trivial to disable an existing account. Specific instructions for how vary by vendor. Edit: ...


3

An alternative would be to set up the community edition of Zarafa and only use it for calendaring. You'd either access your calendars with your iPhones or through WebAccess/WebApp (both are web-based clients for Zarafa).


3

listen-addr should not be the same as local ip. listen-addr - is the physical address of the host machine connecting it to the LAN/WAN local ip - is the virtual address of the host machine for the tunnel interfacing with the virtual network setting the two the same is probably the root of your tunnel issues,


3

Mac's do not have viruses is a load of bull. They are equally susceptible for viruses as a Windows computer. The only reason there weren't a lot of viruses around was because they went undetected or because of the small marketshare of Mac devices. This has changed! Also check security stackexchange If they use their own NAT by using the WiFi of a third Mac ...


2

One useful thing to do at this point is to ask yourself the following questions: What these machines are doing on your network[who put them there, what are they doing with them?] What services they need to access [internet? network shares? bespoke accounting intranet app?] What level of service you are required to provide to these machines [Which has a ...


2

I haven't found official confirmation that Mac OS X doesn't support PEAP-EAP-MSCHAPv2, but I can't get it to work either (Windows SBS 2003 R2 and L2TP-over-ESP with a Mac OS X 10.8 client here). I'm not even seeing the login attempts in the IAS log file. (The Security Event Log is full of all kinds of stuff, so I haven't read through it very closely.) I ...


2

Put CloudFlare in front of your application. They will accept requests on IP6 but route traffic to your IP4 ELB.


2

All MDM traffic goes over the Apple Push Notification Service. In particular, to get iOS devices (and Macs!) to be able to receive from APN, they must be able to make outgoing connections to TCP port 5223. You can allow outgoing traffic for this destination port to pass without being redirected to the captive portal, and then iOS devices should be able to ...


2

Apparently there seems no such possiblity. In the official apple profile manager help site you can have a look at the list of settings available to configure with Profile manager. They are listed under Configuration profile reference in various categories. As far as I can see, there is no such option available. The full list can be seen here: https://...


2

RADIUS Accounting in the eap-radius plugin does not require XAuth authentication. It actually works with any kind of authentication, via RADIUS or not, as long as the client requests a virtual IP address (for IKEv2 even this requirement can be disabled). With some IKEv1 clients there are some issues in case of reauthentication, though (see issue #937 and ...


1

Enter device serial number into DEP at deploy.apple.com (You only have to do this once in the device's life). In Meraki, navigate to "SystemsManager>MDM>DEP". Your device should have appeared automatically. In Meraki>MDM>DEP, select the check-box next to your desired device and then click "Assign Settings" at the top of the device list (Settings are ...


1

I should read app's description on iTunes. I only had to add setenv CLIENT_CERT 0 to my client.ovpn file.


1

Using the host-name to match. Users could change it, on Android, Settings > Developer Options > Device host-name. But I am pretty sure that 90% of you users leave that setting alone. iPhone and iPad class "Android" { match if substring(option host-name,0,7) = "Android"; } class "iPhone" { match if substring(option host-name,0,6) = "iPhone"; } class "...


1

An Android phone here sent similar vendor ID: Option: (t=60,l=52) Vendor class identifier = "dhcpcd-5.2.10:Linux-3.0.16-ge733189:armv7l:shooter_u" However an iPhone device sent nothing beyond its MAC address and hostname. The same was true of a Nokia Symbian device (E71). My sample of three devices suggests that only Android devices send anything useful. ...


1

Check out Scheduler (http://itunes.apple.com/us/app/scheduler-by-superconnect/id546857260?ls=1&mt=8), it allows you to find common open meeting times and schedule directly through your Exchange account on iOS.


1

Thanks @mailq. It turns out that in addition to timestamp being at the beginning of the message filename, courier also looks at the modification timestamp of the file itself. I had to set that to the received timestamp as well. Here's a script that will, given a bunch of messages, copy them to an output directory after rewriting the filename and the ...


Only top voted, non community-wiki answers of a minimum length are eligible