Comments for Defensive Depth Consulting http://defensivedepth.com Developing Defense in Depth I.T. Security Solutions since before Stuxnet Sat, 07 Apr 2012 16:43:00 +0000 hourly 1 http://wordpress.org/?v=3.3.1 Comment on Passed the GIAC GCIA Exam… by Josh http://defensivedepth.com/2011/12/passed-the-giac-gcia-exam/#comment-61035 Josh Sat, 07 Apr 2012 16:43:00 +0000 http://defensivedepth.com/?p=509#comment-61035 @Iman If you dont have access to SANS materials, I would suggest taking a look here at the bulleted list of topics that are covered: http://www.giac.org/certification/certified-intrusion-analyst-gcia Take each area, and do make sure you are very familiar with it. For instance: "DNS - The candidate will demonstrate a thorough understanding of how DNS works for both legitimate and malicious purposes." Start out on the Wikipedia DNS article, and then read the sources for DNS. Google "DNS Attacks" etc Setup you own DNS server Windows or Linux. etc. Hope that helps. -Josh @Iman

If you dont have access to SANS materials, I would suggest taking a look here at the bulleted list of topics that are covered: http://www.giac.org/certification/certified-intrusion-analyst-gcia

Take each area, and do make sure you are very familiar with it. For instance:

“DNS – The candidate will demonstrate a thorough understanding of how DNS works for both legitimate and malicious purposes.”

Start out on the Wikipedia DNS article, and then read the sources for DNS. Google “DNS Attacks” etc Setup you own DNS server Windows or Linux. etc.

Hope that helps.

-Josh

]]> Comment on pfSense 2 Cookbook: A Technical Review by Josh http://defensivedepth.com/2011/04/pfsense-2-cookbook-a-technical-review/#comment-61034 Josh Sat, 07 Apr 2012 16:36:02 +0000 http://defensivedepth.com/?p=463#comment-61034 Thanks for your comment Alex. The post you are referring to is here: http://forum.pfsense.org/index.php?topic=35736.0 My response: "I was one of the technical reviewers of this book--I was asked to review it not only because of my background with pfsense (I run it in production, and have blogged about it), but my network security background also.... This was my first time being the technical editor of a book, and I have to say that I am also a little disappointed with the outcome, as it seems that alot of my corrections & suggestions didn't seem to make it to the final product. I also commented to packt that I was disappointed that they seemed to be trying to meet there page quota by throwing in random screenshots. -Josh" Thanks for your comment Alex. The post you are referring to is here: http://forum.pfsense.org/index.php?topic=35736.0

My response:

“I was one of the technical reviewers of this book–I was asked to review it not only because of my background with pfsense (I run it in production, and have blogged about it), but my network security background also….

This was my first time being the technical editor of a book, and I have to say that I am also a little disappointed with the outcome, as it seems that alot of my corrections & suggestions didn’t seem to make it to the final product. I also commented to packt that I was disappointed that they seemed to be trying to meet there page quota by throwing in random screenshots.

-Josh”

]]> Comment on Building A Firewall: pfSense on an ALIX 2D3 by Josh http://defensivedepth.com/2009/04/building-a-firewall-pfsense-on-an-alix-2d3/#comment-61033 Josh Sat, 07 Apr 2012 16:32:40 +0000 http://tothelasttribe.com/blog/?p=126#comment-61033 Thanks David for letting me know. I have fixed it. Thanks David for letting me know.

I have fixed it.

]]> Comment on Websense Policy Server Install & ~High Latency by Chris http://defensivedepth.com/2011/05/websense-policy-server-install-high-latency/#comment-60840 Chris Fri, 06 Apr 2012 22:34:50 +0000 http://defensivedepth.com/?p=460#comment-60840 (After editing websense.ini in the bin directory on the Policy Server and changing the port to an unused port). (After editing websense.ini in the bin directory on the Policy Server and changing the port to an unused port).

]]> Comment on Websense Policy Server Install & ~High Latency by Chris http://defensivedepth.com/2011/05/websense-policy-server-install-high-latency/#comment-60839 Chris Fri, 06 Apr 2012 22:33:47 +0000 http://defensivedepth.com/?p=460#comment-60839 I got this error message when I was installing the policy server on a domain controller running DNS. dns.exe was waiting on the port that Websense Policy Server was trying to use (UDP/55806) and was able to start the Websense Policy Server after I used your instructions to install the service manually. I got this error message when I was installing the policy server on a domain controller running DNS. dns.exe was waiting on the port that Websense Policy Server was trying to use (UDP/55806) and was able to start the Websense Policy Server after I used your instructions to install the service manually.

]]> Comment on Passed the GIAC GCIA Exam… by Iman Khosravi http://defensivedepth.com/2011/12/passed-the-giac-gcia-exam/#comment-56803 Iman Khosravi Wed, 14 Mar 2012 21:48:21 +0000 http://defensivedepth.com/?p=509#comment-56803 Hi First of all i know its late but congratulation for passing GCIA!. hope to see your GCIA Gold. i studying for GCIA exam,i just wondering if you can help me finding good resources for the exam. i don't have access to sans materials for GCIA, hope you can introduce me another third party resources. Thanks in Advance Iman Hi
First of all i know its late but congratulation for passing GCIA!. hope to see your GCIA Gold.
i studying for GCIA exam,i just wondering if you can help me finding good resources for the exam.
i don’t have access to sans materials for GCIA, hope you can introduce me another third party resources.
Thanks in Advance
Iman

]]> Comment on Building A Firewall: pfSense on an ALIX 2D3 by David http://defensivedepth.com/2009/04/building-a-firewall-pfsense-on-an-alix-2d3/#comment-54634 David Thu, 01 Mar 2012 14:29:59 +0000 http://tothelasttribe.com/blog/?p=126#comment-54634 Hi there, nice guide! I'd like to read it, but the images in your post seem to be missing. Hi there, nice guide! I’d like to read it, but the images in your post seem to be missing.

]]> Comment on pfSense 2 Cookbook: A Technical Review by alex http://defensivedepth.com/2011/04/pfsense-2-cookbook-a-technical-review/#comment-37115 alex Wed, 14 Dec 2011 15:39:12 +0000 http://defensivedepth.com/?p=463#comment-37115 Seems on the pfsense board this book is not receiving very positive reviews for accuracy. Has this been addressed? Are there updates to fix the errors? The official pfsense book is still in the works and I am looking for something to fill the gap. "This book is about what I would expect for something written by someone who has no involvement with the project, and technical reviewed by people who have minimal experience with the project. The author and all the reviewers seem to have solid experience and qualifications, just not the level of expertise with pfSense and the amount of knowledge of its development needed to write or properly technical review a really well done book. Some of the features are described completely wrong, it lists at least one feature that doesn't actually exist (wasn't finished, was removed months ago), it shows examples that simply won't work, and throws in a whole lot of screenshots of various things with accompanying description that's frequently little or nothing more than paraphrasing the description in the GUI (see the sample chapter for instance). " Seems on the pfsense board this book is not receiving very positive reviews for accuracy. Has this been addressed? Are there updates to fix the errors? The official pfsense book is still in the works and I am looking for something to fill the gap.

“This book is about what I would expect for something written by someone who has no involvement with the project, and technical reviewed by people who have minimal experience with the project. The author and all the reviewers seem to have solid experience and qualifications, just not the level of expertise with pfSense and the amount of knowledge of its development needed to write or properly technical review a really well done book. Some of the features are described completely wrong, it lists at least one feature that doesn’t actually exist (wasn’t finished, was removed months ago), it shows examples that simply won’t work, and throws in a whole lot of screenshots of various things with accompanying description that’s frequently little or nothing more than paraphrasing the description in the GUI (see the sample chapter for instance). “

]]> Comment on Building A Firewall: pfSense on an ALIX 2D3 by Josiah Ritchie http://defensivedepth.com/2009/04/building-a-firewall-pfsense-on-an-alix-2d3/#comment-24094 Josiah Ritchie Sun, 02 Oct 2011 19:30:26 +0000 http://tothelasttribe.com/blog/?p=126#comment-24094 They are legit and good people, but they aren't selling their LX series anymore due to the amount of support required from people that didn't know how to use a serial port or something like that. I just ordered my first parts to build one myself. It's basically the same thing you'll build on your own, plus you get choice of colors, wireless cards and things like that. It's cool. They are legit and good people, but they aren’t selling their LX series anymore due to the amount of support required from people that didn’t know how to use a serial port or something like that. I just ordered my first parts to build one myself. It’s basically the same thing you’ll build on your own, plus you get choice of colors, wireless cards and things like that. It’s cool.

]]> Comment on Building A Firewall: pfSense on an ALIX 2D3 by woo http://defensivedepth.com/2009/04/building-a-firewall-pfsense-on-an-alix-2d3/#comment-24088 woo Sun, 02 Oct 2011 17:31:21 +0000 http://tothelasttribe.com/blog/?p=126#comment-24088 This tutorial is still valid if you want to build your own pfSense router with an ALIX board. I just followed these instructions after I bought an ALIX board from ebay. Installed pfSense 1.2.3, and shortly after that I upgraded pfSense to version 2.0. BTW, my ALIX board BIOS was already at the recommended version 0.99h, but I had to check any way. Thanks for this very useful post. This tutorial is still valid if you want to build your own pfSense router with an ALIX board. I just followed these instructions after I bought an ALIX board from ebay. Installed pfSense 1.2.3, and shortly after that I upgraded pfSense to version 2.0.

BTW, my ALIX board BIOS was already at the recommended version 0.99h, but I had to check any way.

Thanks for this very useful post.

]]>