Hospitable IT

In the third post of this series, we configure our Graylog server to use Active Directory as an external authentication source

This post covers securing a Graylog server using SSL/TLS.

I have recently been involved in some security audit work and found myself having to replace the self signed SSL certificates used by the secure HTTP service on a number of Cisco 3850 switches. It was a bit fiddly so I thought it deserved a post to cover the steps I went through.

While upgrading the Firmware on a Cisco UCS C Series Server today I noticed that the Storage Array was in a degraded state but the IS Operations team had not received any alerts. There wasn’t a suitable PRTG sensor available so I wrote one!

A client recently needed to be able to use PRTG to monitor the state of an IPSec VPN Tunnel that was terminated on their Palo Alto Firewall array. Palo Alto firewalls have a very useful REST API so I was able to modify a Power Shell script that I had created previously to get the job done.

Having an intelligent, scalable and easily searchable consolidation point for log files is a very useful capability. Graylog is an open source project that is able to ingest logs from a wide variety of sources and provides very useful visualisation, processing and alerting capabilities. This post will go through the details of how to install a single server instance of Graylog 2.3 onto Ubuntu 16.04.

I was recently tasked with changing the Master Key at a client site that had a pair of Palo Alto firewalls arranged in an active/passive HA pair. Unfortunately the Palo Alto documentation I consulted neglected to mention a rather important step and I ended up snotting the passive firewall. This post details the correct procedure for changing the Master Key on an active/passive HA pair of Palo Alto firewalls.

A quick post on how to define a static IP address and static persistent routes on a Raspberry Pi running Raspbian Jessie.

There is a lot of literature available on configuring VXLANs using MP-BGP EVPN but they tend to focus on large multi pod service provider type topologies with lots of moving parts. This post covers a very simple DCI configuration for a two site topology using ingress replication and a collapsed leaf and spine.