We all know what happened last Friday (19.07.2023). “Crowdstrikers” had a terrible day. What are my thoughts about that situation? Of course, it is obvious that some team at CRWD missed something, and the testing phase wasn’t good enough. Mistakes happen, and this one had a really big impact. I don’t want to blame the… Read More »CRWD fuck up, how to prevent it
Generally, Palo Alto Networks’ next-generation firewalls are quite flexible and granular devices. You can do a lot in terms of security to reduce the attack surface, and more. They lack some advanced networking features, but in my opinion, this is understandable since they were designed as security devices, not networking devices. GlobalProtect is a remote… Read More »Palo Alto Netoworks GlobalProtect capabilities
Advanced network security is a standard nowadays for firewalls. Essentially, we can analyze allowed traffic for threats, malicious URLs, and more. Is there any way to trick the firewall and bypass access policies? Unfortunately, yes—if you forget to tighten your access policies. For demonstration purposes, I have configured my lab to block access to Facebook.… Read More »How to trick firewall and bypass protections?
Some time ago, I described in a blog post the history of some interesting things. I’m working in the systems integrators environment for more than 12 years, so I have many more such unexpected stories. Let’s elaborate on the next one. Expect the Unexpected – Palo Alto Networks Logging Capabilities A Customer had an HA… Read More »Expect unexpected #2