Entradas

How do I find the preshared key value on an ASA Firewall?

Thanks to:  https://community.cisco.com/ You most likely have the following command enabled: key config-key password-encryption you can remove it by using the no version of the command but you will need the "master passphrase" password that was used to create the encryption to be able to decrypt it. ciscoasa(config)# more system:running-config | in key  key CISCO ciscoasa(config)# key config-key password-encryption New key: ******** Confirm key: ******** ciscoasa(config)# ciscoasa(config)# more system:running-config | in key  key 8 J3z3YkeRt3Ciw/ZIpRu93MGHEMM2 There is no easy way to remove it if you do not have the master key...If you MUST have the aaa key you will need to backup your configuration, issue a write erase, and reload.  Then load your configuration again. --

SP 2010: Find error messages with a Correlation ID token in SharePoint 2010

Imagen
Thanks to:  https://zimmergren.net In SharePoint 2010, you’ve got some new capabilities for error reporting and logs. One of the most noted features for me as a developer is that whenever you bump into an error message – you’ll be presented with a correlation ID token. In this article I will try to explain how you can fetch that token from SharePoint, and also provide a small snippet of code to be able to build your own “Log Searcher Web Part” for your administrators. What is a Correlation ID in SharePoint? In SharePoint 2010, you get a Correlation ID (which is a GUID) attached to your logs/error messages when something happens. This ID can then be used to lookup that specific error from the logs. This Correlation ID is used per request-session in SharePoint 2010, and if you are in the process of requesting some information from SharePoint and bump into some problems along the way – your Correlation ID will be the best starting point for searching for what went wrong alo...

StackWise Virtual on Catalyst 9500

Imagen
Thanks to:  https://www.ciscozine.com/ Similarly to the old  Virtual Switching System (VSS) , the stackwise virtual allows the clustering of  two chassis  together  into a single ,  logical  entity, to allow high  availability ,  scalability ,  management  and  maintenance. This capability enables a  loop-free Layer 2 network  topology, since the StackWise Virtual switches are treated as one logical switch for both access and core switches. The StackWise Virtual switch also  simplifies  the  Layer 3  network topology by  presenting itself as one logical switch , thus reducing the number of routing peers in the network. Components  used in a StackWise virtual configuration: StackWise Virtual link  (red links): it carries data traffic and  in-band control traffic  between two switches. All the frames that are forwarded over the StackWise Virtual link are encaps...

How to restore SYSVOL and NETLOGON Shares On Windows 2012 DC

Thank to: http://itsimple.info If SYSVOL and NETLOGON Share is missing : Click Start , click Run , type regedit, and then click OK . Locate the following subkey in Registry Editor:  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters In the details pane, right-click the SysvolReady flag, and then click Modify . In the Value data box, type 0, and then click OK . Again in the details pane, right-click the SysvolReady flag, and then click Modify . In the Value data box, type 1, and then click OK . Restart the netlogon service. copy the content of the SYSVOL from healthy DC, reboot or restart twice the NETLOGON . You might run into a missing NETLOGON folder only after that. If so, check the folder c:\windows\sysvol\domain   inside you might find a folder called “ NtFrs_PreExisting___See_EventLog “, copy the folders inside it (Policies+Scripts) to to father folder = c:\windows\sysvol\domain . Wait few minute and Restart the net...

CredSSP Encryption Oracle Remediation

Imagen
Thanks to:  https://www.netwoven.com/ INTRODUCTION A remote code execution vulnerability exists in the Credential Security Support Provider protocol (CredSSP). An attacker who successfully exploited this vulnerability could relay user credentials and use them to execute code on the target system. CredSSP is an authentication provider which processes authentication requests for other applications; any application which depends on CredSSP for authentication may be vulnerable to this type of attack. As an example of how an attacker could exploit this vulnerability against Remote Desktop Protocol, the attacker would need to run a specially crafted application and perform a man-in-the-middle attack against a Remote Desktop Protocol session. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. The security update addresses the vulnerability by correcting how Credential Security Support Provider protocol (CredSSP) validate...

Exchange 2010 – “The certificate status could not be determined because the revocation check failed.”

Imagen
Thanks to:  https://www.petenetlive.com/ Problem Seen on Exchange 2010 (with or without service packs) when you access the internet through a proxy server.  Note : Exchange does  NOT  take its proxy settings from Internet Explorer. Solution 1. To prove that the proxy is the problem drop to command line and issue the following command: netsh winhttp show proxy If it says “Direct Access (no proxy server)” and you have a proxy server then that’s your problem. 2. Issue the following command: netsh winhttp set proxy proxy-server=”http={proxy IP}:{port};https={proxy ip}:{port}” bypass-list=”*.YourDomain.com” 3.  Note : If at this point it all goes wrong (If you get it wrong, then the Exchange Management Console wont open! test it to make sure). To revert back to “no proxy”, issue the following command: netsh winhttp set proxy proxy-server=”http={proxy IP}:{port};https={proxy ip}:{port}” bypass-list=”*.YourDomain.com” You only do th...

Server (HP) not reachable on network “Port was disabled because a pause flood was detected” .

Thanks to: https://winteladmin.com/ error: Port enc0:iobay1:d3 pause-flood detected and automatically disabled Host was not reachable on network. When checked on ILO server is up and running. When I try to ping the server its unresponsive.Host is a blade server, hence suspected an issue with the network module. Therefore, connected virtual connect. Found one of the virtual connect module was degraded. When analysed the HP Virtual connect found an error message stating “Port was disabled because a pause flood was detected” Further to this when validated the server port assigned to the bay1/bay2 found the status “Not Linked/Pause Flood Detected”. It confirms the issue was caused by pause Flood. In some cases, a flex-10 port can enter into disabled state due to the triggering of “pause-flood”, or network-loop. You can confirm the same port status using Virtual Connect Manager CLI. Connect to Virtual connect using SSH and Execute the below command: Show port-protect This woul...