Nugget Post : Excellent article re web security

Even though the article focuses on ruby, it is an excellent all round security article that highlights web application vulnerabilities and countermeasures. All in all, every developer and pentester should read, regardless of the language they develop in: http://guides.rubyonrails.org/security.html

Lessons learned : Global Protect + User ID w/ Palo Alto Networks firewall

Scenario : A palo alto firewall has been successfully setup to use global protect, along with LDAP authentication. Also, USER-ID has been setup internally,with firewall policies written to include username / groups. This allows the firewall administrator to deploy consistent firewall policies to both internal and VPN users, based on active directory groups Problem: After a … Continue reading Lessons learned : Global Protect + User ID w/ Palo Alto Networks firewall