Over the last couple of years I have gathered the number of new job postings for particular jobs advertised on Seek. Here’s the results.
Tag: Cisco
Permanent link to this article: https://crypt.gen.nz/2018/11/19/when-is-the-best-time-of-year-to-get-a-security-job-in-auckland/
Using Ansible for Automated Network Testing
The problem with making changes to any decent-sized network, which is running a routing protocol such as OSPF, is that in order to fully verify the change you will need to log into every device in the network and verify that your change has worked. This post shows how Ansible can be used to perform …
Permanent link to this article: https://crypt.gen.nz/2017/11/26/using-ansible-for-automated-network-testing/
ciscoios-acl – A Fail2ban Module for Managing Cisco IOS ACLs
I’ve been using fail2ban to protect a number of services from external attacks. The software works well, but what I wanted to do is to have fail2ban update an ACL on a Cisco IOS router rather then the IPtables on the host itself. Here’s the code and some tips on setting it up.
Permanent link to this article: https://crypt.gen.nz/2017/09/20/ciscoios-acl-a-fail2ban-module-for-managing-cisco-ios-acls/
Dual Stack Policy Rules on Cisco IOS Zone-Based Firewall
The Cisco Zone-based firewall was derived from the old “firewall feature set” and allows the administrator to define firewall rules based on zones, where each zone may contain one or more logical interfaces. Using Cisco’s zone-based firewall isn’t as easy as many other solutions (e.g. Juniper SRX, Cisco ASA), and recently I needed to configure …
Permanent link to this article: https://crypt.gen.nz/2017/09/09/dual-stack-policy-rules-on-cisco-ios-zone-based-firewall/
Cisco ASA 5505 – Dual Internet Connections with a Base Licence
The client’s requirements were simple: they had an existing Cisco ASA 5505 with a base and unlimited users licence connected to the Internet with a PPPoE interface over ADSL. They wanted to add more bandwidth and redundancy so decided to add an additional 100mbps fibre link. Is it possible? Read on …
Permanent link to this article: https://crypt.gen.nz/2017/08/01/cisco-asa-5505-dual-internet-connections-with-a-base-licence/
Transparent Web Proxying with Cisco, Squid, and WCCP
I’ve re-published an old article on performing transparent web proxying with Cisco’s WCCP protocol and Squid. Read more here.
Permanent link to this article: https://crypt.gen.nz/2017/06/12/transparent-web-proxying-with-cisco-squid-and-wccp/