Blog

How to add an ESA’s DKIM Signature to a DNS TXT Record

Hopefully, this post will help you save a lot of time when trying to add a DomainKeys Identified Mail (DKIM) signature to a Windows server. The motivation for this post is simply because I spent more than enough time trying…

Configuring D-VTI and S-VTI for Hub & Spoke Deployments

In this post, we're going to configure D-VTI and S-VTI between two CSR1000v routers to demonstrate hub and spoke deployments. The two devices used as shown in the topology below are R9 and R10. R9 will act as the hub…

Configuring IPSec Site-to-Site VPN’s using IOS-XE as a CA Server

In this post, we're going to configure an IPSec site-to-site VPN with two CSR1000v routers. The authentication between the two routers will be performed using digital certificates issued from a separate Cisco CSR1000v router which is acting as a CA…

Configuring FlexVPN Point-to-Point IKEv2 S-VTI with PKI Authentication

In the last post, we explored how to configure FlexVPN point-to-point IKEv2 S-VTI's with preshared keys. In this post, we will do the same but this time using another CSR1000v acting as a CA server. This will allow us to…

Configuring FlexVPN Point-to-Point IKEv2 S-VTI

In this article, we're going to configure a point-to-point IKEv2 Static Virtual Interface (S-VTI) between two Cisco CSR1000v routers using pre-shared keys as the authentication method. To demonstrate this, we're going to use part of my lab topology as shown…

All Things Cyber Security – A Twitter Community

Twitter has recently added a new feature that allows you to join and participate in communities. I have therefore created a new community called 'All Things Cyber Security' where like-minded individuals can share and discuss cyber security topics. Whether you're…

Duo 2FA for Checkpoint RA VPN/Mobile Access

In this article, we are going to configure Checkpoint Mobile Access with Duo two-factor authentication to further enhance the security of remote access VPN users. We will walk through the configuration steps on a newly installed Checkpoint firewall and test…