Security

Compliance through Security Information and Event Management, Log Management, and Network Behavioral Analysis

34 Topics
90 Replies

abechir New Member

802.1X

Question

I want to do 802.1x. I have an Enterasys Switch, Windows Server 2012, Netsight and the NAC Appliance. I can not find a complete documentation that shows me the configuration of each device to be able to do the 802.1X. Appreciate the communities help.

udinfic New Member

Recovery Password Router Brocade MLXe-4

Question

Our Office had Router Brocade MLXe-4. i tried to change old password on Router Brocade MLXe-4. After i tried some command line used ssh, i am done changing old password on Router Brocade MLXe-4. but after i had changed, i cannot login on Router Brocade MLXe-4 used new password and old password. Pl...

Moses64 New Member

Extreme Control Assessment Agent

Question

I need to list all of the devices connected via the NAC assessment agent to a specific assessment server. I've checked the web interface, but no go. Any help would be greatly appreciated. Thank you!

Wishmaster84 New Member

Extreme Control always hits default catch-all rule

Question

We have setup Extreme Control using both 802.1X authentication and MAC authentication. Everything is working fine, however our 802.1X authentications also hit the default catch-all rule on MAC authentication. This is to be expected, that's why we created a rule in front of it configured for only MAC...

Peter Participator

Extreme Control Appliance as accounting proxy for sso

Question

Hello, is it possible to use control appliance/engine as accounting proxy for sso on firewalls? situation: Control appliance/engine is set as radius & accounting server. We like to forward accounting information to firewall for using SSO and authentication based policy on firewall. Is this possib...

Tom Gavin New Member

Permit specific MAC address per port

I am trying to figure out how to enable port security on Extreme Summit 300-24 switches. Cisco provides this as a configurable feature. I don't believe Extreme has a comparable feature so I have been trying to use access lists to perform the same basic function. I have no problem creating the necess...

Marlon New Member

how to join NAC in a domain

Hi, how can i join the NAC in a domain? Thanks!

Pierre Demassey New Member

Does NAC have the capability to identify company issued devices by the certificate installed on them and can NAC mesh with Intune?

We are trying to see what our options or for identifying mobile devices by the certificate installed on them. We would be using Intune to push group policy settings and a cert. Currently the NAC is setup with AD connectivity. Can a rule be built to catch devices with a company issued cert and als...

Drew C. Community Manager

Security Notice - VN-2016-001 OpenSSH

This vulnerability notice provides the official technical response from Extreme Networks regarding the OpenSSH vulnerabilities identified in CVE-2016-0777 and CVE-2016-0778. VN-2016-001 – OpenSSH The impacts of these vulnerabilities include possible unauthorized disclosure of information. Custome...

Ken Thomas Extreme Alum

New GTAC Knowledge Articles July 12-19, 2015

Here are the new articles that were published last week (July 12 - July 19, 2015) in GTAC Knowledge: Sunday 7/19/2015: none Saturday 7/18/2015 How To Configure Routers at a Main and Remote location Using Static Routes Why does "show stacking-support" in Summit 460 series alternate stack shows stac...

Weidle, Bert Extreme Employee

VN-2015-007-LogJam

CVE-2015-4000 "LogJam" issue is due to the TLS protocol 1.2 and earlier not properly conveying a DHE_EXPORT choice when a DHE_EXPORT ciphersuite is enabled on a server but not on a client. This allows man-in-the-middle attackers to conduct cipher-downgrade attacks. Extreme Networks response to C...

Michael Kirchner New Member

DNS Server lost after NAC Upgrade to 6.1.X

Question

After I upgraded a few NAC Appliances from 5.X to 6.1.X or from 6.1.X to latest 6.1.182 I had sometimes the problem that NAC lost its DNS Server information in the /etc/resolvresolv.conf. After dnetconfig (without changing something) all worked fine again. Does anybody know a reason for that? It d...

Andre Brits Kannemeyer Participator

NAC second Nic

Question

We are in the process of deploying multiple wifi controllers with multiple NAC appliances. The client have two core S series switches, NOT virtually bonded. The NAC appliances is being configured in a LSNAT group. Can a second NIC interface on the NAC appliance be configured on the NAC to allow for...

Carlos Silva New Member

NAC GW as destination of GRE Tunnel interface, through WAN, for quarantine PBR traffic

Question

Can the NAC GW handle traffic from a GRE tunnel interface of a router at a remote site which is using PBR to direct http trafic from quarantined users to that Tunnel interface? Thank you Carlos

Gabriel Bagita New Member

EWC doesn't changes rule after guest registration

Question

I've configures NAC as an external captive portal in EWC. When the client connects, it gets the Unregistered policy. After registration, the NAC changes the clients policy to Guest Access, but the EWC remains the Unregistered. I need to disassociate the client form the EWC to set the EWC the Guest A...

Patrick Graf New Member

shellshock vulnerability

Question

when can we reckon with a statement about the shellshock vulnerabilty ? are there any advises regarding this problem to enterasys / extreme products to bypass the time untill an official statement / patches for the affected products are released?are there products which are for sure not affected ( p...

Mark Lamond New Member

NAC Load Balancing with Guest Portal

Question

Hi there, Does anyone out there have experience of using multiple NAC appliances with the self registration portal in an LSNAT load balancing configuration? I have just added a second NAC appliance to an existing working setup, and configured load balancing for RADIUS auth. The RADIUS side of thin...

cos New Member

Aptilo AC/SPA/MAS - Logging syslog Messages to SIEM

Question

Hi We have implemented Aptilo platform and would like to get help on the settings for sending syslog to our SIEM: Aptilo AC Aptilo CORE 5 - Linux ac1.wificiutada.intra 2.6.18-274.12.1.el5 #1 SMP Tue Nov 29 13:37:35 EST 2011 i686 i686 i386 GNU/Linux Aptilo Access Co...

cos New Member

BlueCoat SG810 Event Logging - Enterasys SIEM

Hi I like to receive through syslog to my SIEM the "event logging" generated by a BlueCoat SG810. I already configured the BlueCoat and in my SIEM, in LOG ACTIVITY, this is what appears Event Name:Unknown log event Low Level Category:Unknown Generic Log Event Event Description:Unknown Generic Log-...

Tomasz Embassador

Dragon IPS system redundancy

Question

Hello, the issue is how to deploy IPS system as a failover cluster. Can either EMS or IPS hardware sensor be deployed anyhow for redundancy? Kind regards Thomas

Abdallah New Member

How can I disable FTP on I/B/S Series switch ??

Question

As a switch hardening , It is required to disable FTP and i cannot find direct command

Andy_M New Member

heartbleed OpenSSL vulnerability

Question

Does anyone have any information on whether or not and which Enterasys or Extreme products are affected by this vulnerability?

John Kaftan New Member

802.1x and Single Sign-on

Question

We have a number of laptops that are mobile labs (Tanks) and in the library for students to check out. We push the 802.1x settings via AD and it works very well. The problem we have run into is that when we have login set to 'user or computer' and check single sign-on it comes up and logs into the...

cos New Member

SIEM Dragon 7.7.2 Patch 2 Offenses and Reports

Question

I have my server logs SIEM dragon set up as follows: 1. I have multiple devices configured to send logs to my server logs (SIEM Dragon); Log Sources from different customers. 2. I created a group for each customer (Log Source Groups) and I have grouped the corresponding devices. 3. Likewise, I...

Patrick Reed New Member

802.1x Authentication over IPsec tunnel fails

Added some new offices and have deployed a C5 stack with 4 wireless APs (3715's). Using existing VNS configuration which still currently work at the main building, this new building can't connect to a specific SSID which is using 802.1x. We have an IPsec tunnel between the two buildings. Wireshar...

1
2

Page 1 / 2

Cookie policy

We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

×

Cookie settings

We use 3 different kinds of cookies. You can choose which cookies you want to accept. We need basic cookies to make this site work, therefore these are the minimum you can select. Learn more about our cookies.

Basic
Functional

Normal
Functional + analytics

Complete
Functional + analytics + social media + embedded videos

Accept cookies