31 Topics
91 Replies

Security

Compliance through Security Information and Event Management, Log Management, and Network Behavioral Analysis

Peter Participator

Extreme Control Appliance as accounting proxy for sso

Question

Hello, is it possible to use control appliance/engine as accounting proxy for sso on firewalls? situation: Control appliance/engine is set as radius & accounting server. We like to forward accounting information to firewall for using SSO and authentication based policy on firewall. Is this possib...

Tom Gavin New Member

Permit specific MAC address per port

I am trying to figure out how to enable port security on Extreme Summit 300-24 switches. Cisco provides this as a configurable feature. I don't believe Extreme has a comparable feature so I have been trying to use access lists to perform the same basic function. I have no problem creating the necess...

Marlon New Member

how to join NAC in a domain

Hi, how can i join the NAC in a domain? Thanks!

Pierre Demassey New Member

Does NAC have the capability to identify company issued devices by the certificate installed on them and can NAC mesh with Intune?

We are trying to see what our options or for identifying mobile devices by the certificate installed on them. We would be using Intune to push group policy settings and a cert. Currently the NAC is setup with AD connectivity. Can a rule be built to catch devices with a company issued cert and als...

Drew C. Community Manager

Security Notice - VN-2016-001 OpenSSH

This vulnerability notice provides the official technical response from Extreme Networks regarding the OpenSSH vulnerabilities identified in CVE-2016-0777 and CVE-2016-0778. VN-2016-001 – OpenSSH The impacts of these vulnerabilities include possible unauthorized disclosure of information. Custome...

Ken Thomas Extreme Alum

New GTAC Knowledge Articles July 12-19, 2015

Here are the new articles that were published last week (July 12 - July 19, 2015) in GTAC Knowledge: Sunday 7/19/2015: none Saturday 7/18/2015 How To Configure Routers at a Main and Remote location Using Static Routes Why does "show stacking-support" in Summit 460 series alternate stack shows stac...

Weidle, Bert Extreme Employee

VN-2015-007-LogJam

CVE-2015-4000 "LogJam" issue is due to the TLS protocol 1.2 and earlier not properly conveying a DHE_EXPORT choice when a DHE_EXPORT ciphersuite is enabled on a server but not on a client. This allows man-in-the-middle attackers to conduct cipher-downgrade attacks. Extreme Networks response to C...

Michael Kirchner New Member

DNS Server lost after NAC Upgrade to 6.1.X

Question

After I upgraded a few NAC Appliances from 5.X to 6.1.X or from 6.1.X to latest 6.1.182 I had sometimes the problem that NAC lost its DNS Server information in the /etc/resolvresolv.conf. After dnetconfig (without changing something) all worked fine again. Does anybody know a reason for that? It d...

Andre Brits Kannemeyer Participator

NAC second Nic

Question

We are in the process of deploying multiple wifi controllers with multiple NAC appliances. The client have two core S series switches, NOT virtually bonded. The NAC appliances is being configured in a LSNAT group. Can a second NIC interface on the NAC appliance be configured on the NAC to allow for...

Carlos Silva

NAC GW as destination of GRE Tunnel interface, through WAN, for quarantine PBR traffic

Question

Can the NAC GW handle traffic from a GRE tunnel interface of a router at a remote site which is using PBR to direct http trafic from quarantined users to that Tunnel interface? Thank you Carlos

Gabriel Bagita New Member

EWC doesn't changes rule after guest registration

Question

I've configures NAC as an external captive portal in EWC. When the client connects, it gets the Unregistered policy. After registration, the NAC changes the clients policy to Guest Access, but the EWC remains the Unregistered. I need to disassociate the client form the EWC to set the EWC the Guest A...

Patrick Graf

shellshock vulnerability

Question

when can we reckon with a statement about the shellshock vulnerabilty ? are there any advises regarding this problem to enterasys / extreme products to bypass the time untill an official statement / patches for the affected products are released?are there products which are for sure not affected ( p...

Mark Lamond New Member

NAC Load Balancing with Guest Portal

Question

Hi there, Does anyone out there have experience of using multiple NAC appliances with the self registration portal in an LSNAT load balancing configuration? I have just added a second NAC appliance to an existing working setup, and configured load balancing for RADIUS auth. The RADIUS side of thin...

cos

Aptilo AC/SPA/MAS - Logging syslog Messages to SIEM

Question

Hi We have implemented Aptilo platform and would like to get help on the settings for sending syslog to our SIEM: Aptilo AC Aptilo CORE 5 - Linux ac1.wificiutada.intra 2.6.18-274.12.1.el5 #1 SMP Tue Nov 29 13:37:35 EST 2011 i686 i686 i386 GNU/Linux Aptilo Access Co...

cos

BlueCoat SG810 Event Logging - Enterasys SIEM

Hi I like to receive through syslog to my SIEM the "event logging" generated by a BlueCoat SG810. I already configured the BlueCoat and in my SIEM, in LOG ACTIVITY, this is what appears Event Name:Unknown log event Low Level Category:Unknown Generic Log Event Event Description:Unknown Generic Log-...

Tomasz Embassador

Dragon IPS system redundancy

Question

Hello, the issue is how to deploy IPS system as a failover cluster. Can either EMS or IPS hardware sensor be deployed anyhow for redundancy? Kind regards Thomas

Abdallah

How can I disable FTP on I/B/S Series switch ??

Question

As a switch hardening , It is required to disable FTP and i cannot find direct command

Andy_M New Member

heartbleed OpenSSL vulnerability

Question

Does anyone have any information on whether or not and which Enterasys or Extreme products are affected by this vulnerability?

John Kaftan New Member

802.1x and Single Sign-on

Question

We have a number of laptops that are mobile labs (Tanks) and in the library for students to check out. We push the 802.1x settings via AD and it works very well. The problem we have run into is that when we have login set to 'user or computer' and check single sign-on it comes up and logs into the...

cos

SIEM Dragon 7.7.2 Patch 2 Offenses and Reports

Question

I have my server logs SIEM dragon set up as follows: 1. I have multiple devices configured to send logs to my server logs (SIEM Dragon); Log Sources from different customers. 2. I created a group for each customer (Log Source Groups) and I have grouped the corresponding devices. 3. Likewise, I...

Patrick Reed

802.1x Authentication over IPsec tunnel fails

Added some new offices and have deployed a C5 stack with 4 wireless APs (3715's). Using existing VNS configuration which still currently work at the main building, this new building can't connect to a specific SSID which is using 802.1x. We have an IPsec tunnel between the two buildings. Wireshar...

John Kaftan New Member

802.1x Issues between B5 and NAC

Question

First of all is anyone using wired 802.1x Authentication successfully with NAC? My goal is to have 802.1x be my first auth choice and Mac auth second and then use AD to push 802.1x settings to machines that are members of the domain. All other machines would likely authenticate via Mac auth. I ha...

nmartine New Member

NAC user capacity exceeded

How is a NAC affected if the End System Capacity shows 175% even when we have only 2300 users now (the system says it has 5400 and the license is for 3000 users), which is this number signifies?, there is a way to see the actual number of users in a report or by console?. Thank you.

cos

SIEM 7.7.2 Patch 2 - Offenses. Where are stored?

Question

Where are stored the Offenses that has been generated the SIEM? I have it setting so: Admin -> System Configuration -> System settings Database Settings - Offense Retention Period : 2 yearsIs that correct? I need to generate a monthly, semi-annual and annual report on these offenses. Thanks, d...

cos

SIEM 7.7.2 Patch 2 - Event Retention

Question

I have multiple devices configured to send logs to my server logs (SIEM) and I need to keep all these logs of my devices for 2 years, for query and reports futures.I have the following devices with diferent tecnologies: routers, switches, firewalls, to send logs to my SIEM and I have setup as attach...

Page 1/2

Ronald Dvorak
14 likes
Tomasz
4 likes
C

Chris Kelly
3 likes
Zdenek Pala
3 likes
P

Patrick Voss
2 likes

Cookie policy

We use cookies to enhance and personalize your experience. If you accept or continue browsing you agree to our cookie policy. Learn more about our cookies.

×

Cookie settings

We use 3 different kinds of cookies. You can choose which cookies you want to accept. We need basic cookies to make this site work, therefore these are the minimum you can select. Learn more about our cookies.

Basic
Functional

Normal
Functional + analytics

Complete
Functional + analytics + social media + embedded videos

Accept cookies