today is Christmas Eve!

Unfortunately, there is only one small Christmas tree this year :)

I wish all of you nice Christmas days, a successful start to the new year 2022
and stay healthy!

The post Merry Christmas and a happy new year! appeared first on Network Guy.

today is Christmas Eve!

Due to my workload, I completely forgot to decorate my flat for Christmas. And because of Covid 19, I couldn’t get any Christmas decorations today either. Luckily I got the last tree at the tree dealer and decorated it with what I still had at home.

Better that than nothing :D

I wish all of you nice Christmas days, a successful start to the new year 2021
and stay healthy!

The post Merry Christmas and a happy new year! appeared first on Network Guy.

Sometimes a /24 subnet is running out of free usable IP addresses and we need to extend the network. I want to show you how easy it is and what you have to keep in mind. First we need to plan our new network. The easiest way is to extend your current network, so you don’t have to change all of your devices. For example: We are currently running 192.168.2.0/24 so we use the subnetmask 255.255.255.0. We will extend this to /23 (255.255.254.0). Keep in mind that you need to plan it right, because there are cases where you go up or down in your subnet-id. I suggest this online calculator: www.subnet-calculator.com

For example:

• 192.168.1.0/24 to /23 = 192.168.0.0/23, subnetmask 255.255.254.0
  (usable IP addresses from 192.168.0.1 to 192.168.1.254)
• 192.168.2.0/24 to /23 = 192.168.2.0/23, subnetmask 255.255.254.0
  (usable IP addresses from 192.168.2.1 to 192.168.3.254)
• 192.168.2.0/24 to /22 = 192.168.0.0/22, subnetmask 255.255.252.0
  (usable IP addresses from 192.168.0.1 to 192.168.3.254)

We will go from 192.168.2.0/24 to 192.168.0.0/22. First we will export the Microsoft DHCP settings with this command (reserved-IPs are also getting exported):

netsh dhcp server dump all > c:\dhcp.txt

Delete your current DHCP scope and open the txt file with notepad, press Control+H and replace “Dhcp Server” with “netsh dhcp server”. Search for your current subnetmask 255.255.255.0 and change it to 255.255.252.0. Your subnet also needs to be replaced in the txt file, so press Control+H again to replace “192.168.2.0” to “192.168.0.0”.

After this, we need to manually change the iprange and excluderange (PUCK is my test-server ;-) ). Always use the full range, we will configure excluderanges at the start and the end of the subnet:

net dhcp server \\Puck Scope 192.168.0.0 Add iprange 192.168.0.1 192.168.3.254
net dhcp server \\Puck Scope 192.168.0.0 add excluderange 192.168.0.1 192.168.0.100
net dhcp server \\Puck Scope 192.168.0.0 add excluderange 192.168.0.200 192.168.3.254

as you can see, our DHCP will return IP addresses from 192.168.0.101 to 192.168.0.199. In most cases, you can delete the areas with “classes”, “filter” and “options. Change the file ending from .txt to .bat and double click the file. You should now have your new DHCP scope:

after this you need to change the subnetmask of all devices with fixed IP-addresses:

• firewall/gateway
• all printers
• all servers

The servers are running through so they don’t need a restart nor clients will have a disconnect. I’m always doing those changes within the customer working hours :-)

Have a nice day!

The post Easy extend your IP-subnet appeared first on Network Guy.

• Sandstorm: Reporting enhancements and manual file submission
• WAF: “Let’s Encrypt” certificate support and page customization enhancements
• RED: Unified firmware with 4G LTE support
• Email: Upgraded S/MIME email encryption
• ATP: New and improved Advanced Threat Protection engine

Let’s Encrypt needs to be enabled in the WebAdmin:

Roadmap for UTM 9.7, 9.8, and 9.9

For those of you following our roadmap plans closely, you’ll notice that planning our UTM releases out to at least 9.9 is a major new commitment to you, our valued SG UTM partners, as well as to your customers. We want you to know that we are as committed to the SG UTM platform as you are. You may also notice that IKEv2 support did not make the cut for UTM 9.6. After our experience integrating this technology into our XG Firewall platform, we felt that it would unnecessarily delay the release of UTM 9.6, so we’ve deferred it for now and will evaluate it for inclusion in an upcoming release.

As always, your feedback on our roadmap is encouraged and appreciated, so please get in touch with us with your feedback and roadmap priorities via ideas.sophos.com.

Other current top considerations for future releases, based on your input, include email and data protection enhancements for GDPR, an enhanced RestAPI to retrieve status information, machine learning in the on-box antivirus engine and automated IP blacklisting for possible brute force attacks.

Source: Sophos Partnerportal Blog

The post Sophos UTM 9.6 is coming soon! appeared first on Network Guy.

Last week I achieved the title “Ekahau Certified Survey Engineer (ECSE)” to close knowledge-gaps, have more marketing material and having an advantage at tenders.

So, are you interested in WLAN topics in this blog?

The post Are your interested in WLAN topics? appeared first on Network Guy.

Download Version 9.510-4 to 9.510-5

• Connected APs will perform firmware upgrade
• Connected REDs will perform firmware upgrade

Bugfixes:

NUTM-8273 [Basesystem] Inconsistent reporting data in hot standby environment
NUTM-9089 [Basesystem] ulogd restarting randomly
NUTM-9423 [Basesystem] Missing DMI info or missing WiFi card should turn status LED red for desktop refresh models
NUTM-9516 [Basesystem] CVE-2017-3145: BIND vulnerability
NUTM-9764 [Basesystem] multiple NTP vulnerabilities
NUTM-9862 [Basesystem] CVE-2018-8897: Don’t use IST entry for #BP stack
NUTM-9944 [Basesystem] ‘ethtool -p’ is not working for shared port
NUTM-9945 [Basesystem] SG/XG 125/135 upper 4 ports LEDs at front and rear side not behaving as expected
NUTM-10124 [Email] TLS Errors – renegotiation not allowed
NUTM-9286 [Email] CVE-2011-3389: SSL/TLS BEAST Vulnerability And Weak Algorithms
NUTM-9460 [Email] Quarantine unscannable and encrypted content not working as expected
NUTM-9539 [Email] SMTP callout with TLS does not work
NUTM-9627 [Email] Parent proxy for WAF (ctipd) not applied without active e-mail subscription
NUTM-9771 [Email] Redesign TFT detection to decrease false positives/negatives
NUTM-9836 [Email] HSTS usage breaks Quarantine Report release link
NUTM-9789 [Logging] Not able to archive logs using SMB share
NUTM-8969 [Network] Inconsistent DHCP leases in WebAdmin
NUTM-9049 [Network] Cannot change IPv4 interface as IPv6 gateway is required
NUTM-9194 [Network] Static route switching to different VLAN
NUTM-9646 [Network] eth0 is falsely marked “dead” when running “hs” on slave
NUTM-9739 [Network] Network monitor restarting on slave nodes
NUTM-10118 [Reporting] Authenticated Remote Code Execution in WebAdmin
NUTM-9607 [Reporting] Upper case umlauts in PDF Executive Reports are not displayed correctly
NUTM-9624 [Reporting] WAF – Top attackers won’t be displayed after upgrade to v9.5
NUTM-9719 [SUM] Web Protection service shown as down in SUM
NUTM-9547 [UI Framework] UserPortal does not correctly detect browser specified preferred language for Chinese Simplified
NUTM-9527 [WAF] Fix mod_url_hardening stack corruption
NUTM-8038 [WebAdmin] WebAdmin not available
NUTM-9232 [WebAdmin] Sometimes ‘backend connection failed’ while login
NUTM-9529 [WebAdmin] Role with ‘Web Protection Manager’ rights can’t access Aplication Control
NUTM-9689 [WebAdmin] Report Auditor role is unable to open the dashboard
NUTM-5293 [Web] Google is missed in the Search Engines reports
NUTM-6240 [Web] FTP download through HTTP Proxy in standard mode not possible
NUTM-9039 [Web] Connections may fail when using upstream proxies due to “Proxy-Connection” header being sent
NUTM-9399 [Web] Classification for Windows Updates differs between AFC and conntrack
NUTM-9413 [Web] Unable to upload certificate to “Local Verification CAs”
NUTM-9491 [Web] HTTP Proxy coredumps with SIGABRT
NUTM-9549 [Web] Proceeding after content warning results in display issues on redirected pages
NUTM-9599 [Web] HTTP Proxy requests stuck without appropriate timeout
NUTM-9630 [Web] Fallback log flooded with samlogon cache timeout messages
NUTM-9664 [Web] Country blocking exception not working when HTTP Proxy is using SSO
NUTM-9720 [Web] Can’t proceed content warning for MIME types if URL contains spaces
NUTM-9745 [Web] HTTP Proxy coredumps with SIGSEGV
NUTM-7628 [Wireless] Wireless clients frequently failing to connect with STA WPA failure reason code 2
NUTM-8946 [Wireless] APs displayed as inactive in WebAdmin while clients can connect
NUTM-9591 [Wireless] Both local WiFi using 2.4GHz band and same channel in default configuration
NUTM-9592 [Wireless] Unable to broadcast same SSID on both LocalWifi0 and LocalWifi1
NUTM-9594 [Wireless] Incorrect channel information showing on overview for LocalWifi
NUTM-9608 [Wireless] Incorrect generic error message in WebAdmin while configuring band for wireless network
NUTM-9638 [Wireless] Both local WiFi AP named ‘Local’
NUTM-9731 [Wireless] Not able to configure channel 12 and 13 on newer desktop models
NUTM-9735 [Wireless] Set default channel width to 40MHz for 5GHz band
NUTM-9737 [Wireless] SGw appliances missing frequency definitions for Nigeria

The post Sophos released the new UTM maintenance update 9.510-5 appeared first on Network Guy.

I wish all of you a happy system administrator appreciation day!

The post Happy System Administrator Appreciation Day! appeared first on Network Guy.

Enter your order number in the left input field:

at the next step, type in the mail address associated with the purchase. In my case it was our company, so it’s your reseller

after this you will see the license to register:

click Next. Now we need to get the serial number of the fresh installed IMC software. Go to your IMC webservice https://[IP-ADDRESS]:8443 and click on “Activate”. You will now see the serial number:

type in your serial number here:

accept the end user license agreement:

download your license file

and upload it to your IMC webserver:

restart your server now.

Have a great weekend :)

The post Activation of HPE/aruba IMC software appeared first on Network Guy.

New Bluetooth visualizations and devices

Cue the drum roll! Introducing a new technology to Ekahau Site Survey – Bluetooth!

In practice this means that we have added a new visualization type to ESS called “Bluetooth Coverage”. This visualization allows you to display the coverage of your BLE devices on the map and how they overlap with each other. Overall, this visualization works fairly similarly to the familiar Number of APs visualization, which you can use as a reference point to learn the ropes with this new visualization type.

In addition to the new visualization type, we figured we’d actually need something to show in it as well. That’s why we have added a completely new device types to ESS as well! You can plan your Bluetooth coverage either with stand-alone BLE beacons or with BLE devices integrated to Wi-Fi access points.

No matter which type of BLE devices you need, you can find both of them in the access point tools.

You can find the stand-alone BLE beacons in a new sub-menu under the AP tool. Just click the new arrow sticking out from the side of the AP tool icon!

Integrated BLE devices you can find well-integrated into the regular access point selection. And how can you tell which APs also have BLE functionality? Just write “BLE” into the search list and only BLE supporting APs are filtered in!

Coverage planning – real-time coverage visualizations for simulated APs

New “Coverage planning” visualization allows you to view AP’s RSSI coverage in real-time, while you’re moving the AP on the map. Paradoxically, we can’t really show the awesomeness of this feature in these still images, but we will try our best.

So, please take our word for it – like movies Coverage Planning is best when seen in motion! It will allow you to immediately see what kind of coverage a simulated AP has in any given location on the map and allows you to easily find and fine-tune optimal positions for your APs. Try it out to see for yourself!

Coverage Planning is currently its own visualization type, but it shares many similarities with Signal Strength visualization. Both visualizations display RSSI with shared grey-out values and should be used together for maximum benefit.

Other worthwhile additions in ESS 9.2.0:

• Improved DWG/SVG performance and clarity
• Aerohive AP names displayed in ESS
• APs can now be selected and moved with AP tool as well
• Further UI tweaks and fine-tuning

Download here.

The post ekahau Site Survey 9.2 released! appeared first on Network Guy.

I tried to install the Sophos XG on the ZOTAC ZBOX MI549 but the OS can’t find the realtek network card so I decided to install an ESXi server to the hardware to run Sophos XG in a virtual machine. I installed the vmware ESXi 6.7 (VMware-VMvisor-Installer-6.7.0-8169922.x86_64.iso) image (use Rufus for ISO copy to your USB stick). After the initial IP configuration I saw also only one network adapter, so I had to install the realtek driver manually. At first, activate SSH to connect via PuTTY:

now connect to your ESXi server via SSH (be sure you have configured a working gateway and DNS server to connect to the internet) and check your network cards:

[root@localhost:~] lspci -v | grep "Class 0200" -B 1
0000:00:1f.6 Ethernet controller Network controller: Intel Corporation Ethernet Connection I219-LM [vmnic0]
Class 0200: 8086:156f
--
0000:6c:00.0 Ethernet controller Network controller: Realtek Semiconductor Co., Ltd. RTL8111/8168/8411 PCI Express Gigabit Ethernet Controller
Class 0200: 10ec:8168

as you can see, both adapters are visible to the system, but the drivers for the vendor ID 10ec:8168 are not available. You can also search for hardware compatibility at the VMware Compatibility Guide (select the filter “IO Devices”). In my case, I can use these commands to download the drivers from a specific source:

esxcli software acceptance set --level=CommunitySupported
esxcli network firewall ruleset set -e true -r httpClient
esxcli network firewall ruleset set -e true -r dns
esxcli software vib install -d https://vibsdepot.v-front.de -n net55-r8168

the driver download and installation was successfull:

Installation Result
Message: The update completed successfully, but the system needs to be rebooted for the changes to be effective.
Reboot Required: true
VIBs Installed: Realtek_bootbank_net55-r8168_8.045a-napi
VIBs Removed:

type in “reboot” to restart your ESXi server. After the reboot, I could saw both network adapters!

Happy Weekend! :)

The post Installing Realtek Driver on ESXi 6.7 appeared first on Network Guy.