CISSP - Getting started?

I decided to look at other qualifications after completing a raft of Microsoft qualifications recently, which included:

• MCSE:Security 2003
• MCSA:Security 2003
• MCTS:ISA 2006

Although the product I specialise in are Microsoft based, they do not utilise anywhere near the knowledge you have to learn for an MCSE, so working for a Network Security Distributor, the CISSP seems to fit better than the MCSE!

My current bedtime reading is this: http://www.dummies.com/store/product/CISSP-For-Dummies-2nd-Edition.productCd-0470124261.html

It's only to whet my appetite, until I have the time to read the proper books!

Useful IAG Links

Primarily an ISA forum, but there is an IAG section on the messageboard: http://www.isaserver.org
A forum focused on IAG: http://forums.forefrontsecurity.org
Independent Wiki for IAG: http://www.ssl-vpn.de/wiki/

Java client not working on IAG?

This is a bit of a common issue, but it's not normally noticed as the tests are normally carried out on IE, so it uses the ActiveX components, which aren't an issue.

The fix (found here: http://forums.forefrontsecurity.org/?g=posts&m=553):

The default rule set blocking the java-client, so make the following changes to the URL list:

InternalSite_Rule28: (/internalsite/applet/(sslvpnclientdetectjavamicrosoftclientoesislocalruntimeelevatoragent_win
_helperagent_mac_helperagent_lin_helper)\.jar) change Parameters value Reject to: Ignore

Duplicate rule 29: Change URL value of new rule to: /internalsite/com/whale/sslvpnclient/whalesslvpnclient/class.class

It worked for my Firefox users, but didn't impact me using ActiveX clients on IE8.

Celestix and Microsoft IAG

What is Microsoft Intelligent Application Gateway (IAG)?

It's an remote application delivery platform or as some would call it.... an SSL-VPN.

It's a way of delivering the applicatons you use internally at work, to an external audience via HTTPS.

The IAG can interogate computers to check what operating system it runs, whether there are specific applications running (such as anti-virus software, software based firewalls, etc), whether the computer is a member of a domain, etc.

By coupling endpoint checks, along with user credentials, granular understanding of applications, reporting and monitoring. We have a secure delivery method, as we can ensure correct users, can access correct applications, with approved computers, and be able to see who, accessed what and when. Sounds pretty comprehensive!!

This product originally was made by Whale Communications and was developed about ten years ago, prior to being bought out my Microsoft. This software platform is avalable on the Celestix WSA appliance. If you are based in the UK and want to evaluate an appliance, contact e92plus on 020-8274 7000

Some useful resources for those new to IAG are available here:

Celestix WSA Quick Start Guide [3.8Mb]
Microsoft IAG User Guide [3.32Mb]
Microsoft IAG Advanced User Guide [2.77Mb]

Microsoft IAG 2007 Service Pack 2 - Notes
Microsoft ActivePerl (which must be installed prior to SP2) [15.8Mb]
Microsoft IAG 2007 Service Pack 2 [36.5Mb]

Microsoft IAG 2007 Service Pack 2 Update 1 - Notes
Microsoft IAG 2007 Service Pack 2 Update 1 [19.8Mb]

Celestix and Microsoft ISA

For the last three years, I've been working at e92plus as the Technical Manager. We have a portfolio of products, some have gone since then, some new ones have come, but the one I took a shine to was Celestix.

Celestix make hardened Windows appliances that run Microsoft ISA Server, and Microsoft IAG Server.

I have been a Microsoft Certified Professional (MCP) since 1998... (yes, I'm that old and then some!) and have worked with NT3.51 through to Windows 2008.

It seemed like the logical step for me to take the Celestix product range under my wing.

I started playing with Windows ISA 2006 nearly three years ago, but a majority of these deployments have been as a proxy and cache, but have seen the other flavours as well.

Any way the point of this post is to list the useful resources that have helped me along the way:

http://www.isaserver.org/ - A proper ISA guru - Thanks Tom! :)
http://blog.msfirewall.org.uk/ - Jason Jones of Silversands is an MVP based in the UK
http://tmgblog.richardhicks.com/ - Recently I meet Richard Hicks of Celestix, and this is his blog

More VASCO qualifications!

Today's training course went very well and I feel confident that it gives enough information to the attendees to get installing and using the product immediately!

The exam covers all aspects learnt in the last two days and is an open book exam which I know some people love and some people hate. I have to say that in the "real world" you'd be able to look at the product, speak to people, refer to manuals, use Google, etc, so I agree with open book exams.

Fortunately, I passed the exam to gain more VASCO qualifications. That now means I'm a VASCO Certified Engineer (VCE) for Middleware 3.0, aXsGUARD 7.0 and now Identikey 3.1. As I passed with over 80%, it also qualifies me to carry out training in this product as well.

e92plus are now an Authorised Training Centre for VASCO Identikey, as well an ATC for Websense and Cyberoam.

We'll start to run the certified training course for VASCO Identikey 3.1 from September 2009, so I may see you soon! :)

VASCO Training

Who is the worlds largest two factor token provider?

RSA?? Nope, although that's probably the answer, if you spoke to someone in the UK or US.

Speak to someone in Europe or from the banking industry, then the answer would be.... VASCO!

VASCO provide tokens to commerical banking worldwide and in fact all verticals, but as such have more functioning tokens in the real world than any other token provider.

I spent today in technical training, learning more about VASCO Identikey 3.1. Vasco is one of the vendors that we distribute for at e92plus.

Initial reaction is that it's much better structured than the old VASCO Middleware 3.0 course. I'd highly recommend this course for someone new to two factor authentication, as well as someone who has experience of other solutions.

Advantages over Middleware, include a web interface, reporting, much improved AD integration and a SOAP interface. More to come tomorrow, along with an exam!!