Other than password based authentication, you can use certificate to authenticate admin user to Paloalto admin GUI. Here is how to enable certificate based authentication. Please be advised, after enabling certificate authentication you CANNOT authenticate with password to web GUI anymore. 01. Import root CAa) Navigate to Device>Certificate Management>Certificates>Importb) Give the root ca a name… Continue reading Enable certificate authentication on Paloalto Firewall
Category: security
Formatting and loading FortiGate firmware image using TFTP
If you forget your admin password or your fortigate device does not boot. You might need to load firmware to your fortigate device, here is how to do it. For this to work, you need to have a console connection to the device. 01. Hit any key during the boot up sequence to enter configuration… Continue reading Formatting and loading FortiGate firmware image using TFTP
How to config CyberArk automatic unlock suspend account
By default, when a user is suspended/locked by CyberArk the system do not Auto Unlock the user. This post demonstrates how to config CyberArk to Auto Unlock the user. Please noted, manual unlock is recommended since CyberArk managed privilege accounts. 01. Change “UserLockoutPeriodInMinutes” value in dbparm.ini to your chose. If you change it to 10,… Continue reading How to config CyberArk automatic unlock suspend account
Paloalto firewall ssh authentication with public key
It’s common that administrator login to ssh server with key to avoid typing password all day. This post demonstrates how to config Paloalto firewall to use ssh key authentication. 01. Go to Device>Administrators, select the user name you want to add ssh key authentication. 02. Check “Use Public Key Authentication(SSH)” 03. Import your ssh public… Continue reading Paloalto firewall ssh authentication with public key
Factory Reset Palo Alto Firewall without admin password
This post demonstrate how to perform factory reset if you don’t have admin password. For this to work, you need a console connection to firewall. 01. Reboot firewall by unplug the power cable and then plug it back in. 02. From console output, select “PANOS (main-sysroot1)”. Please noted, this selection only show up around 5… Continue reading Factory Reset Palo Alto Firewall without admin password
The journey of becoming an OSCP — What to expect on Exam day
Offsec has announced an update of the course(PEN-200) on Mar 15 2023, although the overall process should be similar, be sure to read official article on the change. https://www.offsec.com/offsec/pen-200-2023/ https://help.offensive-security.com/hc/en-us/articles/12483872278932-PEN-200-2023-FAQ =====================Update notes for course change============ I took my exam on Jan 14 and I received my result on Jan 17.(Please note, offsec stated on their… Continue reading The journey of becoming an OSCP — What to expect on Exam day