updated: 2022-09-07 (Under Construction) Introduction Palo Alto announced direct NGFW Cloud integration with AWS as well as AWS announcment back in March of 2022. This is a really new product that integrates AWS Firewall Manager with Palo Alto NGFW. I am still reviewing it, but here are some initial docucmentations around it that I’ve been looking at and evaluting and this is a PDF with a brief overview: Palo Alto Cloud NGFW (file removed due to NDA)

updated: 2022-08-21 Microsoft Project Description: I’ve been been looking for ways to enhance Microsoft O365 traffic that has generally always had to flow through an Enterprise Proxy. Pouring through online documentations to find out what traffic needs to go direct without being inspected. my git repo for microsoft_pac Resources Office 365 IP Address and URL web service Office 365 URL categories to help you optimize the network traffic which really matters Generate Office 365 PAC Files with PowerShell Use tenant restrictions to manage access to SaaS cloud applications Use tenant restrictions to manage access to SaaS cloud applications Python Currently I’m working on a project that will allow sync between all the different services that Microsoft requires.

Cloud Considerations updated: 2023-02-24 Table of Contents: Overview Considerations Where do I start? Cloud Native vs Cloud Agnostic Nework Segmentation & Hiearchy Network Segmentation Network Hierarchy Security Firewall Cloud Workload Protection Protect Your Cloud References Overview Going to the cloud can be a difficult journey and has a lot of obsticles around it. Let’s try to break down those obsticles leveraging publications and information readily availble to help you get through your cloud journey.

updated: 2022-09-07 (Under Construction) Introduction Palo Alto announced direct NGFW Cloud integration with AWS as well as AWS announcment back in March of 2022. This is a really new product that integrates AWS Firewall Manager with Palo Alto NGFW. I am still reviewing it, but here are some initial docucmentations around it that I’ve been looking at and evaluting and this is a PDF with a brief overview: Palo Alto Cloud NGFW (file removed due to NDA)

updated: 2022-09-08 (under construction…) Introduction Description: I wanted to review the best practices to inpsect AWS traffic and how this would be architected. I ended up going through a few iterations of different designs and the pros and cons of each. This is a space on some of those designs and online resources I used. I hope this becomes a sort of one stop shop in evaluating different methodoligies that can be leveraged to secure an AWS Cloud solution.

Description: Set up a personal DNS Firewall. Overview: In working with Infoblox DNS BloxOne Deployment I got to thinking why not deploy this on my own network to get an inexpensive way to control DNS requests. Here I ended up deploying a Primary and Secondary DNS Bind9 Server running on physical and virtual Ubuntu Servers. I leverage ioc2rpz to sync community available RPZ’s then we leverage DNSCrypt-Proxy project configuring a local listener that will send Recursive DNS lookups using DNSoverHTTPS.

updated: 2022-08-21 Microsoft Project Description: I’ve been been looking for ways to enhance Microsoft O365 traffic that has generally always had to flow through an Enterprise Proxy. Pouring through online documentations to find out what traffic needs to go direct without being inspected. my git repo for microsoft_pac Resources Office 365 IP Address and URL web service Office 365 URL categories to help you optimize the network traffic which really matters Generate Office 365 PAC Files with PowerShell Use tenant restrictions to manage access to SaaS cloud applications Use tenant restrictions to manage access to SaaS cloud applications Python Currently I’m working on a project that will allow sync between all the different services that Microsoft requires.

Description: Set up a personal DNS Firewall. Overview: In working with Infoblox DNS BloxOne Deployment I got to thinking why not deploy this on my own network to get an inexpensive way to control DNS requests. Here I ended up deploying a Primary and Secondary DNS Bind9 Server running on physical and virtual Ubuntu Servers. I leverage ioc2rpz to sync community available RPZ’s then we leverage DNSCrypt-Proxy project configuring a local listener that will send Recursive DNS lookups using DNSoverHTTPS.

New York City Photos

City installations and freephotos Ray Bans Grafitee

updated: 2022-08-21 Microsoft Project Description: I’ve been been looking for ways to enhance Microsoft O365 traffic that has generally always had to flow through an Enterprise Proxy. Pouring through online documentations to find out what traffic needs to go direct without being inspected. my git repo for microsoft_pac Resources Office 365 IP Address and URL web service Office 365 URL categories to help you optimize the network traffic which really matters Generate Office 365 PAC Files with PowerShell Use tenant restrictions to manage access to SaaS cloud applications Use tenant restrictions to manage access to SaaS cloud applications Python Currently I’m working on a project that will allow sync between all the different services that Microsoft requires.

Georgia Pond Central Park Hudson Yards

Cloud Considerations updated: 2023-02-24 Table of Contents: Overview Considerations Where do I start? Cloud Native vs Cloud Agnostic Nework Segmentation & Hiearchy Network Segmentation Network Hierarchy Security Firewall Cloud Workload Protection Protect Your Cloud References Overview Going to the cloud can be a difficult journey and has a lot of obsticles around it. Let’s try to break down those obsticles leveraging publications and information readily availble to help you get through your cloud journey.

updated: 2022-09-07 (Under Construction) Introduction Palo Alto announced direct NGFW Cloud integration with AWS as well as AWS announcment back in March of 2022. This is a really new product that integrates AWS Firewall Manager with Palo Alto NGFW. I am still reviewing it, but here are some initial docucmentations around it that I’ve been looking at and evaluting and this is a PDF with a brief overview: Palo Alto Cloud NGFW (file removed due to NDA)

updated: 2022-09-08 (under construction…) Introduction Description: I wanted to review the best practices to inpsect AWS traffic and how this would be architected. I ended up going through a few iterations of different designs and the pros and cons of each. This is a space on some of those designs and online resources I used. I hope this becomes a sort of one stop shop in evaluating different methodoligies that can be leveraged to secure an AWS Cloud solution.

orig: 2021-05-15 updated: 2022-08-28 Introduction Description: I was using the PaloAltoNetworks Github project, but wanted to customize it and also was looking at adding it to some internal projects and try to understand what I was doing. My original code was built around Palo Alto’s XML API, so I’ve been updating it against Palo Alt’s newer version since updating their API (begining in PanOS 9.0 release see PAN-OS Documents ) to use REST API Request and Response Structure, which, I feel, made it a lot easier to interact with.

New York City Photos

City installations and freephotos Ray Bans Grafitee

Georgia Pond Central Park Hudson Yards

New York City Photos

City installations and freephotos Ray Bans Grafitee

Georgia Pond Central Park Hudson Yards

orig: 2021-05-15 updated: 2022-08-28 Introduction Description: I was using the PaloAltoNetworks Github project, but wanted to customize it and also was looking at adding it to some internal projects and try to understand what I was doing. My original code was built around Palo Alto’s XML API, so I’ve been updating it against Palo Alt’s newer version since updating their API (begining in PanOS 9.0 release see PAN-OS Documents ) to use REST API Request and Response Structure, which, I feel, made it a lot easier to interact with.

updated: 2022-08-21 Microsoft Project Description: I’ve been been looking for ways to enhance Microsoft O365 traffic that has generally always had to flow through an Enterprise Proxy. Pouring through online documentations to find out what traffic needs to go direct without being inspected. my git repo for microsoft_pac Resources Office 365 IP Address and URL web service Office 365 URL categories to help you optimize the network traffic which really matters Generate Office 365 PAC Files with PowerShell Use tenant restrictions to manage access to SaaS cloud applications Use tenant restrictions to manage access to SaaS cloud applications Python Currently I’m working on a project that will allow sync between all the different services that Microsoft requires.

Table of Contents: Customizing SSL Certificates Overview Sample Code Customizing SSL Certificates Description: In an Enterprise environment, where we are decrypting traffic for inspection or using interanally signed certificates, I’m constaintly running into SSL Errors. They are generally legitimate and always have a reason, but to minimize this I either directly use a custom CA or I use something like the below where I can leverage publicly known Trusted CA’s with a Custom Trusted CA.

updated: 2024-05-18 Table of Contents: Handling Certificates with Python Using PIP Config Setting PIP Configuration PIP Configuration Locations Handling Certificates in code PEP 476 - Enabling Certificate Verification Handling Certificates with Python StackOverflow: How To Add A Custom CA Using PIP Config A quick way to set Python configuration is to set it in the pip.conf which contains NOTE: Python uses a hierarchy to search for the configuration file and what takes presedence.

updated: 2022-08-21 Microsoft Project Description: I’ve been been looking for ways to enhance Microsoft O365 traffic that has generally always had to flow through an Enterprise Proxy. Pouring through online documentations to find out what traffic needs to go direct without being inspected. my git repo for microsoft_pac Resources Office 365 IP Address and URL web service Office 365 URL categories to help you optimize the network traffic which really matters Generate Office 365 PAC Files with PowerShell Use tenant restrictions to manage access to SaaS cloud applications Use tenant restrictions to manage access to SaaS cloud applications Python Currently I’m working on a project that will allow sync between all the different services that Microsoft requires.

Table of Contents: Customizing SSL Certificates Overview Sample Code Customizing SSL Certificates Description: In an Enterprise environment, where we are decrypting traffic for inspection or using interanally signed certificates, I’m constaintly running into SSL Errors. They are generally legitimate and always have a reason, but to minimize this I either directly use a custom CA or I use something like the below where I can leverage publicly known Trusted CA’s with a Custom Trusted CA.