aconitas GmbHFeb 9

Expertise-Update bei aconitas! đŸ›Ąïž Christian Neureither ist jetzt CSNTS-zertifiziert. Das Ergebnis: aconitas steigt zum Stormshield Platinum Partner auf.

FĂŒr unsere Kunden bedeutet das:
✅ Direkter Level-2-Support
✅ Schnellere Fehleranalyse auf Systemebene
✅ Maximale Sicherheit „Made in Europe“

GlĂŒckwunsch an das Team zur erfolgreichen Übergabe in Mertingen! 👏

#Cybersecurity #Stormshield #Platinum #EU #NIS2 #aconitas #Mertingen

Show threadLe Lapinours en pause đŸ°đŸ»Mar 5, 2025

Ah ouais, la fameuse erreur HTTP inconnue.

#Stormshield #vismaviededirtech #vismaviedetech

Show threadTarren (They/Them)Jul 16, 2024
@Kaliah It was bad here around the same time, here in IA. Local radio station was playing an extended weather report thing for a bit, and I don't know how many of those emergency warnings with the beeps and TTSes came across the radio, nor just how many times my #StormShield app was blowing up at me. and the weather itself really only got intense for us for a short time.
đŸ«° Ada ⅘ 🌙Jun 25, 2024

Suite Ă  sa reprise par la Cybergrange, le Shadok cherche un·e admin rĂ©seau. Il y a un firewall #Stormshield derriĂšre une livebox pro, plusieurs switchs, plusieurs rĂ©seaux locaux, des antennes wifi, de la vidĂ©osurveillance et d’autres systĂšmes de sĂ©curitĂ© (notamment Castel).

Si vous avez les compĂ©tences requises, n’hĂ©sitez pas Ă  Ă©crire Ă  JĂ©rĂŽme : jerome.tricomi [at] cybergrange.eu

#Strasbourg #jeproposeunjob #adminreseau #SNS

Show threadBenjaminJun 7, 2024

And if you ignore the doc and configure 0.0.0.0/0 as local and remote selectors on the #stormshield, it will try to put all traffic through the tunnel and you've essentially bricked your firewall (been there, done that, on a test VM fortunately)...

#neteng #ipsec

Show threadBenjaminJun 7, 2024

How will this work with such SAs you ask ? Well if, on the #stormshield router, you add a route towards the remote end of the tunnel, it will happily send encrypted traffic ! Which will be dropped by the Linux end because it does not match any xfrm policy !

In other words, a Stormshield will ask to narrow the IPSEC selectors to a point they are useless and then ... ignore them !

#neteng #ipsec

BenjaminJun 7, 2024

Currently setting up IPSEC tunnels in VTI mode and I have to say... WTF #Stormshield? Are you drunk ?

Usually, traffic selectors negotiated in VTI mode are 0.0.0.0/0, and only traffic routed through virtual ifaces are fed to these policies (this is achieved with marks in linux).

But the Stormshield doc recommends setting up only the interco IPs as selectors, and a classic Strongswan install will happily "narrow" the selectors from the conf'ed 0.0.0.0/0s down to these two /32s.

#neteng #ipsec

Tarren (They/Them)May 22, 2024
I tried an experiment tonight. I put a screenshot of a #Stormshield map into #BeMyAI, and I’d say I got some pretty decent interpretation. #Accessibility #Weather #QuadCities #storms #WeatherRadar
https://share.bemyeyes.com/chat/DFquHwCzKq
Be My AI - Shared chat

A Be My Eyes user shared an image description by Be My AI

Be My Eyes
Marud Feb 22, 2024
Is there an attack actually on #stormshield security appliances ?

I see multiple customers having multiple SSL vpn connections initiated from the same IPs in the logs (South Africa), with an "undef" user. The port column gets bugged too.

Different versions of appliances but same thing on different customers

ping @Nasher
Show threadKerry StevensonOct 24, 2023
@Shanitoba I’m hoping it misses us, too early #StormShield