Deploy the Zscaler ZPA App Connector with Docker
A working docker run command for the Zscaler Private Access App Connector, what each flag does, and what to check before you put it into production.
-
-
Restrict SSH access to trusted networks with firewalld IPSets
Allow SSH only from a list of trusted networks with a firewalld IPSet and a rich rule, then remove the default rule that leaves SSH open to the whole internet.
-
BGP and RPKI: why you should implement route origin validation
BGP trusts whatever routes its neighbours announce. RPKI lets you sign which AS may originate your prefixes and drop announcements that contradict it. What it protects against, what it does not, and how to deploy it.
-
Sign in to Windows 10 with a YubiKey and Azure AD
Use a FIDO2 security key such as a YubiKey 5 to sign in to an Azure AD joined Windows 10 device: the requirements, the Azure AD setting and the Intune profile.
-
Generate a SAN certificate with OpenSSL
Create a certificate request that covers several DNS names and IP addresses with an OpenSSL configuration file, then convert the signed certificate to PFX for Windows.
