With a view to greater security and data protection, how do we implement additional security measures in the server room without destroying the budget of annual IT expenses?In the event of a serious accident (the OVH cloud fire in France in 2021, or the Godaddy fire also in France in 2024) in the Server Room, … Read more
Using Microsoft’s Hyper-V service with Active Directory Domain Hole Replication for authentication can be useful in the following scenarios: Disaster Recovery Scenarios: In disaster recovery scenarios, where replication of virtual machines between remote sites is necessary, the use of self-signed certificates can facilitate configuration without depending on constant domain connectivity or the loss of one. … Read more
Welcome, after having integrated the Waf Coraza 3.0.1 with HAProxy v2.4.2 via the coraza-spoa component with my previous guide “Installation and configuration HAProxy v2.4.22 with WAF Coraza SPOA on Ubuntu Server 22.04 LTS” and the OWASP ModSecurity Core Rule Set (CRS) v4.0, let’s proceed with the simulation of a real multi-domain environment.We will configure a … Read more
With the announcement of the end of development of ModSecurity in 2024, it is time to explore other alternatives.The solution recommended by OWASP is Coraza, compatible with CRS v3 and v4 rules. This guide aims to set up a waf on HAProxy v2.4.22 with a ready-to-use configuration, to get started for those who are not … Read more
I won’t spend much time explaining the functioning of a siem and the architecture of Wazuh, there is already this very well done article.So I will make a brief (as far as possible) preamble.In a company now more than ever, the importance of having a log collection and analysis system is necessary.There are many commercial … Read more
Let’s set up our Ubuntu 22.04 LTS Server for email notifications, configuring Postfix as relayhost(smarthost).So as to avoid that programs that use the default Ubuntu email system such as Wazuh, Nut, Smartmontool, script, etc., can send valid emails directly from our server and which are rightly reported as spam. All pre-configured configuration files are available … Read more
