Net/PC How to

There is a way that internal users can send web traffic out over an SSH tunnel, and it would bypass your firewall, allowing an end-user to surf a blocked website and transfer files undetected. This article shows how to decrypt SSH Tunneling Traffic and block SSH Tunneling Traffic in Palo Alto Firewall.

Step 1 Create Decryption policy

1. Go to Policies>Decryption and click Add to add Decrypting SSH.

2. Select trust as Source

3. Add untrust as Destination.

4.nCheck Decrypt in Options.

Step 2: Create a Security policy

1. Go to Policies>Security and click Add to add Block SSH Tunneling..

2. Add trust in Source.

3. Add untrust to Destination.

4. Add ssh-tunnel in Application.

5. Action set Deny, check Log at Session End in Log Settings

Step 3: Commit.

In this article, we will show you how to install ubuntu V20 on VMware ESXi V7. We have created a new VM for Linux and uploaded ubuntu ISO on the VMware Host.

1. In vSphere Client, start the VM.

2. VM is loading the ubuntu ISO and process the insulation.

3. Highlight the Language and click on Install Ubuntu.

4. Select Keyboard layout.

5. Select installation type, normal, minimal, download updates.

6. You have options to erase disk, Advanced features or Something else.

7. Click Continue when Write the changes to disks popup.

8. Select Time zone.

9. Create login credentials and VM name.

10. Installation is processing.

11. When finishing, click Restart Now. Now, you have the Linux ubuntu ready

Please view this step by step video:

1. Login O365 admin
2. Go to Security

3. Click on Policy

4. Click on Anti-spam.

5. Click on Anti-spam Inbound policy.

6. Click on Edit allowed and blocked senders and domains under Allowed and blocked senders and domains.

7. Click on Manage sender(s).

8. Click on +

9. Enter the email address and then Add senders.

10. Click Done to complete the settings.

1. Login vmware ESX1 Web Client

2. Select Host and then click on Create/Register VM

3. Select creation type, Create a new VM in our example.

4. Select a VM name and guest OS

5. Select storage.

6. Customize settings such as CPU, Memory, Hard Disk, SCSI Controller, SATA Controller, USB Controller, Network Adapter, CD/DVD Drive, and more.

7. Click Finish to create a VM. You should have a new VM listed on the Create/Register VM.

Please view this step by step video:

1. Get-Command: List all the commands available for use in your current session. For example, to list all commands with get-Win,-win*

2. Get-Service: show what services are installed on the system. For example, you want to list all running services, use Get-Service | Where-Object {$_.Status -eq “Running”}

3. Set-Location -Path [full path]: change directory. For example,

4. Get-TroubleshootingPack: Gets a troubleshooting pack or generates an answer file. For example: Get-TroubleshootingPack -Path “C:\Windows\Diagnostics\System\Networking”

Get-TroubleshootingPack Windowsupdate

5. Get-ChildItem: list all directories and files with information in the current directory. For example,

5. Test-NetConnection: You may use ping or telnet to test a host connection. With PowerShell Test-NetConnection , you can a specific port on a machine and route tracing.

6. Get-aduser: List All Users Password Expiration Date. For example,

get-aduser -filter * -properties passwordlastset, passwordneverexpires |ft Name, passwordlastset, Passwordneverexpires

Get-ADUser -filter {Enabled -eq $True -and PasswordNeverExpires -eq $False} –Properties "DisplayName", "msDS-UserPasswordExpiryTimeComputed" |
Select-Object -Property "Displayname",@{Name="ExpiryDate";Expression={[datetime]::FromFileTime($_."msDS-UserPasswordExpiryTimeComputed")}}

1. Download vCenter Server installer from VMware website.
2. For Windows, run installer.exe under VMware VCSA>vcsa-ui-installer>w32.

3. in vCenter Server Installer, click Install.

4. In Stage 1: Deploy vCenter Server, click Next.

5. Check I accept the terms of the license agreement and then Next.

6. In vCenter Server deployment target, enter ESXi host or vCenter Server IP or name, HTTPS ort, User name, and password.

7. Click Yes in Certificate Warning.

8. In Set up vCenter Server VM, enter the VM name, set root password

9.Select deployment size.

10. Select datastore.

11. Configure network settings

12. Click Finish to complete stage 1.

13. After deploying stage 1, click continue to start stage 2.

14. Click Next in Stage 2 Introduction.

15. Configure vCenter Server Time synchronization, and SSH.

16. Configure SSO

17. Configure SSO domain name, administrator credentials.

18. Configure Customer Experience Improvement Program (CEIP).

19. Click Finish to complete stage 2.

20. Click OK in Warning.

21. Click CLOSE when it completed.

To let FatPipe support to access FatPipe device, you may want to enable access to the FatPipe User Interface from the Internet. Here is how.

1. Login FatPipe web utility.
2. Select WAN under Interface.
3. Uncheck Remote Management and SSH under Services.
4. Click on Save. Note: if the Save is Gary out, it may be someone also login and you can’t save the change.

1. Sign in to Windows 10 with an administrator account.
2. In the search box on the taskbar, type Manage BitLocker and then select Open.

3. Click on Turn on BitLocker.

4.  You have two options: Save to a file and Print the recovery key.

5. In our case, we save it in a network drive

6. Check Encrypt entire drive.

7. There are two encryption modes: New encryption mode and Compatible mode.

8. Click Start encrypting yo encrypt the drive.

9. It depends on the drive size, it may take a while to process.

10. Click Close to complete BitLocker Drive encryption

1. Log in to your VMware ESXi V7 host via the Web Client by typing username root, password, and then click on the login button.

2. After login to VMware ESXi host, select Action menu, and then Services>Enable Secure Shell (SSH).

3. A warning message popup and you are ready to use SSH now.