Priveon Labs Security Blog

AnyConnect Secure Mobility Client version 3.1 - Untrusted VPN Server blocked

Brandon Culler — Thu, 17 Jan 2013 13:34:50 +0000

With the increase of targeted attacks against mobile users on untrusted networks, Cisco has improved the security protections in the AnyConnect Secure Mobility client version 3.1 to help prevent serious security breaches. The default client behavior has…

Original post.

Cisco ACS v5 should be able to query only desired Domain Controllers – Active Directory/DNS Workaround

Brandon Culler — Thu, 08 Nov 2012 20:38:21 +0000

Background:Currently in ACS 5.x, ACS queries DNS in order to get a list of all the Domain Controllers in the domain and then authenticates against all of them. In a typical Enterprise deployment, it would be common to have a Domain Controller at each…

Original post.

Changing Tivoli Endpoint Manager service startup from Automatic (Delayed Start) to Automatic

Fred Parks — Thu, 12 Jan 2012 15:59:41 +0000

Background While working in an environment with TEM (Tivoli Endpoint Manager - formerly BigFix) and Cisco's NAC (Network Admission Control) technology, I ran into an issue with Windows 7 machines not being allowed to pass through NAC after a TEM client…

Original post.

Security Patch Breaks Printing in Outlook 2007 - Recalled by Microsoft

Fred Parks — Mon, 18 Apr 2011 13:52:36 +0000

Anybody who installed Kb2509470 last week and happened to have Outlook 2007 may have run into a rather bizarre issue trying to print from Outlook. When attempting to print or generate a print preview from within Outlook, the user would get the error mess…

Original post.

User account not shown in Active Directory unless Advanced Mode enabled - Cisco Unity is the Culprit

Fred Parks — Mon, 18 Apr 2011 12:56:31 +0000

I recently ran into a situation where certain users in Active Directory were just not showing up for some administrators while other admins could see them just fine. Upon further investigation it became evident that if the Advanced Mode of Active Directo…

Original post.