There are issues with some drivers for Windows 10 and Windows 11 when using IPsec VPN. The IPsec tunnel cannot be established. On both operating systems the issue is related to the driver of the network card. The problematic driver was deployed via Windows Update. In many cases the network…
We have recently seen an accumulation of problems with IPSec VPN tunnels. The problem was recognized by Swisscom and fixed with a new firmware. Further information can be found in the release notes (on this page). The firmware version from which the problem was fixed is: 9.52.12 B16++ (June 2023).
On Mai 2021, Let’s Encrypt issued a note about the expiration of their DST Root CA X3:https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/ Now that this root certificate has expired (2021-09-30), your systems might issue a warning when connecting to sites using Let’s Encrypt certificates. To fix this glitch on a general client, follow the instructions…
In der Schweiz wurde in den letzten Jahren ein immer grösseres Augenmerk auch von politischer und staatlicher Seite auf die Cybersicherheit gelegt. So wurden die zuständigen Stellen reorganisiert und ausgebaut. Ebenfalls haben die zuständigen Stellen online Präsenzen mit vielen nützlichen Informationen geschaffen. Wir möchten euch hier die wichtigsten Info-Seiten, welche…
If you want to configure rules for Saas services on the PaloAlto Firewall, you can do this using the App ID for the particular service, or you can use the IP addresses, Domains or URLs of the service in the policy. However, since Saas services typically do not use only…
Microsoft has released KB5003646 on the 6th of June 2021. Part of this update is a security hardening measurement to align with recommendations as a conclusion out of CVE-2021-31958. As a known issue of this KB5003646, microsoft has noted in the release notes: “After installing this or later updates, apps…
In the last few days, more and more articles about vulnerabilities in the Wifi area have appeared. These FragAttacks (fragmentation and aggregation attacks) which is a collection of new security vulnerabilities affects Wi-Fi devices from different vendors. heise.de: FragAttacks: Neue Angriffe gefährden nahezu alle WLAN-Geräte (German article) There is a…
Unser letzter Beitrag zur Konfiguration einer Fortigate, um zuhause auch Swisscom TV durch die Fortigate zu bekommen, ist schon eine zeitlang her. Deswegen hier mal wieder ein aktueller Beitrag mit einer Fortigate auf FOS 7.0.0 (der auch mit 6.4.5 getestet wurde). Aber Vorsicht, mit dem Swisscom Centro Business oder Centro…
Let’s mention the important things first: Please patch you vulnerable Exchange 2013, 2016 and 2019 immediately! The page msxfaq has published an infosite to this vulnerability including the instructions how to fix your Exchange. Even though we, as Boll Engineering AG, are not associated in any way with the affected…
During the lifecycle of firewalls, they are often replaced with a newer model, but you would like to keep the configuration. In this case, there are several possibilities, which we present in this blog post: 1. FortiConverter Service2. FortiConverter Tool3. Partial Config Transfer4. Full Config Transfer Den deutschen Artikel dazu…
Sind Sie interessiert, den BOLL Blog als RSS Feed zu abonnieren?