Cisco - Disable AnyConnect SSL VPN portal website

During these days I was wondering if it is possible to disable the Cisco ASA VPN page and continue to use SSL vpn with the client. These question was rasing due to security concerns about, a.e., AD user locking out. 

Using ASDM you need to follow below steps. 

Configuration > Connection Profiles > Check the box "Shut down portal login page"

This features seems to be confirmed in this very exhaustive article too:

https://www.linkedin.com/pulse/shutting-down-webvpn-portal-ftd-flexconfig-matt-albrecht

[original articles]

https://community.spiceworks.com/topic/2114883-disable-anyconnect-ssl-vpn-portal-website

https://www.cisco.com/c/en/us/td/docs/security/asa/asa94/config-guides/asdm74/vpn/asdm-74-vpn-config/webvpn-customizing.html

https://community.cisco.com/t5/vpn/disabling-clientless-browser-based-vpn/td-p/3065988

Cisco - How to backup Cisco switches using TFTP

There are several ways on how backup Cisco switches (or other vendors name) can be done.

One of them is downloading TFTP client server

https://tftp.en.uptodown.com/windows

Launching it and deciding where saving configuration files.

Be aware taking note about client IP.

Later you need to connect to switches using any SSH clients (I warmly suggest using these clients:

  1. Solar-PuTTY Connect to any server or device in your network with Solar-PuTTY for Windows. This is an interesting Putty or PuttyCM alternative.

https://www.alessandromazzanti.com/2018/11/freeware-solarwinds-software-free-tools.html

and execute below commands on switches:

Router#copy running-config tftp: 

Address or name of remote host []? 64.104.207.171

Destination filename [ce_2-confg]? backup_cfg_for_my_router

!!

1030 bytes copied in 2.489 secs (395 bytes/sec)

CE_2#

Where:

  • 64.104.207.171 must be substituted by your client ip address where tftp is under execution.

  • backup_cfg_for_my_router is backup file name that will be created on client where tftp is under execution.
You can configure automatic backups, you simple need to read all article below indicated.

[original article]

https://www.cisco.com/c/en/us/support/docs/ios-nx-os-software/ios-software-releases-122-mainline/46741-backup-config.html 

 

Tips - English video and audios subtitles (on Chrome)

There is a new native chrome option that permit to view videos or audios adding, in real time, subtitles (that are quite precise).

Here it is procedure to enable this option on chrome italian version.



Settings --> click advanced --> accessibility --> Real time subtitles 


[Original article]

https://www.hwupgrade.it/news/web/chrome-arrivano-i-sottotitoli-in-tempo-reale-per-qualsiasi-contenuto-sul-web_96356.html

Tips - How to run application with Administrative rights

If you need to execute single application with administrative rights (without giving Administrative end users permissions) you can proceed in this way:

C:\Windows\System32\runas.exe /user:computername\Administrator /savecred "X:\path\filename.exe" 

Be aware that changing previously syntax, with other executable program file, you will be able to execute it with administrative rights (creating a small security hole)



Windows 10 - HyperV installation for free

There is an interesting feature available on Windows 10.

HyperV capability permit you to easily create VM on your Windows 10 Laptop/PC/Workstation. Obviously same feature is available on Microsoft Windows server editions.

On Windows Server and Windows 10 your hardware must support virtualization.

You should decide if start using VM generation 1 or 2:

https://docs.microsoft.com/it-it/windows-server/virtualization/hyper-v/plan/should-i-create-a-generation-1-or-2-virtual-machine-in-hyper-v

https://www.windowserver.it/2014/03/hyper-v-vm-generation-2-deep-dive/

About ram there is dynamic memory feature.