Namens het TopIT-team wensen wij u fijne Paasdagen toe!
<br>
vrijdag 18 april 2014
vrijdag 11 april 2014
Officieel Statement NetASQ betreffende de Heartbleed bug.
Critical vulnerability on OpenSSL
(CVE-2014-0160) that may cause sensitive data leaks – Heartbleed bug
Severity: HighExploitation: SimpleImpact: Retrieval of sensitive data
A vulnerability in the SSL/TLS Heartbeat extension on OpenSSL may allow malicious users to read 64 KB of memory on affected systems. Memory that can be accessed in this manner may contain sensitive information such as user session cookies or, worse, the server’s private key. The Heartbeat extension (RFC6520) is enabled by default
This vulnerability affects all systems running on SSL/TLS in versions OpenSSL_1.0.1 up to OpenSSL_1.0.1f inclusive, as well as 1.0.2-beta versions. It will be fixed in version 1.0.1g of OpenSSL.
More informations :Advisory OpenSSL
Reference page that shows the fault :http://heartbleed.com/
Arkoon Netasq solutions affected
* v8.x and v9.0.x versions are not affected
Solution and workaround for products in the Netasq range.
The exploitation of the vulnerability on a protected server or on the product itself can be blocked proactively by configuring the action of the alarm Invalid SSL packet to “Block” in all active IPS inspection profiles. For information, this alarm is set to “Block” by default.
All filter rules relating to traffic that uses SSL must have an active IPS protection profile.
Example of the configuration:
A corrective version (v 9.1.2.3) that will fix this vulnerability will be published shortly.
TheInvalid SSL packetsignature provides 0-day protection from the Heartbleed vulnerability for internal servers using OpenSSL and protected by a Netasq product.
Thank youthe Arkoon Netasq team
Arkoon-Netasq©Copyright 2014 - All rights reserved
<br>
woensdag 2 april 2014
Gigaset Q Promotion, N510 IP PRO-basisstation gratis!
Als Gigaset pro-partner heeft u het voordeel om uw klanten altijd producten van hoge kwaliteit te kunnen aanbieden. De nieuwe Q Promotion biedt u nu nog een ander voordeel.
Bij aankoop van twee S510H PRO-handsets ontvangt u een N510 IP PRO-basisstation gratis! Deze aanbieding is geldig tot en met 30 september 2014.
Profiteer vanaf vandaag van dit aantrekkelijke aanbod.
Met vriendelijke groet,
Uw Gigaset pro Team
<br>
