Posts

ClearPass - Network Access Control (NAC) based on Windows Client OS Version and Build number

Image
How to manage Windows client network access based on their OS version and build number in CPPM Enforcement Policies Summary:  for enforcement policy to be based on "Windows OS Build version" you will need to implement OnGuard, and via the Health Check Service you will be able to witness the Windows Build version.  You will need to create a new Endpoint record to store these details, then create an Enforcement Profile to store the information in the EndpointDB.  From there you can then use roll mapping policies that reference the build number in your services. From CPPM > Monitoring > Live Monitoring > Access Tracker >  find a relevant Source = WEBAUTH, Service = Health Check Service record and open it to the Input tab Scroll down to the Computed Attributes section, here you can find version information collected by OnGuard agent in the Endpoint such as: Host:      OSArch                x86_64 Host:      OSName                Microsoft Windows 10 Enterprise Ed

VMWare Fusion Series - Hide Windows VM Apps from your Mac OSX desktop when sharing your Desktop

Image
This blog explains how to declutter your OSX desktop of Windows VM shared desktop files If you are sharing your desktop between OSX and "Windows 10" like this: Then you may see all your windows desktop APPs on your MAC Desktop, not a great look.  I might like to see some, but certainly not all. Solution 1: "If you want to keep Desktop Sharing" Move all your Windows desktop icons from "This PC > Desktop" to the "Public > Public Desktop" folder within Windows 10 itself. open two "Windows Explorer" windows side-by-side 1 st  window: navigate to "This PC > Desktop" 2 nd  window: navigate to "This PC > Local Disk (C:) Users > Public then "Desktop" Drag and drop the desired shortcuts from the 1 st  window to the 2 nd  window When you delete the shortcuts from the  1 st  window, you will see the icons gone from your Mac desktop I'm not sure if it is possible to get rid of the desktop.ini or rec

PowerPoint VBA Series - How to loop through each PPTX's Slide Master(s) and it's related Layouts

Image
Looping through Slide Master Layouts Summary: what is demonstrated in this example? determine how many, then loop through how many Slide Masters you have determine how many, then loop through each custom layout of each Slide Master determine if any shape is out of bounds of the Slide Master height if the shape meets certain required conditions set the activewindow so the user can see the slide being examined select the shape with your matching conditions, making it visible to the use later call a subroutine/function to act on your shape pass variables to a subroutine use a case statement that evaluates your shape.type use a msgbox to ask to user what do do with the matching shape If you need to use VBA to update your Slide Master and it's Layouts First, there may be more than one Slide Master, and each SM will likely have multiple layouts. modify the SM, then loop through each of it's layouts to modify them as well repeat for each SM, if more than one exists In the following ex

ArubaOS 8.x AP Console Protection

Image
Recent versions of ArubaOS 8.x   have introduced the concept of AP console protection.   This includes default enablement of: AP console protection (a password is required to access the CLI) a randomized password (is automatically applied to protect your console) To see that randomized password: find your AP's Controller on your Mobility Conductor (formerly known as Mobility Master) #cd /mm #show ap database find the AP your interested in, notice it's Group and switch IP (MM-1) [mm] # show ap database             AP Database ----------- Name  Group    AP Type  IP Address   Status    Flags  Switch IP    Standby IP ----  -----    -------  ----------   ------    -----  ---------    ---------- AP1    default   335      10.1.13.150  Up 9m:0s  2      10.1.13.100   0.0.0.0 #logon " your switch IP " notice you just performed a SSO logon to your gateway/controller on your Mobility Controller #show ap-group < your ap- group > | include "AP system profile" noti

OSX Series - Apple Mac Wireless Trackpad Insanity Solved

Image
Ok, so my wireless trackpad is kind of like my sword, shield and helmet, if i happened to be a Roman Legionary soldier.  I think that makes it clear, it must work well, or life is not good.  I use ZOOM all the time with my BOSE QC 35...  the best headphones I have used yet... However... I noticed that when i am using the BOSE with bluetooth on my 2019 MBP, along with wireless keyboard and trackpad, the trackpad performance was terrible.   Accuracy of movement and clicks was hit and miss, mostly miss.   What is going on?  I used this for months without issue, then suddenly I have problems.  It turns out there was a simple fix... "I am still on Catalina 10.15.7, here was my fix:" Open "System Preferences" Click on "General", look near the bottom and ... unclick "Allow Handoff between this Mac and your iCloud devices" This immediately improved my trackpad performance. Now I keep this disabled during ZOOM calls, and re enable it as required when I wa

Static IVRF Route Leaking - AOS-CX 10.04 - Animation

Image
Animation of a Static iVRF route leaking implementation using ArubaOS-CX   Watch an animated lab implementation of static Inter-VRF route leaking on AOS-CX note: this was tested using 10.04.1000 firmware

NET::ERR_CERT_INVALID Issues Using AirWave or NetEDIT with Chrome

Image
Using Chrome to login to Aruba Airwave or NetEdit with Unsupported Certificate.   Lately Chrome, Opera, Safari, etc... all but Firefox won't allow connection to ArubaNetworks Airwave with it's self-signed cert installed.  I has this issue with Airwave 8.2.11.  This also works with for similar errors on NetEdit 2.04. There is a workaround for Chrome...  while you are stuck with this issue:   NET::ERR_CERT_INVALID Click anywhere on the rendered page with the error, and simply type: thisisunsafe no need to press enter, just type it in, and you can proceed without probems!!! Credit to Hai Zheng of Twitter for this tip !!! If you think I should add or remove any information from this list, please let me know your thoughts.