# data[].attributes.headline
This competition used to be 2 seperate compeititions -  IT Support Technician & Network Infrastructure Technical

# data[].attributes.subject
This competition used to be 2 seperate compeititions -  IT Support Technician & Network Infrastructure Technical

# data[].attributes.body
https://www.netwrix.com/cisco_commands_cheat_sheet.html

# data[].attributes.attachment_link.readable_text
Almost all Cisco devices use Cisco IOS to operate and Cisco CLI to be managed. The basic CLI commands for all of them are the same, which simplifies Cisco device management. Here is a Cisco commands cheat sheet that describes the basic commands for configuring, securing and troubleshooting Cisco network devices.

Basic Configuration Commands

Troubleshooting Commands

Routing and VLAN Commands

switchport mode { access | trunk }
Configures the VLAN membership mode of a port. The access port is set to access unconditionally and operates as a non-trunking, single VLAN interface that sends and receives non-encapsulated (non-tagged) frames. An access port can be assigned to only one VLAN.
The trunk port sends and receives encapsulated (tagged) frames that identify the VLAN of origination. A trunk is a point-to-point link between two switches or between a switch and a router.

A global command that deﬁnes one of possibly multiple user names and associated passwords used for user authentication. It is used when the login local line conﬁguration command has been used.

enable password pass-value
A configuration mode command that deﬁnes the password required when using the enable command

switchport port-security mac-address {mac-addr | {sticky [mac-addr]}}

Used in interface configuration mode to add a MAC address to the list of secure MAC addresses. The "sticky" option configures the MAC addresses as sticky on the interface.

Monitoring and Logging Commands

# data[].attributes.attachment_link.description
Almost all Cisco devices use Cisco IOS to operate and Cisco CLI to be managed. The basic CLI commands for all of them are the same, which simplifies Cisco device management. Here is a Cisco commands cheat sheet that describes the basic commands for configuring, securing and troubleshooting Cisco network devices.

# data[].attributes.body
https://express.adobe.com/page/E67owRLaGDsMP/

# data[].attributes.attachment_link.readable_text
Now you must create the NAT pool ...

As already mentioned, there are many different ways of establishing NAT. In this example, we are going to configure a Cisco router in a manner similar to many domestic home routers. You will overload a single external (real world) IP address.

This IP address is 99.0.0.1 255.0.0.0 and is on the TOP router, on the connection facing the BOTTOM router. You have to create a pool and give it a name, in this example it has been called 'myPool' to ensure its obvious. You can configure a range of addresses - however you are fully 'overloading' one single address.
ip nat pool myPool 99.0.0.1 99.0.0.1 netmask 255.0.0.0
Next you need to connect this pool (on the outside) to the ACL that is set up for all of the addresses (on the inside).
ip nat inside source list 1 pool myPool overload
Working through the previous command - on the inside, you are using standard ACL > 1 for the inside source. Which is being overloaded on the pool myPool. Now that you have configured NAT, you still need to apply this to the inside and outside interfaces. Alas, if these were the only commands.

# data[].attributes.attachment_link.description
Now you must create the NAT pool ... As already mentioned, there are many different ways of establishing NAT. In this example, we are going to configure a Cisco router in a manner similar to many domestic home routers. You will overload a single external (real world) IP address.

# data[].attributes.body
https://express.adobe.com/page/3JBT7IyXEcyP0/

# data[].attributes.attachment_link.readable_text
Now, lets create the VPN

We will focus on the connection between X and Y, you can go back (download via the link) and look at A and B at your leisure. We are assuming that you now have packet tracer open and have done a show run (note, we saved this using 7.1.1).
Lets focus on X ...
You need to create an ACL to 'define' interesting traffic via IP - this will be the data that you will send encrypted down the tunnel. We are assuming that you are also comfortable with ACL's ... however, we do have a guide if you are interested.
access-list 110 permit ip 66.33.3.0 0.0.0.255 66.33.4.0 0.0.0.255
Looking at the above ACL - it is extended, it is IP based and you can see that we have the source local area network on X and the destination local area network on Y. If you look at the ACL on Y, you shouldn't be surprised to discover that it is the reverse.
access-list 110 permit ip 66.33.4.0 0.0.0.255 66.33.3.0 0.0.0.255
Next, you need to build the crypto policy ... this defines the encryption. Read the following numbered commands

First set the policy, defining the authentication and encryption. Note the number '1' this appears later. Then you need to agree a key exchange with the remote peer and define the transform set encryption.

1. crypto isakmp key Cisco12345 address 123.1.1.3

2. crypto ipsec transform-set Y-X esp-aes esp-sha-hmac

3. !

Then create a crypto map, this connects the policy '1' to the transform set and the key as well as match up any interesting traffic spotted by the access control list.

If you were to look at Y, you would see the same - yet the opposite. Which does of course make sense.

# data[].attributes.attachment_link.description
We will focus on the connection between X and Y, you can go back (download via the link) and look at A and B at your leisure. We are assuming that you now have packet tracer open and have done a show run (note, we saved this using 7.1.1).

# data[].attributes.body
https://lms.netacad.com/mod/url/view.php?id=52747790&redirect=1

# data[].attributes.attachment_link.description
Your email address belongs to an organization that also manages your Cisco account login.

# data[].attributes.body
https://cdn.cp.adobe.io/content/2/video/42591d3a-052f-4436-8757-56f2976455f5/embed?api_key=MarvelCP1

# data[].attributes.attachment_link.title
Creative Cloud Player (HLS-everywhere Player)

# data[].attributes.body
https://cdn.cp.adobe.io/content/2/video/c2cf87c4-9d49-4ce3-beb3-39296d483956/embed?api_key=MarvelCP1

# data[].attributes.headline
Configuring ASA Firewalls in Packet Tracer

# data[].attributes.subject
Configuring ASA Firewalls in Packet Tracer

# data[].attributes.attachment_link.title
Configuring ASA Firewalls using Packet Tracer

# data[].attributes.attachment_link.description
Share your videos with friends, family, and the world

# data[].attributes.attachment_link.readable_text
Welcome

Capture The Flags, or CTFs, are a kind of computer security competition.

Teams of competitors (or just individuals) are pitted against each other in a test of computer security skill.

Very often CTFs are the beginning of one's cyber security career due to their team building nature and competetive aspect. In addition, there isn't a lot of commitment required beyond a weekend.

In this guide/wiki/handbook you'll learn the techniques, thought processes, and methodologies you need to succeed in Capture the Flag competitions.

A project by the OSIRIS Lab at The NYU Tandon School of Engineering and CTFd LLC

# data[].attributes.attachment_link.description
The best place on the internet to take your first steps into security. Free courses to take you from zero to expert.

# data[].attributes.body
https://www.youtube.com/watch?v=pRf_uU0vrMM

# data[].attributes.attachment_link.title
How to Set Up a Windows Server 2019 Domain Controller

# data[].attributes.body
https://www.youtube.com/watch?v=-TsqAHUWdQU

# data[].attributes.attachment_link.title
How to Install and Setup DNS service | Windows Server 2019

# data[].attributes.body
https://www.youtube.com/watch?v=gsRPmqqFpGI

# data[].attributes.attachment_link.title
*NEW* Configuring Group Policy on Windows Server 2012 (Complete)

# data[].attributes.headline
Top 10 Group Policies to Prevent Breaches

# data[].attributes.subject
Top 10 Group Policies to Prevent Breaches

# data[].attributes.body
https://www.lepide.com/blog/top-10-most-important-group-policy-settings-for-preventing-security-breaches/

# data[].attributes.attachment_link.provider_name
Lepide Blog: A Guide to IT Security, Compliance and IT Operations

# data[].attributes.attachment_link.readable_text
There are some simple Group Policy Settings, which if appropriately configured, can help to prevent data breaches. You can make your organizational network safer by configuring the security and operational behavior of computers through Group Policy (a group of settings in the computer registry). Through Group Policy, you can prevent users from accessing specific resources, run scripts, and perform simple tasks such as forcing a particular home page to open for every user in the network.

Important Group Policy Settings to Prevent Breaches

Here is the list of top 10 Group Policy Settings:

1. Moderating Access to Control Panel

2. Prevent Windows from Storing LAN Manager Hash

3. Control Access to Command Prompt

4. Disable Forced System Restarts

5. Disallow Removable Media Drives, DVDs, CDs, and Floppy Drives

6. Restrict Software Installations

7. Disable Guest Account

8. Set Minimum Password Length to Higher Limits

9. Set Maximum Password Age to Lower Limits

10. Disable Anonymous SID Enumeration

In this article, you will learn why these Group Policy settings simply cannot be ignored.

1. Moderating Access to Control Panel

Setting limits on a computers' Control Panel creates a safer business environment. Through Control Panel, you can control all aspects of your computer. So, by moderating who has access to the computer, you can keep data and other resources safe. Perform the following steps:

Figure 1: Configuring Control panel settings through GPO

2. Prevent Windows from Storing LAN Manager Hash

Windows generates and stores user account passwords in "hashes." Windows generates both a LAN Manager hash (LM hash) and a Windows NT hash (NT hash) of passwords. It stores them in the local Security Accounts Manager (SAM) database or Active Directory.

The LM hash is weak and prone to hacking. Therefore, you should prevent Windows from storing an LM hash of your passwords. Perform the following steps to do so:

Figure 2: Configuring policy to not store LAN Manager hash value policy

3. Control Access to Command Prompt

Command Prompts can be used to run commands that give high-level access to users and evade other restrictions on the system. So, to ensure system resources' security, it's wise to disable Command Prompt.

After you have disabled Command Prompt and someone tries to open a command window, the system will display a message stating that some settings are preventing this action. Perform the following steps:

Figure 3: Prevent access to the command prompt window

4. Disable Forced System Restarts

Forced system restarts are common. For example, you may face a situation where you were working on your computer and Windows displays a message stating that your system needs to restart because of a security update.

In many cases, if you fail to notice the message or take some time to respond, the computer restarts automatically, and you lose important, unsaved work. To disable forced restart through GPO, perform the following steps:

Figure 4: No system auto-restart with logged on users

5. Disallow Removable Media Drives, DVDs, CDs, and Floppy Drives

Removable media drives are very prone to infection, and they may also contain a virus or malware. If a user plugs an infected drive to a network computer, it can affect the entire network. Similarly, DVDs, CDs and Floppy Drives are prone to infection.

It is therefore best to disable all these drives entirely. Perform the following steps to do so:

Figure 5: Deny access to all removable storage classes

6. Restrict Software Installations

When you give users the freedom to install software, they may install unwanted apps that compromise your system. System admins will usually have to routinely do maintenance and cleaning of such systems. To be on the safe side, it's advisable to prevent software installations through Group Policy:

Figure 6: Restricting software installations

7. Disable Guest Account

Through a Guest Account, users can get access to sensitive data. Such accounts grant access to a Windows computer and do not require a password. Enabling this account means anyone can misuse and abuse access to your systems.

Thankfully, these accounts are disabled by default. It's best to check that this is the case in your IT environment as, if this account is enabled in your domain, disabling it will prevent people from abusing access:

Figure 7: Disabling guest account

8. Set Minimum Password Length to Higher Limits

Set the minimum password length to higher limits. For example, for elevated accounts, passwords should be set to at least 15 characters, and for regular accounts at least 12 characters. Setting a lower value for minimum password length creates unnecessary risk. The default setting is "zero" characters, so you will have to specify a number:

Figure 8: Configuring minimum password age policy setting

9. Set Maximum Password Age to Lower Limits

If you set the password expiration age to a lengthy period of time, users will not have to change it very frequently, which means it's more likely a password could get stolen. Shorter password expiration periods are always preferred.

Windows' default maximum password age is set to 42 days. The following screenshot shows the policy setting used for configuring "Maximum Password Age". Perform the following steps:

Figure 9: Configuring maximum password age policy setting

10. Disable Anonymous SID Enumeration

Active Directory assigns a unique number to all security objects in Active Directory; including Users, Groups and others, called Security Identifiers (SID) numbers. In older Windows versions, users could query the SIDs to identify important users and groups. This provision can be exploited by hackers to get unauthorized access to data. By default, this setting is disabled, ensure that it remains that way. Perform the following steps:

1. In Group Policy Management Editor window, go to "Computer Configuration" "Policies" "Windows Settings" "Security Settings" "Local Policies" "Security Options".

2. In the right pane, double-click "Network Access: Do not allow anonymous enumeration of SAM accounts and shares" policy setting.

3. Choose 'Enabled' and then click 'Apply' and 'OK' to save your settings.

If you get these Group Policy settings correct, your organization's security will automatically be in a better state. Please make sure to apply the modified Group Policy Object to everyone and update the Group Policies to reflect them on all domain controllers in your environment.

# data[].attributes.attachment_link.title
Top 10 Most Important Group Policy Settings for Preventing Security Breaches

# data[].attributes.attachment_link.description
There are some simple Group Policy Settings, which if appropriately configured, can help to prevent data breaches. You can make your organizational network safer by configuring the security and operational behavior of computers through Group Policy (a group of settings in the computer registry).

# data[].attributes.body
https://www.youtube.com/watch?v=I1NZKtkW54U&ab_channel=TechMikeNY

# data[].attributes.attachment_link.title
How to Configure RAID for Dell PowerEdge Servers

# data[].attributes.body
https://www.youtube.com/watch?v=h3sxduUt5a8&ab_channel=MSFTWebCast

# data[].attributes.attachment_link.title
Setting up Active Directory in Windows Server 2019 (Step By Step Guide)

# data[].attributes.body
https://www.youtube.com/watch?v=JWsRbeeddfM&ab_channel=MSFTWebCast

# data[].attributes.attachment_link.title
How to Create and Link a Group Policy Object in Active Directory

# data[].attributes.body
https://overthewire.org/wargames/

# data[].attributes.attachment_link.readable_text
The wargames offered by the OverTheWire community can help you to learn and practice security concepts in the form of fun-filled games.
To find out more about a certain wargame, just visit its page linked from the menu on the left.

If you have a problem, a question or a suggestion, you can join us via chat.

Suggested order to play the games in

Each shell game has its own SSH port

Information about how to connect to each game using SSH, is provided in the top left corner of the page. Keep in mind that every game uses a different SSH port.

# data[].attributes.attachment_link.description
We’re hackers, and we are good-looking. We are the 1%.

# data[].attributes.body
https://www.youtube.com/watch?v=yuDXmMROH6Y&ab_channel=TechsavvyProductions

# data[].attributes.attachment_link.title
Task Manager Unveiled: IT Admins' Troubleshooting Toolkit

# data[].attributes.body
https://www.youtube.com/watch?v=s-E0ezzwSLo&ab_channel=cobuman

# data[].attributes.attachment_link.title
SCCM Microsoft Endpoint Configuration Manager for Entry Level Tech Support

# data[].attributes.body
https://youtu.be/JRH8JQJfquY

# data[].attributes.body
https://cssbattle.dev/

# data[].attributes.body
https://devchallenges.io/

# data[].attributes.attachment_link.title
devChallenges.io | Real-life Coding Challenges to become a Software Engineer

# data[].attributes.attachment_link.description
Web Development Resources and Community that help you to become a Web Developer by working with Real-life projects and practices. Founded, designed and developed by @thunghiemdinh

# data[].attributes.body
https://codepen.io/

# data[].attributes.body
https://www.codecademy.com/catalog/language/html-css

# data[].attributes.attachment_link.description
Codecademy is the easiest way to learn how to code. It&#39s interactive, fun, and you can do it with your friends.

# data[].attributes.body
https://www.w3schools.com/php/default.asp

# data[].attributes.attachment_link.description
W3Schools offers free online tutorials, references and exercises in all the major languages of the web. Covering popular subjects like HTML, CSS, JavaScript, Python, SQL, Java, and many, many more.

# data[].attributes.body
https://www.w3schools.com/html/

# data[].attributes.attachment_link.readable_text
Easy Learning with HTML "Try it Yourself"

With our "Try it Yourself" editor, you can edit the HTML code and view the result:
Click on the "Try it Yourself" button to see how it works.
HTML Examples

In this HTML tutorial, you will find more than 200 examples. With our online "Try it Yourself" editor, you can edit and test each example yourself!
Go to HTML Examples!
HTML Exercises

This HTML tutorial also contains nearly 100 HTML exercises.

HTML Quiz Test

Test your HTML skills with our HTML Quiz!
Start HTML Quiz!
My Learning

Track your progress with the free "My Learning" program here at W3Schools.

Log in to your account, and start earning points!

This is an optional feature. You can study W3Schools without using My Learning.

HTML References

At W3Schools you will find complete references about HTML elements, attributes, events, color names, entities, character-sets, URL encoding, language codes, HTTP messages, browser support, and more:

Kickstart your career

Get certified by completing the course

# data[].attributes.attachment_link.description
W3Schools offers free online tutorials, references and exercises in all the major languages of the web. Covering popular subjects like HTML, CSS, JavaScript, Python, SQL, Java, and many, many more.

# data[].attributes.body
https://www.freecodecamp.org/learn

# data[].attributes.body
https://cdn.cp.adobe.io/content/2/video/8b8e9c8c-545c-4f6a-a3f0-e24f1c6899c4/embed?api_key=MarvelCP1

# data[].attributes.attachment_link.title
Creative Cloud Player (HLS-everywhere Player)

# data[].attributes.body
https://www.hackthebox.com/

# data[].attributes.attachment_link.description
Where hackers level up! An online cybersecurity training platform allowing IT professionals to advance their ethical hacking skills and be part of a worldwide community. Join today and learn how to hack!

# data[].attributes.body
https://tryhackme.com/

# data[].attributes.attachment_link.readable_text
Exercises in every lesson

TryHackMe goes way beyond textbooks and focuses on fun interactive lessons that make you put theory into practice. You'll get an immersive learning experience with network simulations, intentionally vulnerable technology based on real world examples and more.

Beginner Friendly

New to security? No problem! We have learning paths that will teach you the fundamental cyber security skills, which will help set you up to land a job in cyber security.

Start Hacking Instantly

We give you all the tools you need to start learning. Access a machine with the security tools you'll need through the browser, and starting learning from anywhere at any time. All you need is an internet connection!

Real-world Networks

Take your cyber security training to the next stage by learning to attack and defend computer networks similar to those used by various organisations today.

# data[].attributes.attachment_link.description
TryHackMe is a free online platform for learning cyber security, using hands-on exercises and labs, all through your browser!

# data[].attributes.body
These resources are for you to download and use in your own time. They are by no means the answer to all your questions, but they will help. If you find additional resources, please share them with me - michael.lynch@bsdc.ac.uk

# data[].attributes.body
https://www.cisco.com/c/en/us/td/docs/security/asa/asa72/configuration/guide/conf_gd/start.html

# data[].attributes.attachment_link.readable_text
Getting Started

This chapter describes how to access the command-line interface, configure the firewall mode, and work with the configuration. This chapter includes the following sections:

* Getting Started with Your Platform Model

* Factory Default Configurations

* Accessing the Command-Line Interface

* Setting Transparent or Routed Firewall Mode

* Working with the Configuration

Getting Started with Your Platform Model

This guide applies to multiple security appliance platforms and models: the PIX 500 series security appliances and the ASA 5500 series adaptive security appliances. There are some hardware differences between the PIX and the ASA security appliance. Moreover, the ASA 5505 includes a built-in switch, and requires some special configuration. For these hardware-based differences, the platforms or models supported are noted directly in each section.

Some models do not support all features covered in this guide. For example, the ASA 5505 adaptive security appliance does not support security contexts. This guide might not list each supported model when discussing a feature. To determine the features that are supported for your model before you start your configuration, see the "Supported Platforms and Feature Licenses" section on page A-1 for a detailed list of the features supported for each model.

Factory Default Configurations

The factory default configuration is the configuration applied by Cisco to new security appliances. The factory default configuration is supported on all models except for the PIX 525 and PIX 535 security appliances.

For the PIX 515/515E and the ASA 5510 and higher security appliances, the factory default configuration configures an interface for management so you can connect to it using ASDM, with which you can then complete your configuration.

For the ASA 5505 adaptive security appliance, the factory default configuration configures interfaces and NAT so that the security appliance is ready to use in your network immediately.

The factory default configuration is available only for routed firewall mode and single context mode. See Chapter 3, "Enabling Multiple Context Mode," for more information about multiple context mode. See the "Setting Transparent or Routed Firewall Mode" section for more information about routed and transparent firewall mode.

This section includes the following topics:

* Restoring the Factory Default Configuration

* ASA 5505 Default Configuration

* ASA 5510 and Higher Default Configuration

* PIX 515/515E Default Configuration

Restoring the Factory Default Configuration

To restore the factory default configuration, enter the following command:

hostname(config)#configure factory-default [ip_address [mask]]

If you specify the ip_address, then you set the inside or management interface IP address, depending on your model, instead of using the default IP address of 192.168.1.1. The http command uses the subnet you specify. Similarly, the dhcpd address command range consists of addresses within the subnet that you specify.

After you restore the factory default configuration, save it to internal Flash memory using the write memory command. The write memory command saves the running configuration to the default location for the startup configuration, even if you previously configured the boot config command to set a different location; when the configuration was cleared, this path was also cleared.

Note This command also clears the boot system command, if present, along with the rest of the configuration. The boot system command lets you boot from a specific image, including an image on the external Flash memory card. The next time you reload the security appliance after restoring the factory configuration, it boots from the first image in internal Flash memory; if you do not have an image in internal Flash memory, the security appliance does not boot.

To configure additional settings that are useful for a full configuration, see the setup command.

ASA 5505 Default Configuration

The default factory configuration for the ASA 5505 adaptive security appliance configures the following:

* An inside VLAN 1 interface that includes the Ethernet 0/1 through 0/7 switch ports. If you did not set the IP address in the configure factory-default command, then the VLAN 1 IP address and mask are 192.168.1.1 and 255.255.255.0.

* An outside VLAN 2 interface that includes the Ethernet 0/0 switch port. VLAN 2 derives its IP address using DHCP.

* The default route is also derived from DHCP.

* All inside IP addresses are translated when accessing the outside using interface PAT.

* By default, inside users can access the outside with an access list, and outside users are prevented from accessing the inside.

* The DHCP server is enabled on the security appliance, so a PC connecting to the VLAN 1 interface receives an address between 192.168.1.2 and 192.168.1.254.

* The HTTP server is enabled for ASDM and is accessible to users on the 192.168.1.0 network.

The configuration consists of the following commands:

ASA 5510 and Higher Default Configuration

The default factory configuration for the ASA 5510 and higher adaptive security appliance configures the following:

* The management interface, Management 0/0. If you did not set the IP address in the configure factory-default command, then the IP address and mask are 192.168.1.1 and 255.255.255.0.

* The DHCP server is enabled on the security appliance, so a PC connecting to the interface receives an address between 192.168.1.2 and 192.168.1.254.

* The HTTP server is enabled for ASDM and is accessible to users on the 192.168.1.0 network.

The configuration consists of the following commands:

interface management 0/0

   ip address 192.168.1.1 255.255.255.0

   nameif management

   security-level 100

   no shutdown

asdm logging informational 100

asdm history enable

http server enable

http 192.168.1.0 255.255.255.0 management

dhcpd address 192.168.1.2-192.168.1.254 management

dhcpd lease 3600

dhcpd ping_timeout 750

dhcpd enable management

PIX 515/515E Default Configuration

The default factory configuration for the PIX 515/515E security appliance configures the following:

* The inside Ethernet1 interface. If you did not set the IP address in the configure factory-default command, then the IP address and mask are 192.168.1.1 and 255.255.255.0.

* The DHCP server is enabled on the security appliance, so a PC connecting to the interface receives an address between 192.168.1.2 and 192.168.1.254.

* The HTTP server is enabled for ASDM and is accessible to users on the 192.168.1.0 network.

The configuration consists of the following commands:

interface ethernet 1

   ip address 192.168.1.1 255.255.255.0

   nameif management

   security-level 100

   no shutdown

asdm logging informational 100

asdm history enable

http server enable

http 192.168.1.0 255.255.255.0 management

dhcpd address 192.168.1.2-192.168.1.254 management

dhcpd lease 3600

dhcpd ping_timeout 750

dhcpd enable management

Accessing the Command-Line Interface

For initial configuration, access the command-line interface directly from the console port. Later, you can configure remote access using Telnet or SSH according to Chapter 40, "Managing System Access." If your system is already in multiple context mode, then accessing the console port places you in the system execution space. See Chapter 3, "Enabling Multiple Context Mode," for more information about multiple context mode.

Note If you want to use ASDM to configure the security appliance instead of the command-line interface, you can connect to the default management address of 192.168.1.1 (if your security appliance includes a factory default configuration. See the "Factory Default Configurations" section.). On the ASA 5510 and higher adaptive security appliances, the interface to which you connect with ASDM is Management 0/0. For the ASA 5505 adaptive security appliance, the switch port to which you connect with ASDM is any port, except for Ethernet 0/0. For the PIX 515/515E security appliance, the interface to which you connect with ASDM is Ethernet 1. If you do not have a factory default configuration, follow the steps in this section to access the command-line interface. You can then configure the minimum parameters to access ASDM by entering the setup command.

To access the command-line interface, perform the following steps:

Step 1 Connect a PC to the console port using the provided console cable, and connect to the console using a terminal emulator set for 9600 baud, 8 data bits, no parity, 1 stop bit, no flow control.

See the hardware guide that came with your security appliance for more information about the console cable.

Step 2 Press the Enter key to see the following prompt:

hostname>

This prompt indicates that you are in user EXEC mode.

Step 3 To access privileged EXEC mode, enter the following command:

The following prompt appears:

Step 4 Enter the enable password at the prompt.

By default, the password is blank, and you can press the Enter key to continue. See the "Changing the Enable Password" section on page 8-1 to change the enable password.

The prompt changes to:

To exit privileged mode, enter the disable, exit, or quit command.

Step 5 To access global configuration mode, enter the following command:

The prompt changes to the following:

To exit global configuration mode, enter the exit, quit, or end command.

Setting Transparent or Routed Firewall Mode

You can set the security appliance to run in routed firewall mode (the default) or transparent firewall mode.

For multiple context mode, you can use only one firewall mode for all contexts. You must set the mode in the system execution space.

When you change modes, the security appliance clears the configuration because many commands are not supported for both modes. If you already have a populated configuration, be sure to back up your configuration before changing the mode; you can use this backup for reference when creating your new configuration. See the "Backing Up Configuration Files" section on page 41-8 . For multiple context mode, the system configuration is erased. This action removes any contexts from running. If you then re-add a context that has an existing configuration that was created for the wrong mode, the context configuration will not work correctly. Be sure to recreate your context configurations for the correct mode before you re-add them, or add new contexts with new paths for the new configurations.

If you download a text configuration to the security appliance that changes the mode with the firewall transparent command, be sure to put the command at the top of the configuration; the security appliance changes the mode as soon as it reads the command and then continues reading the configuration you downloaded. If the command is later in the configuration, the security appliance clears all the preceding lines in the configuration. See the "Downloading Software or Configuration Files to Flash Memory" section on page 41-3 for information about downloading text files.

* To set the mode to transparent, enter the following command in the system execution space:

hostname(config)#firewall transparent

This command also appears in each context configuration for informational purposes only; you cannot enter this command in a context.

* To set the mode to routed, enter the following command in the system execution space:

hostname(config)#no firewall transparent

Working with the Configuration

This section describes how to work with the configuration. The security appliance loads the configuration from a text file, called the startup configuration. This file resides by default as a hidden file in internal Flash memory. You can, however, specify a different path for the startup configuration. (For more information, see Chapter 41, "Managing Software, Licenses, and Configurations." )

When you enter a command, the change is made only to the running configuration in memory. You must manually save the running configuration to the startup configuration for your changes to remain after a reboot.

The information in this section applies to both single and multiple security contexts, except where noted. Additional information about contexts is in Chapter 3, "Enabling Multiple Context Mode."

This section includes the following topics:

* Saving Configuration Changes

* Copying the Startup Configuration to the Running Configuration

* Viewing the Configuration

* Clearing and Removing Configuration Settings

* Creating Text Configuration Files Offline

Saving Configuration Changes

This section describes how to save your configuration, and includes the following topics:

* Saving Configuration Changes in Single Context Mode

* Saving Configuration Changes in Multiple Context Mode

Saving Configuration Changes in Single Context Mode

To save the running configuration to the startup configuration, enter the following command:

hostname#write memory

Note The copy running-config startup-config command is equivalent to the write memory command.

Saving Configuration Changes in Multiple Context Mode

You can save each context (and system) configuration separately, or you can save all context configurations at the same time. This section includes the following topics:

* Saving Each Context and System Separately

* Saving All Context Configurations at the Same Time

Saving Each Context and System Separately

To save the system or context configuration, enter the following command within the system or context:

hostname#write memory

Note The copy running-config startup-config command is equivalent to the write memory command.

For multiple context mode, context startup configurations can reside on external servers. In this case, the security appliance saves the configuration back to the server you identified in the context URL, except for an HTTP or HTTPS URL, which do not let you save the configuration to the server.

Saving All Context Configurations at the Same Time

To save all context configurations at the same time, as well as the system configuration, enter the following command in the system execution space:

If you do not enter the /noconfirm keyword, you see the following prompt:

After you enter Y, the security appliance saves the system configuration and each context. Context startup configurations can reside on external servers. In this case, the security appliance saves the configuration back to the server you identified in the context URL, except for an HTTP or HTTPS URL, which do not let you save the configuration to the server.

After the security appliance saves each context, the following message appears:

`Saving context `b' ... ( 1/3 contexts saved ) '

Sometimes, a context is not saved because of an error. See the following information for errors:

* For contexts that are not saved because of low memory, the following message appears:

The context 'context a' could not be saved due to Unavailability of resources

* For contexts that are not saved because the remote destination is unreachable, the following message appears:

The context 'context a' could not be saved due to non-reachability of destination

* For contexts that are not saved because the context is locked, the following message appears:

Unable to save the configuration for the following contexts as these contexts are
locked.

context `a' , context `x' , context `z' .

A context is only locked if another user is already saving the configuration or in the process of deleting the context.

* For contexts that are not saved because the startup configuration is read-only (for example, on an HTTP server), the following message report is printed at the end of all other messages:

Unable to save the configuration for the following contexts as these contexts have
read-only config-urls:

context `a' , context `b' , context `c' .

* For contexts that are not saved because of bad sectors in the Flash memory, the following message appears:

The context 'context a' could not be saved due to Unknown errors

Copying the Startup Configuration to the Running Configuration

Copy a new startup configuration to the running configuration using one of these options:

* To merge the startup configuration with the running configuration, enter the following command:

hostname(config)#copy startup-config running-config

A merge adds any new commands from the new configuration to the running configuration. If the configurations are the same, no changes occur. If commands conflict or if commands affect the running of the context, then the effect of the merge depends on the command. You might get errors, or you might have unexpected results.

* To load the startup configuration and discard the running configuration, restart the security appliance by entering the following command:

Alternatively, you can use the following commands to load the startup configuration and discard the running configuration without requiring a reboot:

hostname/contexta(config)# clear configure all

hostname/contexta(config)# copy startup-config running-config

Viewing the Configuration

The following commands let you view the running and startup configurations.

* To view the running configuration, enter the following command:

* To view the running configuration of a specific command, enter the following command:

* To view the startup configuration, enter the following command:

Clearing and Removing Configuration Settings

To erase settings, enter one of the following commands.

* To clear all the configuration for a specified command, enter the following command:

hostname(config)#clear configure configurationcommand [level2configurationcommand]

This command clears all the current configuration for the specified configuration command. If you only want to clear the configuration for a specific version of the command, you can enter a value for level2configurationcommand.

For example, to clear the configuration for all aaa commands, enter the following command:

To clear the configuration for only aaa authentication commands, enter the following command:

* To disable the specific parameters or options of a command, enter the following command:

hostname(config)#no configurationcommand [level2configurationcommand] qualifier

In this case, you use the no command to remove the specific configuration identified by qualifier.

For example, to remove a specific nat command, enter enough of the command to identify it uniquely as follows:

* To erase the startup configuration, enter the following command:

* To erase the running configuration, enter the following command:

hostname(config)#clear configure all

Note In multiple context mode, if you enter clear configure all from the system configuration, you also remove all contexts and stop them from running.

Creating Text Configuration Files Offline

This guide describes how to use the CLI to configure the security appliance; when you save commands, the changes are written to a text file. Instead of using the CLI, however, you can edit a text file directly on your PC and paste a configuration at the configuration mode command-line prompt in its entirety, or line by line. Alternatively, you can download a text file to the security appliance internal Flash memory. See Chapter 41, "Managing Software, Licenses, and Configurations," for information on downloading the configuration file to the security appliance.

In most cases, commands described in this guide are preceded by a CLI prompt. The prompt in the following example is "hostname(config)#":

In the text configuration file you are not prompted to enter commands, so the prompt is omitted as follows:

For additional information about formatting the file, see Appendix C, "Using the Command-Line Interface."

# data[].attributes.attachment_link.title
Cisco Security Appliance Command Line Configuration Guide, Version 7.2 - Getting Started [Cisco ASA 5500-X Series Firewalls]

# data[].attributes.attachment_link.description
This chapter describes how to access the command-line interface, configure the firewall mode, and work with the configuration. This chapter includes the following sections: * Getting Started with Your Platform Model * Factory Default Configurations * Accessing the Command-Line Interface * Setting Transparent or Routed Firewall Mode * Working with the Configuration This guide applies to multiple security appliance platforms and models: the PIX 500 series security appliances and the ASA 5500 series adaptive security appliances.

# data[].attributes.body
https://www.netacad.com/courses/cybersecurity/cyberops-associate

# data[].attributes.attachment_link.title
Learn To Uncover Threats With CCNA Cybersecurity Operations | Networking Academy

# data[].attributes.attachment_link.description
With this course learn to detect cyber threats, develop problem solving skills, gain job-ready experience and prepare for certifications. Enroll today!

# data[].attributes.body
https://www.netacad.com/courses/cybersecurity/network-security

# data[].attributes.attachment_link.description
Develop skills to protect networks and prevent intrusions.

# data[].attributes.body
https://www.kali.org/tools/dvwa/

# data[].attributes.attachment_link.readable_text
version: 2.2.2 arch: all

dvwa

This package contains a PHP/MySQL web application that is damn vulnerable. Its main goal is to be an aid for security professionals to test their skills and tools in a legal environment, help web developers better understand the processes of securing web applications and to aid both students & teachers to learn about web application security in a controlled class room environment.

The aim of DVWA is to practice some of the most common web vulnerabilities, with various levels of difficulty, with a simple straightforward interface. Please note, there are both documented and undocumented vulnerabilities with this software. This is intentional. You are encouraged to try and discover as many issues as possible.

WARNING: Do not upload it to your hosting provider's public html folder or any Internet facing servers, as they will be compromised.

dvwa-start

dvwa-stop

# data[].attributes.attachment_link.description
This package contains a PHP/MySQL web application that is damn vulnerable. Its
main goal is to be an aid for security professionals to test their skills and
tools in a legal environment, help web developers better understand the
processes of securing web applications and to aid both students & teach…

# data[].attributes.body
https://picoctf.org/

# data[].attributes.attachment_link.readable_text
This is a two-week long timed CTF competition. Challenges increase in difficulty as players progress. All are welcome to join, but this CTF is recommended for players with some programming knowledge. Players with no previous programming or CTF experience should start with our noncompetitive picoGym challenges.

Timeline

Sign up for a picoCTF.org account at anytime.

Feb 1, 2023 - registration opens

March 14, 2023 12:00 PM EST - CTF opens

March 28, 2023 3:00 PM EST - CTF closes

Eligibility

Open to everyone:

Existing or new accounts at picoCTF.org

Age 13+

Prizes and awards may have requirements. See competition rules for details.

picoCTF would like to thank our sponsors for providing funds for continued development.

# data[].attributes.attachment_link.description
This is a two-week long timed CTF competition. Challenges increase in difficulty as players progress. All are welcome to join, but this CTF is recommended for players with some programming knowledge. Players with no previous programming or CTF experience should start with our noncompetitive picoGym challenges.

# data[].attributes.body
https://www.vulnhub.com/

# data[].attributes.attachment_link.description
VulnHub provides materials allowing anyone to gain practical hands-on experience with digital security, computer applications and network administration tasks.

# data[].attributes.body
https://bsdcollege-my.sharepoint.com/:f:/g/personal/michael_lynch_bsdc_ac_uk/EujPDQblErtMhqyAibwxSU8BqkW2YokCABxug2Gtp9XGvw?e=WXXJrE

# data[].attributes.body
https://bsdcollege-my.sharepoint.com/:f:/g/personal/michael_lynch_bsdc_ac_uk/EurpF4aBDilArsThj4gOXcQBppfTu8Jbujv-DrwrqQbRwQ?e=rJGsb0

# data[].attributes.body
Each Zip file contains everything all contestants were given in each competition. It may contain PDFs, DOCXs, VSDs, Packet Tracer files, etc.

# data[].attributes.attachment_link.keywords[]
worldskills uk learning lab: log in to the site

# data[].attributes.attachment_link.title
WorldSkills UK Learning Lab: Log in to the site

# data[].attributes.attachment_link.description
©2022 WorldSkills UK Registered charity in England at 332, Third Floor, 25 Wilton Road, London SW1V 1LW Charity number 1001586, company number 02535199, VAT registration number GB945610716

# data[].attributes.headline
World Skills - Digital, Business & Creative Competitions

# data[].attributes.subject
World Skills - Digital, Business & Creative Competitions

# data[].attributes.body
https://www.worldskillsuk.org/competitions-category/digital-business-creative/

# data[].attributes.attachment_link.readable_text
Sign up to receive our latest updates to your email

©2023 WorldSkills UK Registered charity in England at 332, Third Floor, 25 Wilton Road, London SW1V 1LW Charity number 1001586, company number 02535199, VAT registration number GB945610716

# data[].attributes.attachment_link.title
Digital, Business and Creative Archives - WorldSkills UK

# data[].attributes.attachment_link.description
Sign up to receive our latest updates to your email ©2023 WorldSkills UK Registered charity in England at 332, Third Floor, 25 Wilton Road, London SW1V 1LW Charity number 1001586, company number 02535199, VAT registration number GB945610716