Posts

Showing posts from August, 2020

AWS Notes

Rekognition Amazon Rekognition makes it easy to add image and video analysis to your applications using proven, highly scalable, deep learning technology that requires no machine learning expertise to use.  https://aws.amazon.com/rekognition/?blog-cards.sort-by=item.additionalFields.createdDate&blog-cards.sort-order=desc Internet Gateway An internet gateway is a horizontally scaled, redundant, and highly available VPC component that allows communication between your VPC and the internet. An internet gateway serves two purposes: to provide a target in your VPC route tables for internet-routable traffic, and to perform network address translation (NAT) for instances that have been assigned public IPv4 addresses.  https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Internet_Gateway.html Elastic Load Balancer Elastic Load Balancing automatically distributes incoming application traffic across multiple targets, such as Amazon EC2 instances, containers...

AWS Inspector VS AWS Trusted Advisor VS CloudTrail

What Is Amazon Inspector?  Amazon Inspector is an automated security assessment service that helps improve the security and compliance of applications deployed on AWS. Amazon Inspector automatically assesses applications for vulnerabilities or deviations from best practices. After performing an assessment, Amazon Inspector produces a detailed list of security findings prioritized by level of severity. These findings can be reviewed directly or as part of detailed assessment reports which are available via the Amazon Inspector console or API. AWS Inspector, Is used for inspecting EC2 instances for vulnerabilities. What Is AWS Trusted Advisor ?  An online resource to help you reduce cost, increase performance, and improve security by optimizing your AWS environment, Trusted Advisor provides real time guidance to help you provision your resources following AWS best practices. Advisor will advise you on Cost Optimization, Performance, Security, Fault Tolerance. ...

Cisco ISE Upgrade steps

Below commands to upgrade from cli – #application upgrade prepare <ise bundle name> #application upgrade proceed Installing patch #patch install <ise patch name> #show logging system ade/ADE.log – to check the upgrade status Services status check #show application status ise Verification #show  version Upgrade Checklist.   Guidelines to Minimize Upgrade Time and Maximize Efficiency during Upgrade Validate Data to Prevent Upgrade Failures Change the Name of Authorization Simple Condition if a Predefined Authorization Compound Condition with the Same Name Exists Change VMware Virtual Machine Guest Operating System and Settings Remove Non-ASCII Characters From Sponsor Group Names Firewall Ports that Must be Open for Communication Back Up Cisco ISE Configuration and Operational Data from the Primary Administration Node Back Up System Logs from the Primary Administration Node CA Certifi...