<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>TSG Labs – Posts by Hans Study</title><description>Practitioner-focused technical writing on enterprise networks, OT and ICS security, physical security systems, Genetec Security Center, and the infrastructure work that sits between disciplines.</description><link>https://tsglabs.net/</link><language>en-CA</language><copyright>© Hans Study, The Study Group</copyright><item><title>Juniper EX Series Base Configuration for CCTV and Security Networks</title><link>https://tsglabs.net/juniper-ex-base-configuration-for-cctv-and-security-networks/</link><guid isPermaLink="true">https://tsglabs.net/juniper-ex-base-configuration-for-cctv-and-security-networks/</guid><description>Juniper EX series (Junos OS) configuration template: VLANs, SSH, AAA, Virtual Chassis, port security, BPDU guard, aggregated Ethernet, QoS, and syslog for physical security networks.</description><pubDate>Wed, 08 Apr 2026 00:00:00 GMT</pubDate><category>networking</category><author>hans@tsglabs.net (Hans Study)</author></item><item><title>ALE OmniSwitch 6360 and 6560 Base Configuration for CCTV and Security Networks</title><link>https://tsglabs.net/ale-omniswitch-base-configuration-for-cctv-and-security-networks/</link><guid isPermaLink="true">https://tsglabs.net/ale-omniswitch-base-configuration-for-cctv-and-security-networks/</guid><description>Alcatel-Lucent Enterprise OmniSwitch 6360/6560 (AOS 8) configuration template: VLANs, SSH, AAA, Virtual Chassis, port security, BPDU guard, link aggregation, QoS, and syslog for physical security networks.</description><pubDate>Wed, 04 Mar 2026 00:00:00 GMT</pubDate><category>networking</category><author>hans@tsglabs.net (Hans Study)</author></item><item><title>Aruba CX 6200 and 6300 Base Configuration for CCTV and Security Networks</title><link>https://tsglabs.net/aruba-cx-switch-base-configuration-for-cctv-and-security-networks/</link><guid isPermaLink="true">https://tsglabs.net/aruba-cx-switch-base-configuration-for-cctv-and-security-networks/</guid><description>Aruba CX 6200/6300 (AOS-CX) configuration template: VLANs, SSH, AAA, VSF, port security, BPDU guard, LACP LAG, QoS, and syslog for physical security networks.</description><pubDate>Wed, 11 Feb 2026 00:00:00 GMT</pubDate><category>networking</category><author>hans@tsglabs.net (Hans Study)</author></item><item><title>Cisco Catalyst 9200 and 9300 Base Configuration for CCTV and Security Networks</title><link>https://tsglabs.net/cisco-catalyst-9200-and-9300-series-base-configuration-template-for-cctv-and-security-networks/</link><guid isPermaLink="true">https://tsglabs.net/cisco-catalyst-9200-and-9300-series-base-configuration-template-for-cctv-and-security-networks/</guid><description>Complete Cisco Catalyst 9200/9300 configuration template: VLANs, SSH, AAA, port security, DHCP snooping, DAI, QoS, and syslog for physical security networks.</description><pubDate>Wed, 14 Jan 2026 00:00:00 GMT</pubDate><category>networking</category><author>hans@tsglabs.net (Hans Study)</author></item><item><title>Genetec Security Center: Server Configuration and Performance Tuning</title><link>https://tsglabs.net/configuring-and-tuning-genetec-security-center/</link><guid isPermaLink="true">https://tsglabs.net/configuring-and-tuning-genetec-security-center/</guid><description>Power plan, NIC buffers, SQL Server memory, antivirus exclusions, video drive configuration, and camera stream settings for Genetec servers.</description><pubDate>Tue, 04 Nov 2025 00:00:00 GMT</pubDate><category>genetec</category><author>hans@tsglabs.net (Hans Study)</author></item><item><title>Deploying Active Directory for Genetec Security Center Environments</title><link>https://tsglabs.net/genetec-security-center-active-directory-deployment/</link><guid isPermaLink="true">https://tsglabs.net/genetec-security-center-active-directory-deployment/</guid><description>AD prerequisites, OU structure, service accounts, Group Policy, Kerberos configuration, and common pitfalls for Genetec AD integration.</description><pubDate>Tue, 30 Sep 2025 00:00:00 GMT</pubDate><category>genetec</category><author>hans@tsglabs.net (Hans Study)</author></item><item><title>Genetec Security Center: Architecture, Roles, and Workstation Best Practices</title><link>https://tsglabs.net/genetec-security-center-architecture-roles-workstations/</link><guid isPermaLink="true">https://tsglabs.net/genetec-security-center-architecture-roles-workstations/</guid><description>Genetec Security Center server role architecture, sizing guidance, workstation optimization, federation, and common design mistakes.</description><pubDate>Tue, 26 Aug 2025 00:00:00 GMT</pubDate><category>genetec</category><author>hans@tsglabs.net (Hans Study)</author></item><item><title>Hardening Windows Server 2016, 2019, and 2022: Audit Logging</title><link>https://tsglabs.net/hardening-windows-server-2016-2022-environments-audit-logging/</link><guid isPermaLink="true">https://tsglabs.net/hardening-windows-server-2016-2022-environments-audit-logging/</guid><description>Advanced Audit Policy, domain controller GPO, event log sizing, Windows Event Forwarding, Sysmon, key event IDs, and log retention for Windows Server.</description><pubDate>Tue, 15 Jul 2025 00:00:00 GMT</pubDate><category>hardening</category><author>hans@tsglabs.net (Hans Study)</author></item><item><title>Hardening Windows Server 2016, 2019, and 2022: Hardening with Group Policy</title><link>https://tsglabs.net/hardening-windows-server-2016-2019-2022-environments-group-policy/</link><guid isPermaLink="true">https://tsglabs.net/hardening-windows-server-2016-2019-2022-environments-group-policy/</guid><description>GPO structure, password policy, Kerberos, NTLM restriction, Advanced Audit Policy, Defender, SMBv1 removal, and LAPS via Group Policy.</description><pubDate>Tue, 03 Jun 2025 00:00:00 GMT</pubDate><category>hardening</category><author>hans@tsglabs.net (Hans Study)</author></item><item><title>Hardening Windows Server 2016, 2019, and 2022: Getting Started</title><link>https://tsglabs.net/hardening-microsoft-windows-server-2019-and-2022-environments-getting-started/</link><guid isPermaLink="true">https://tsglabs.net/hardening-microsoft-windows-server-2019-and-2022-environments-getting-started/</guid><description>Baseline Windows Server hardening: update management, roles audit, local accounts, Windows Firewall, services, NTP, PowerShell logging, and TLS.</description><pubDate>Tue, 22 Apr 2025 00:00:00 GMT</pubDate><category>hardening</category><author>hans@tsglabs.net (Hans Study)</author></item><item><title>Hardening Windows Server 2016, 2019, and 2022: Other Considerations</title><link>https://tsglabs.net/hardening-windows-server-2016-2019-2022-guide/</link><guid isPermaLink="true">https://tsglabs.net/hardening-windows-server-2016-2019-2022-guide/</guid><description>TLS 1.2 enforcement, legacy exceptions, Remote Desktop hardening, SMB signing, LAPS, and certificate management for Windows Server.</description><pubDate>Tue, 18 Mar 2025 00:00:00 GMT</pubDate><category>hardening</category><author>hans@tsglabs.net (Hans Study)</author></item><item><title>Security Controls for CCTV and Access Control Networks</title><link>https://tsglabs.net/security-controls-cctv-access-control-networks/</link><guid isPermaLink="true">https://tsglabs.net/security-controls-cctv-access-control-networks/</guid><description>Ten practical security controls every physical security network needs. Hardening, VPN, segmentation, logging, credentials, MFA, and more.</description><pubDate>Tue, 25 Feb 2025 00:00:00 GMT</pubDate><category>cctv</category><author>hans@tsglabs.net (Hans Study)</author></item><item><title>Building a Network for CCTV and Access Control</title><link>https://tsglabs.net/building-a-cctv-network/</link><guid isPermaLink="true">https://tsglabs.net/building-a-cctv-network/</guid><description>Most physical security deployments I walk into are not engineered. They are assembled. Somebody ran cable, somebody plugged in cameras, somebody configured...</description><pubDate>Thu, 23 Jan 2025 00:00:00 GMT</pubDate><author>hans@tsglabs.net (Hans Study)</author></item><item><title>VLAN Segmentation for Physical Security Networks</title><link>https://tsglabs.net/vlan-segmentation-physical-security-networks/</link><guid isPermaLink="true">https://tsglabs.net/vlan-segmentation-physical-security-networks/</guid><description>The segmentation conversation is one I have had hundreds of times. Usually after something has already gone wrong. A workstation on the same network as the...</description><pubDate>Mon, 09 Dec 2024 00:00:00 GMT</pubDate><author>hans@tsglabs.net (Hans Study)</author></item><item><title>IP Addressing for Security Integrators: What You Actually Need to Know</title><link>https://tsglabs.net/ip-addressing-for-security-integrators/</link><guid isPermaLink="true">https://tsglabs.net/ip-addressing-for-security-integrators/</guid><description>The IP addressing conversation comes up on every deployment. Not always at the right time. I have walked into more than a few projects mid-installation whe...</description><pubDate>Tue, 12 Nov 2024 00:00:00 GMT</pubDate><author>hans@tsglabs.net (Hans Study)</author></item></channel></rss>