— STUDY BYT3S · TSG LABS
Practical articles on enterprise networks, physical security systems, Windows hardening, and the infrastructure work that sits between disciplines.
Juniper EX series (Junos OS) configuration template: VLANs, SSH, AAA, Virtual Chassis, port security, BPDU guard, aggregated Ethernet, QoS, and syslog for physical security networks.
Read postAlcatel-Lucent Enterprise OmniSwitch 6360/6560 (AOS 8) configuration template: VLANs, SSH, AAA, Virtual Chassis, port security, BPDU guard, link aggregation, QoS, and syslog for physical security networks.
Read postAruba CX 6200/6300 (AOS-CX) configuration template: VLANs, SSH, AAA, VSF, port security, BPDU guard, LACP LAG, QoS, and syslog for physical security networks.
Read postComplete Cisco Catalyst 9200/9300 configuration template: VLANs, SSH, AAA, port security, DHCP snooping, DAI, QoS, and syslog for physical security networks.
Read postPower plan, NIC buffers, SQL Server memory, antivirus exclusions, video drive configuration, and camera stream settings for Genetec servers.
Read postAD prerequisites, OU structure, service accounts, Group Policy, Kerberos configuration, and common pitfalls for Genetec AD integration.
Read postGenetec Security Center server role architecture, sizing guidance, workstation optimization, federation, and common design mistakes.
Read postAdvanced Audit Policy, domain controller GPO, event log sizing, Windows Event Forwarding, Sysmon, key event IDs, and log retention for Windows Server.
Read postGPO structure, password policy, Kerberos, NTLM restriction, Advanced Audit Policy, Defender, SMBv1 removal, and LAPS via Group Policy.
Read postBaseline Windows Server hardening: update management, roles audit, local accounts, Windows Firewall, services, NTP, PowerShell logging, and TLS.
Read postTLS 1.2 enforcement, legacy exceptions, Remote Desktop hardening, SMB signing, LAPS, and certificate management for Windows Server.
Read postTen practical security controls every physical security network needs. Hardening, VPN, segmentation, logging, credentials, MFA, and more.
Read postMost physical security deployments I walk into are not engineered. They are assembled. Somebody ran cable, somebody plugged in cameras, somebody configured...
Read postThe segmentation conversation is one I have had hundreds of times. Usually after something has already gone wrong. A workstation on the same network as the...
Read postThe IP addressing conversation comes up on every deployment. Not always at the right time. I have walked into more than a few projects mid-installation whe...
Read post