笨笨龍的網誌

 Fortigate 啟用 Fortigate IPS, DNS/WEB Filter, Domain & IP Reputation 相關功能 在 Fortigate 要使用一些功能，必須先到［Feature Visibility] 中啟用該功能。 DNS Filter Apply DNS category filtering, URL filtering to control user's access to web resources. Set up DNS Filter Profiles (Security Profiles > DNS Filter) and add them to Firewall Policies or add them to a DNS Server on a FortiGate interface. Some features require a subscription to FortiGuard Web Filtering. Web Filter Apply web category filtering, URL filtering, and content filtering to control user's access to web resources. Set up Web Filter Profiles (Security Profiles > Web Filter) and add them to Firewall Policies. Some features require a subscription to FortiGuard Web Filtering. 前兩項 ，個人認為比較偏向 Client (Outgoing)，避免去到惡意的網站或網址 Domain & IP Reputation Enable the Reputation Lookup feature. This page allows querying of reputations for IPs or FQDNs as classified in FortiGuard databases. Databases require a valid FortiGuard subscription. Int...

如何建立外部的 IP 封鎖清單 # Explame Paltfrom: Fortigate 20xE / 6.2.11 Ref: Fortigate Threat feeds(6.2.x) Ref: External Block List (Threat Feed) – Policy(6.2.0)   Ref: All Cybercrime IP Feeds by FireHOL [Security Fabric] → [Fabric Connectors]  → [Create New] → [IP Address] 以 [https://raw.githubusercontent.com/ktsaou/blocklist-ipsets/master/firehol_level1.netset] 為 List 來源 在 Policy 引用 (記得 Block Deny Policy 要在前面) 建議搭配 [Intrusion Prevention]及其Block [Botnet C&C]、DNS Filter、Web Filter

TightVnc 下載網址： https://www.tightvnc.com/download.php 安裝 TightVnc： 以 Listening Mode 將畫面丟給協助者：

 Ref:  Prevent indexing Microsoft Office Outlook [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search] 新增 "PreventIndexingOutlook" (REG_DWORD) =1 即可禁止 Windows Search 對 Outlook 編製索引，進而使 outlook 使用內建的方式搜尋。 因為沒有索引，所以搜尋速度會很慢，但不怕出問題。

Ref:    Guidance for configuring IPv6 in Windows for advanced users Article 03/24/2022 5 minutes to read 7 contributors Windows Vista, Windows Server 2008, and later versions of Windows implement RFC 3484 and use a prefix table to determine which address to use when multiple addresses are available for a Domain Name System (DNS) name. By default, Windows favors IPv6 global unicast addresses over IPv4 addresses. Applies to:    Windows 10 - all editions, Windows Server 2019, Windows Server 2016, Windows Server 2012 R2 Original KB number:    929852 Summary It is common for IT administrators to disable IPv6 to troubleshoot networking-related issues such as name resolution issues.  Important Internet Protocol version 6 (IPv6) is a mandatory part of Windows Vista and Windows Server 2008 and newer versions. We do not recommend that you disable IPv6 or its components. If you do, some Windows components may not function. We recommend using  Prefer IPv4 ove...

  Office 2021 LTSC 佈署 & 離線安裝檔製作 1.      下載 Office Deployment Tool ，執行並解壓縮，取得 setup.exe ODT 安裝檔。 將 setup.exe 放置欲製作離線安裝的目錄，如 「 D:\ Office2021LTSCx64_KMS_tw 」 2.      到 Office 自訂工具網站 建立安裝設定檔匯出後，放置上述目錄下。 假設為「 Office2021LTSCx64_KMS_tw.xml 」 安裝設定可以指定欲安裝的版本 (x64/x86) 、語言 … 3.      將「 Office2021LTSCx64_KMS_tw.xml 」所需檔案下載： setup /download Office2021LTSCx64_KMS_tw.xml 程式會在背景下載，產生子目錄「 office 」 4.      建立安裝批次檔，如：「 Office2021LTSCx64_KMS_tw.bat 」： setup /configure Office2021LTSCx64_KMS_tw.xml

  1.          安裝「大量啟用服務」 Ø   GUI ： Ø   PowerShell ： Install-WindowsFeature -Name VolumeActivation -IncludeAllSubFeature -IncludeManagementTools 2.          安裝 Windows Server 的 KMS Key Ø   PowerShell ： slmgr /ipk <Windows_Server KMS Host key> 3.          啟用 KMS Server Ø   PowerShell ： slmgr /ato 4.          將 KMS Server 公布到公司的 DNS Server ，方便 client 自動啟用 Ø   PowerShell ： slmgr /sdns 5.          重啟「 Software Protection 」服務 Ø   PowerShell ： Restart-Service -Name sppsvc 6.          檢查授權資訊 Ø   PowerShell ： slmgr.vbs /dlv 注意描述部分是否已授權，且是指定的授權通道 7.           要啟用 Office 大量授權，需下載相對版本的「Microsoft Office 大量授權套件」