You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardexpand all lines: _posts/2024-11-26-eap-tls.md
+7-9
Original file line number
Diff line number
Diff line change
@@ -5,8 +5,6 @@ title: Enhancing WiFi Security with EAP-TLS
5
5
6
6

7
7
8
-
# **🔒 Enhancing WiFi Security with EAP-TLS**
9
-
10
8
---
11
9
12
10
## **Introduction**
@@ -17,11 +15,11 @@ This post covers the motivations behind this initiative, the technical approach,
17
15
18
16
---
19
17
20
-
## **🚀 Why Choose EAP-TLS?**
18
+
## **🔑 Why Choose EAP-TLS?**
21
19
22
20
Traditional WiFi security measures, such as password-based authentication, often fall short against advanced threats like phishing or brute force attacks. **EAP-TLS**, by leveraging digital certificates, ensures that only authorized devices can connect to the network.
23
21
24
-
### 🔑 Benefits of EAP-TLS:
22
+
### Benefits of EAP-TLS:
25
23
-**Stronger Security**: Certificates replace passwords, mitigating risks associated with weak or stolen credentials.
26
24
-**Improved User Experience**: No need for users to manage complex passwords—authentication is seamless.
27
25
-**Scalability**: Ideal for large organizations with diverse devices and users.
@@ -44,21 +42,21 @@ To achieve this, we integrated:
44
42
45
43
---
46
44
47
-
## **⚙️ Crafting the Solution**
45
+
## **🔐 Crafting the Solution**
48
46
49
47
### **1. Building the Foundation with ADCS**
50
48
The backbone of our solution was a Certificate Authority (CA). Using **Active Directory Certificate Services (ADCS)**, we set up an enterprise root CA named `Agicap-CA`. This CA handles certificate issuance, ensuring only authenticated devices can access the network.
51
49
52
50
### **2. Automating Certificate Management with SCEP**
53
51
To simplify certificate distribution, we implemented **Simple Certificate Enrollment Protocol (SCEP)**. SCEP automates certificate issuance and renewal, reducing manual effort and minimizing errors.
54
52
55
-
### **3. 🔐 Secure Authentication with FreeRADIUS**
53
+
### **3. Secure Authentication with FreeRADIUS**
56
54
**FreeRADIUS**, deployed on Debian servers, acts as the authentication server. Configured to trust `Agicap-CA`, FreeRADIUS ensures that only devices with valid certificates can access the WiFi network.
57
55
58
-
### **4. 📡 Network Management with Meraki**
56
+
### **4. Network Management with Meraki**
59
57
Using Meraki's dashboard, we uploaded the root CA certificate (`Agicap-CA`) and configured the SSID to interact securely with FreeRADIUS servers. This guarantees that only authenticated devices connect to our network.
60
58
61
-
### **5. 📱 Centralized Device Management with Intune**
59
+
### **5. Centralized Device Management with Intune**
62
60
With **Microsoft Intune**, we distributed root certificates and WiFi profiles across:
63
61
-**Windows**
64
62
-**macOS**
@@ -67,7 +65,7 @@ With **Microsoft Intune**, we distributed root certificates and WiFi profiles ac
67
65
68
66
This approach ensures consistent security policies and seamless onboarding for users.
69
67
70
-
### **6. 🌩️ Deploying on Azure with Terraform**
68
+
### **6. Deploying on Azure with Terraform**
71
69
For scalability and high availability, we deployed FreeRADIUS servers on **Azure** using **Terraform**. Load balancers ensure reliability, while infrastructure as code simplifies updates and scaling across regions.
Copy file name to clipboardexpand all lines: _posts/2024-11-26-network.md
+3-1
Original file line number
Diff line number
Diff line change
@@ -3,10 +3,12 @@ layout: post
3
3
title: Networking for a New Office
4
4
---
5
5
6
-
# **🌐 Building a Robust Network for Our New Italy Office: From Concept to Completion**
6
+

7
7
8
8
---
9
9
10
+
## **Introduction**
11
+
10
12
Expanding to a new office location is an exciting milestone, but it also comes with the critical responsibility of establishing a secure and efficient network infrastructure. Recently, I had the opportunity to lead the complete network installation for Agicap's new office in Italy. This project encompassed everything from initial planning to the seamless integration of advanced networking components. Here's a glimpse into why we undertook this endeavor, how we executed it, and the impressive outcomes we've achieved.
In the ever-evolving landscape of technology, **automation** and **security** are pivotal for efficient and reliable operations. At Agicap, I spearheaded several **Terraform-based projects** that not only streamlined our infrastructure management but also fortified our security posture. This blog post explores the motivations behind these initiatives, the strategies I employed, and the impactful results we achieved.
13
13
14
14
---
@@ -29,10 +29,10 @@ Additionally, integrating Terraform with our **security tools** ensured that our
29
29
30
30
### **1️⃣ Efficient Management of Azure Resources**
31
31
32
-
**📌 Motivation:**
32
+
**Motivation:**
33
33
Agicap's operations spanned multiple regions, requiring a robust and scalable cloud infrastructure. Managing Azure resources manually was becoming increasingly cumbersome and prone to inconsistencies.
34
34
35
-
**🔧 Approach:**
35
+
**Approach:**
36
36
I developed comprehensive **Terraform modules** tailored for Azure, enabling automated deployment and management of resources such as virtual networks, storage accounts, and compute instances. These modules encapsulated best practices, ensuring that deployments were efficient and aligned with organizational standards.
37
37
38
38
**📈 Results:**
@@ -44,10 +44,10 @@ I developed comprehensive **Terraform modules** tailored for Azure, enabling aut
44
44
45
45
### **2️⃣ Securing Secrets with HashiCorp Vault**
46
46
47
-
**📌 Motivation:**
47
+
**Motivation:**
48
48
Managing sensitive information like API keys, passwords, and certificates securely is critical. Traditional methods were inadequate, posing potential security risks.
49
49
50
-
**🔧 Approach:**
50
+
**Approach:**
51
51
Using Terraform, I integrated **HashiCorp Vault** into our infrastructure. This setup facilitated secure storage, access, and management of secrets. By automating Vault's deployment and configuration, we ensured the highest levels of security.
52
52
53
53
**📈 Results:**
@@ -59,10 +59,10 @@ Using Terraform, I integrated **HashiCorp Vault** into our infrastructure. This
59
59
60
60
### **3️⃣ Streamlining User and Application Management with Okta Integration**
61
61
62
-
**📌 Motivation:**
62
+
**Motivation:**
63
63
As Agicap scaled, managing user identities and application access manually was inefficient and posed security challenges.
64
64
65
-
**🔧 Approach:**
65
+
**Approach:**
66
66
I automated the integration of **Okta** using Terraform. This included provisioning user accounts, managing group memberships, and configuring application access policies, all codified for reliability and scalability.
67
67
68
68
**📈 Results:**
@@ -74,10 +74,10 @@ I automated the integration of **Okta** using Terraform. This included provision
With numerous repositories and teams, managing GitHub organizations manually was becoming unwieldy and inconsistent.
79
79
80
-
**🔧 Approach:**
80
+
**Approach:**
81
81
Using Terraform, I streamlined the management of **GitHub organization settings and repositories**. This included automating repository creation, configuring access controls, and enforcing policies.
0 commit comments