Cookies Missing Attributes in RDWeb Gateway

The HTTPOnly attribute makes cookies inaccessible to JavaScript. Additionally, the Secure attributeensures that the cookie may only be transmitted over HTTPS. Cookies used by the application didnot […]

Wireless SSID Certificate Based Auth ( Azure AD )

Setting up a radius server for Azure AD joined devices and 802.1x | Nicola Suter (nicolonsky.ch) Paid for -> https://www.securew2.com/blog/azure-ad-802-1x https://katystech.blog/mem/intune-8021x-pkcs User Auth Solution https://katystech.blog/mem/intune-8021x-pkcs NDES and […]

Internet Information Services (IIS) Securing Best Prac \ Website Headers

ASPNET \ Web Server \ Misconfiguration: Missing Error HandlingDisable Detailed errors in IISPermissions-Policyfullscreen=() Cache-Controlprivate, no-storeReferrer-Policystrict-origin-when-cross-originwe can conclude that the default  setting deals with most of the security X-XSS-Protection1; mode=block X-Content-Type-OptionsnosniffStrict-Transport-Securitymax-age=31536000; […]

365 Backup Products

https://afi.ai/https://www.n-able.com/products/cove-data-protectionhttps://www.backupify.com/365 Veeam ( Needs Server ) Synology Nas ( Needs Onprem )

Windows Defender Best Practice

https://github.com/directorcia/Office365/blob/master/win10-def-get.ps1 -Enable App Governance -Enable Defender for Identity -Turn all Advanced Features for Endpoints – Enable default Policies for App Discovery

HSTS Enable

Server 1709 And above : https://learn.microsoft.com/en-us/iis/configuration/system.applicationhost/sites/site/hsts Below : Enter the following values in the Add Custom HTTP Response Headers dialog box:<Name: Strict-Transport-Security Value: max-age=31536000 Close the IIS Manager after […]