RyanReasons.com Security Validation
I tested my own portfolio from the public Internet and from inside the lab, rejected evidence I could not defend, remediated what I found, and left one result inconclusive.
Longer technical notes on things I've actually worked through, tested, or spent enough time researching to have something useful to say about.
I tested my own portfolio from the public Internet and from inside the lab, rejected evidence I could not defend, remediated what I found, and left one result inconclusive.
A firewall rule can look completely correct in the management interface and still not prove what the network is actually doing. I started treating configuration as intent and traffic, listener state, counters, and packet captures as the evidence.
IPv6 is not just IPv4 with longer addresses. Once a network becomes dual-stack, addressing, router discovery, firewall policy, monitoring, DNS behavior, and validation all have another path that needs to be understood and tested.
Additional technical research, security testing notes, and implementation runbooks are currently being prepared for publication.