Hi community! If you haven’t seen, me and @qrkourier are routinely live-streaming on Friday’s at 11 am ET. We have covered all sorts of things in the past and no topic is off limits as long as it’s about zero trust or OpenZiti. :slight_smile: What topics are interesting to you? Any ideas on what y…

I’m guessing you’ve seen this, but here’s a related ZitiTV from a couple of months ago when we released initial support for external JWT signers: Ziti TV Mar 31 2023 - OIDC/External signers/Keycloak working session - YouTube

Hi, would be very useful to show how to configure a SentinelOne posture check, not using the process but through the sentinel API. Maybe this feature is something already in dev?

Hi @Quentin , welcome to the community and to OpenZiti! At this time, there's no way to integrate with other APIs from posture checks, but that sort of thing makes perfect sense to me! When that becomes a reality, that sounds like a fun Ziti TV. It also fits into querying something else like OPA too…

Building on this @Quentin , this is something we do in CloudZiti with other tools (S1 could be done in the future). As @TheLumberjack says, it's not via the posture check, we do it via an API integration, so that if the external EDR says the device is insecure, services are removed from the endpoint …

If i understantd well, there is a custom development in cloudziti that calls the sentinelone api to check the device satus and if secure, through controller apis, removes the services associated with the device?

Hardening Ziti Controller and Router for public access would be a nice topic against all attacks (f.e. brute-force). I‘m sure many out there would be interested in..

Are you contemplating a brute-force attack against the admin password? Sounds like an interesting topic.

against all kinds of attacks (api/web general and brute force), is it safe to use zac on the same machine? is it safer to use a cryptic virtual path for zac? I read somewhere that you can set limit on tcp sessions in the configs? or is it firewall stuff (IDS)? NetFoundry advertise they was never h…

We don't describe everything the NetFoundry NaaS product does (for obvious reasons of informing attackers), but it includes some of the core features of the NaaS product, which have evolved over many years of providing services to the world's most security conscious. This includes having a whole te…

Ideas for Ziti TV?

Topic		Replies	Views
Securing a bunch of Machines General Questions	13	1166	June 21, 2022
Questions from a newbie about my planned setup	19	303	October 28, 2024
Ziti basic architecture help Ziti Overlay	5	941	June 13, 2023
Http_server_id variable for http hello world example Ziti Overlay	65	1270	October 25, 2022
LAB for beginners to understand the operations to build a Zero Trust network with OpenZiti Support	4	545	December 18, 2024

Ideas for Ziti TV?

Related topics