Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

update for pro #644

Merged
merged 2 commits into from
Dec 13, 2024
Merged

update for pro #644

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
f67307f
update for pro
joe-amendolara Dec 13, 2024
8c0d8fe
auto build from GitHub Actions
Dec 13, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Binary file modified ace_pro/docs/images/lab6-webgroup200.png
View file
Open in desktop
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified ace_pro/docs/images/lab911-new100.png
View file
Open in desktop
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified ace_pro/docs/images/lab96-newrule201.png
View file
Open in desktop
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added ace_pro/docs/images/lab96-newrule301.png
View file
Open in desktop
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
34 changes: 31 additions & 3 deletions ace_pro/docs/lab9.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -292,9 +292,9 @@ Create the new **_WebGroup_** with the following parameters:

- **Name**: <span style='color:#479608'>Allowed-Public-Domains</span>
- **Type**: <span style='color:#479608'>Domains</span>
- **Domains/URLs**: <span style='color:#479608'>www.google.com</span>
- **Domains/URLs**: <span style='color:#479608'>www.microsoft.com</span>
- **Domains/URLs**: <span style='color:#479608'>www.aws.com</span>
- **Domains/URLs**: <span style='color:#479608'>www.nginx.com</span>
- **Domains/URLs**: <span style='color:#479608'>www.ubuntu.com</span>
- **Domains/URLs**: <span style='color:#479608'>www.aviatrix.com</span>

Do not forget to click on **Save**.

Expand All @@ -321,6 +321,7 @@ Insert the following parameters
- **Name**: <span style='color:#479608'>PSF-Rule-Permit</span>
- **Source Groups**: <span style='color:#479608'>aws-us-east-1-spoke1-test1</span>
- **Destination Groups**: <span style='color:#479608'>Public Internet</span>
- **WebGroups**: <span style='color:#479608'>Allowed-Public-Domains</span>
- **Protocol**: <span style='color:#479608'>Any</span>
- **Enforcement**: <span style='color:#479608'>**On**</span>
- **Logging**: <span style='color:#479608'>On</span>
Expand All @@ -344,12 +345,39 @@ align: center
New DCF Rules List
```

Now from your SSH client, issue the following commands:

```bash
curl https://www.nginx.com
```

```bash
curl https://www.ubuntu.com
```

```bash
curl https://www.aviatrix.com
```

```{figure} images/lab96-newrule301.png
---
align: center
---
Outcomes from the curl commands
```

Now issue again the curl command towards the malicious IP address provided by the Trainer!

```bash
curl https://<malicious-IP>
```

```{figure} images/lab96-newrule302.png
---
align: center
---
Towards the Malicious IP
```



Expand Down
Binary file modified docs/ace-pro/_images/lab6-webgroup200.png
View file
Open in desktop
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified docs/ace-pro/_images/lab911-new100.png
View file
Open in desktop
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified docs/ace-pro/_images/lab96-newrule201.png
View file
Open in desktop
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added docs/ace-pro/_images/lab96-newrule301.png
View file
Open in desktop
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
34 changes: 31 additions & 3 deletions docs/ace-pro/_sources/docs/lab9.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -292,9 +292,9 @@ Create the new **_WebGroup_** with the following parameters:

- **Name**: <span style='color:#479608'>Allowed-Public-Domains</span>
- **Type**: <span style='color:#479608'>Domains</span>
- **Domains/URLs**: <span style='color:#479608'>www.google.com</span>
- **Domains/URLs**: <span style='color:#479608'>www.microsoft.com</span>
- **Domains/URLs**: <span style='color:#479608'>www.aws.com</span>
- **Domains/URLs**: <span style='color:#479608'>www.nginx.com</span>
- **Domains/URLs**: <span style='color:#479608'>www.ubuntu.com</span>
- **Domains/URLs**: <span style='color:#479608'>www.aviatrix.com</span>

Do not forget to click on **Save**.

Expand All @@ -321,6 +321,7 @@ Insert the following parameters
- **Name**: <span style='color:#479608'>PSF-Rule-Permit</span>
- **Source Groups**: <span style='color:#479608'>aws-us-east-1-spoke1-test1</span>
- **Destination Groups**: <span style='color:#479608'>Public Internet</span>
- **WebGroups**: <span style='color:#479608'>Allowed-Public-Domains</span>
- **Protocol**: <span style='color:#479608'>Any</span>
- **Enforcement**: <span style='color:#479608'>**On**</span>
- **Logging**: <span style='color:#479608'>On</span>
Expand All @@ -344,12 +345,39 @@ align: center
New DCF Rules List
```

Now from your SSH client, issue the following commands:

```bash
curl https://www.nginx.com
```

```bash
curl https://www.ubuntu.com
```

```bash
curl https://www.aviatrix.com
```

```{figure} images/lab96-newrule301.png
---
align: center
---
Outcomes from the curl commands
```

Now issue again the curl command towards the malicious IP address provided by the Trainer!

```bash
curl https://<malicious-IP>
```

```{figure} images/lab96-newrule302.png
---
align: center
---
Towards the Malicious IP
```



Expand Down
166 changes: 83 additions & 83 deletions docs/ace-pro/docs/lab10.html
View file
Open in desktop

Large diffs are not rendered by default.

50 changes: 25 additions & 25 deletions docs/ace-pro/docs/lab11.html
View file
Open in desktop

Large diffs are not rendered by default.

89 changes: 58 additions & 31 deletions docs/ace-pro/docs/lab9.html
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -633,9 +633,9 @@ <h3>8.1 Create a new WebGroup<a class="headerlink" href="#create-a-new-webgroup"
<ul class="simple">
<li><p><strong>Name</strong>: <span style='color:#479608'>Allowed-Public-Domains</span></p></li>
<li><p><strong>Type</strong>: <span style='color:#479608'>Domains</span></p></li>
<li><p><strong>Domains/URLs</strong>: <span style='color:#479608'><a class="reference external" href="http://www.google.com">www.google.com</a></span></p></li>
<li><p><strong>Domains/URLs</strong>: <span style='color:#479608'><a class="reference external" href="http://www.microsoft.com">www.microsoft.com</a></span></p></li>
<li><p><strong>Domains/URLs</strong>: <span style='color:#479608'><a class="reference external" href="http://www.aws.com">www.aws.com</a></span></p></li>
<li><p><strong>Domains/URLs</strong>: <span style='color:#479608'><a class="reference external" href="http://www.nginx.com">www.nginx.com</a></span></p></li>
<li><p><strong>Domains/URLs</strong>: <span style='color:#479608'><a class="reference external" href="http://www.ubuntu.com">www.ubuntu.com</a></span></p></li>
<li><p><strong>Domains/URLs</strong>: <span style='color:#479608'><a class="reference external" href="http://www.aviatrix.com">www.aviatrix.com</a></span></p></li>
</ul>
<p>Do not forget to click on <strong>Save</strong>.</p>
<figure class="align-center" id="id23">
Expand All @@ -659,6 +659,7 @@ <h3>8.2 Create a DCF rule that will allow traffic towards the three domains!<a c
<li><p><strong>Name</strong>: <span style='color:#479608'>PSF-Rule-Permit</span></p></li>
<li><p><strong>Source Groups</strong>: <span style='color:#479608'>aws-us-east-1-spoke1-test1</span></p></li>
<li><p><strong>Destination Groups</strong>: <span style='color:#479608'>Public Internet</span></p></li>
<li><p><strong>WebGroups</strong>: <span style='color:#479608'>Allowed-Public-Domains</span></p></li>
<li><p><strong>Protocol</strong>: <span style='color:#479608'>Any</span></p></li>
<li><p><strong>Enforcement</strong>: <span style='color:#479608'><strong>On</strong></span></p></li>
<li><p><strong>Logging</strong>: <span style='color:#479608'>On</span></p></li>
Expand All @@ -678,6 +679,32 @@ <h3>8.2 Create a DCF rule that will allow traffic towards the three domains!<a c
<p><span class="caption-number">Fig. 341 </span><span class="caption-text">New DCF Rules List</span><a class="headerlink" href="#id26" title="Link to this image">#</a></p>
</figcaption>
</figure>
<p>Now from your SSH client, issue the following commands:</p>
<div class="highlight-bash notranslate"><div class="highlight"><pre><span></span>curl<span class="w"> </span>https://www.nginx.com
</pre></div>
</div>
<div class="highlight-bash notranslate"><div class="highlight"><pre><span></span>curl<span class="w"> </span>https://www.ubuntu.com
</pre></div>
</div>
<div class="highlight-bash notranslate"><div class="highlight"><pre><span></span>curl<span class="w"> </span>https://www.aviatrix.com
</pre></div>
</div>
<figure class="align-center" id="id27">
<img alt="../_images/lab96-newrule301.png" src="../_images/lab96-newrule301.png" />
<figcaption>
<p><span class="caption-number">Fig. 342 </span><span class="caption-text">Outcomes from the curl commands</span><a class="headerlink" href="#id27" title="Link to this image">#</a></p>
</figcaption>
</figure>
<p>Now issue again the curl command towards the malicious IP address provided by the Trainer!</p>
<div class="highlight-bash notranslate"><div class="highlight"><pre><span></span>curl<span class="w"> </span>https://&lt;malicious-IP&gt;
</pre></div>
</div>
<figure class="align-center" id="id28">
<img alt="docs/images/lab96-newrule302.png" src="docs/images/lab96-newrule302.png" />
<figcaption>
<p><span class="caption-number">Fig. 343 </span><span class="caption-text">Towards the Malicious IP</span><a class="headerlink" href="#id28" title="Link to this image">#</a></p>
</figcaption>
</figure>
</section>
</section>
</section>
Expand Down Expand Up @@ -715,49 +742,49 @@ <h2>2. CostIQ<a class="headerlink" href="#costiq" title="Link to this heading">#
<section id="enable-costiq">
<h3>2.1 Enable CostIQ<a class="headerlink" href="#enable-costiq" title="Link to this heading">#</a></h3>
<p>Go to <strong>Copilot &gt; Billing &amp; Cost &gt; CostIQ</strong> and click on the <code class="docutils literal notranslate"><span class="pre">&quot;Enable</span> <span class="pre">CostIQ&quot;</span></code> button.</p>
<figure class="align-center" id="id27">
<figure class="align-center" id="id29">
<a class="reference internal image-reference" href="../_images/lab9-costiq.png"><img alt="../_images/lab9-costiq.png" src="../_images/lab9-costiq.png" style="height: 250px;" /></a>
<figcaption>
<p><span class="caption-number">Fig. 342 </span><span class="caption-text">Enable CostIQ</span><a class="headerlink" href="#id27" title="Link to this image">#</a></p>
<p><span class="caption-number">Fig. 344 </span><span class="caption-text">Enable CostIQ</span><a class="headerlink" href="#id29" title="Link to this image">#</a></p>
</figcaption>
</figure>
<figure class="align-center" id="id28">
<figure class="align-center" id="id30">
<a class="reference internal image-reference" href="../_images/lab9-costiq001.png"><img alt="../_images/lab9-costiq001.png" src="../_images/lab9-costiq001.png" style="height: 300px;" /></a>
<figcaption>
<p><span class="caption-number">Fig. 343 </span><span class="caption-text">Enable CostIQ</span><a class="headerlink" href="#id28" title="Link to this image">#</a></p>
<p><span class="caption-number">Fig. 345 </span><span class="caption-text">Enable CostIQ</span><a class="headerlink" href="#id30" title="Link to this image">#</a></p>
</figcaption>
</figure>
<p>Now click on <code class="docutils literal notranslate"><span class="pre">&quot;+</span> <span class="pre">Cost</span> <span class="pre">Center&quot;</span></code> and create the <strong>AWS</strong> Cost Center aforementioned.</p>
<figure class="align-center" id="id29">
<figure class="align-center" id="id31">
<img alt="../_images/lab9-costiq02.png" src="../_images/lab9-costiq02.png" />
<figcaption>
<p><span class="caption-number">Fig. 344 </span><span class="caption-text">“+ Cost Center”</span><a class="headerlink" href="#id29" title="Link to this image">#</a></p>
<p><span class="caption-number">Fig. 346 </span><span class="caption-text">“+ Cost Center”</span><a class="headerlink" href="#id31" title="Link to this image">#</a></p>
</figcaption>
</figure>
<figure class="align-center" id="id30">
<figure class="align-center" id="id32">
<img alt="../_images/lab9-costiq03.png" src="../_images/lab9-costiq03.png" />
<figcaption>
<p><span class="caption-number">Fig. 345 </span><span class="caption-text">AWS</span><a class="headerlink" href="#id30" title="Link to this image">#</a></p>
<p><span class="caption-number">Fig. 347 </span><span class="caption-text">AWS</span><a class="headerlink" href="#id32" title="Link to this image">#</a></p>
</figcaption>
</figure>
<p>Repeat the action creating the remaining two Cost Centers: <strong>GCP</strong> and <strong>Azure</strong>, associating the corresponing Application VPCs/VNets.</p>
<figure class="align-center" id="id31">
<figure class="align-center" id="id33">
<img alt="../_images/lab9-costiq04.png" src="../_images/lab9-costiq04.png" />
<figcaption>
<p><span class="caption-number">Fig. 346 </span><span class="caption-text">GCP</span><a class="headerlink" href="#id31" title="Link to this image">#</a></p>
<p><span class="caption-number">Fig. 348 </span><span class="caption-text">GCP</span><a class="headerlink" href="#id33" title="Link to this image">#</a></p>
</figcaption>
</figure>
<figure class="align-center" id="id32">
<figure class="align-center" id="id34">
<img alt="../_images/lab9-costiq05.png" src="../_images/lab9-costiq05.png" />
<figcaption>
<p><span class="caption-number">Fig. 347 </span><span class="caption-text">AZURE</span><a class="headerlink" href="#id32" title="Link to this image">#</a></p>
<p><span class="caption-number">Fig. 349 </span><span class="caption-text">AZURE</span><a class="headerlink" href="#id34" title="Link to this image">#</a></p>
</figcaption>
</figure>
<p>You should immediately get insights on how they have been utilized.</p>
<figure class="align-center" id="id33">
<figure class="align-center" id="id35">
<a class="reference internal image-reference" href="../_images/lab9-costiq06.png"><img alt="../_images/lab9-costiq06.png" src="../_images/lab9-costiq06.png" style="height: 150px;" /></a>
<figcaption>
<p><span class="caption-number">Fig. 348 </span><span class="caption-text">Cost Centers Overview</span><a class="headerlink" href="#id33" title="Link to this image">#</a></p>
<p><span class="caption-number">Fig. 350 </span><span class="caption-text">Cost Centers Overview</span><a class="headerlink" href="#id35" title="Link to this image">#</a></p>
</figcaption>
</figure>
</section>
Expand All @@ -768,51 +795,51 @@ <h2>3. New York DC is the Shared Services<a class="headerlink" href="#new-york-d
<ul class="simple">
<li><p>Go to <strong>CoPilot &gt; Diagnostics &gt; Cloud Routes &gt; BGP Info</strong>, then click on the three dots icon and select the <code class="docutils literal notranslate"><span class="pre">&quot;Show</span> <span class="pre">BGP</span> <span class="pre">Learned</span> <span class="pre">Routes&quot;</span></code>.</p></li>
</ul>
<figure class="align-center" id="id34">
<figure class="align-center" id="id36">
<img alt="../_images/lab9-costiq10.png" src="../_images/lab9-costiq10.png" />
<figcaption>
<p><span class="caption-number">Fig. 349 </span><span class="caption-text">Show BGP Learned Routes</span><a class="headerlink" href="#id34" title="Link to this image">#</a></p>
<p><span class="caption-number">Fig. 351 </span><span class="caption-text">Show BGP Learned Routes</span><a class="headerlink" href="#id36" title="Link to this image">#</a></p>
</figcaption>
</figure>
<p>You will find out that all the local subnets advertised by the DC belong to the cidr <strong>10.40.0.0/16</strong>.</p>
<figure class="align-center" id="id35">
<figure class="align-center" id="id37">
<img alt="../_images/lab9-cidr.png" src="../_images/lab9-cidr.png" />
<figcaption>
<p><span class="caption-number">Fig. 350 </span><span class="caption-text">CIDR</span><a class="headerlink" href="#id35" title="Link to this image">#</a></p>
<p><span class="caption-number">Fig. 352 </span><span class="caption-text">CIDR</span><a class="headerlink" href="#id37" title="Link to this image">#</a></p>
</figcaption>
</figure>
<p>Let’s move on the <strong>Shared Services</strong> tab and click on <code class="docutils literal notranslate"><span class="pre">&quot;+</span> <span class="pre">Shared</span> <span class="pre">Service&quot;</span></code>.</p>
<figure class="align-center" id="id36">
<figure class="align-center" id="id38">
<img alt="../_images/lab9-costiq12.png" src="../_images/lab9-costiq12.png" />
<figcaption>
<p><span class="caption-number">Fig. 351 </span><span class="caption-text">“+ Shared Service”</span><a class="headerlink" href="#id36" title="Link to this image">#</a></p>
<p><span class="caption-number">Fig. 353 </span><span class="caption-text">“+ Shared Service”</span><a class="headerlink" href="#id38" title="Link to this image">#</a></p>
</figcaption>
</figure>
<p>Create the <strong>Shared Service</strong> based on the aforementioned requirements.</p>
<figure class="align-center" id="id37">
<figure class="align-center" id="id39">
<img alt="../_images/lab9-costiq13.png" src="../_images/lab9-costiq13.png" />
<figcaption>
<p><span class="caption-number">Fig. 352 </span><span class="caption-text">“+ Shared Service”</span><a class="headerlink" href="#id37" title="Link to this image">#</a></p>
<p><span class="caption-number">Fig. 354 </span><span class="caption-text">“+ Shared Service”</span><a class="headerlink" href="#id39" title="Link to this image">#</a></p>
</figcaption>
</figure>
<p>If you kept running the ping on the Workstation Edge’s terminal, then you should see both the relative traffic and the absolute one from any Cost Centers towards the Shared Service.</p>
<figure class="align-center" id="id38">
<figure class="align-center" id="id40">
<img alt="../_images/lab9-ping.png" src="../_images/lab9-ping.png" />
<figcaption>
<p><span class="caption-number">Fig. 353 </span><span class="caption-text">Ping from the Wortkstation “Edge”</span><a class="headerlink" href="#id38" title="Link to this image">#</a></p>
<p><span class="caption-number">Fig. 355 </span><span class="caption-text">Ping from the Wortkstation “Edge”</span><a class="headerlink" href="#id40" title="Link to this image">#</a></p>
</figcaption>
</figure>
<figure class="align-center" id="id39">
<figure class="align-center" id="id41">
<a class="reference internal image-reference" href="../_images/lab9-counter.png"><img alt="../_images/lab9-counter.png" src="../_images/lab9-counter.png" style="height: 350px;" /></a>
<figcaption>
<p><span class="caption-number">Fig. 354 </span><span class="caption-text">From the Cost Center towards the Shared Service</span><a class="headerlink" href="#id39" title="Link to this image">#</a></p>
<p><span class="caption-number">Fig. 356 </span><span class="caption-text">From the Cost Center towards the Shared Service</span><a class="headerlink" href="#id41" title="Link to this image">#</a></p>
</figcaption>
</figure>
<p>After this lab, this is how the overall topology would look like:</p>
<figure class="align-center" id="id40">
<figure class="align-center" id="id42">
<a class="reference internal image-reference" href="../_images/lab9-final.png"><img alt="../_images/lab9-final.png" src="../_images/lab9-final.png" style="height: 400px;" /></a>
<figcaption>
<p><span class="caption-number">Fig. 355 </span><span class="caption-text">Final topology for Lab 9</span><a class="headerlink" href="#id40" title="Link to this image">#</a></p>
<p><span class="caption-number">Fig. 357 </span><span class="caption-text">Final topology for Lab 9</span><a class="headerlink" href="#id42" title="Link to this image">#</a></p>
</figcaption>
</figure>
</section>
Expand Down
2 changes: 1 addition & 1 deletion docs/ace-pro/searchindex.js
View file
Open in desktop

Large diffs are not rendered by default.