Posts about firewall

Perimeter security, VPNs and the rules that keep the internet out.

1. CH-0006

   18,000 alerts before coffee: a brute-force attempt on our VPN

   A low-and-slow login attack on our GlobalProtect VPN, how we stopped it, what the logs showed, and why we finally blocked inbound traffic from outside the US.

   October 20, 2026/security, incident response, firewall