@Dashrender you can find OVA on vyos.net

@JaredBusch said in Faxing:

@Dashrender said in Faxing:

Please stop saying that I'm claiming that faxes are more secure. I'M Not!

I guess I'll just say, as long as Faxing is grandfathered in, the rest doesn't matter because the expense and complexities of using encrypted email (think PGP or password encrypted zip) won't replace it.

I'm absolutely willing to capitulate the grandfathering is the main, perhaps only, reason it's allowed.

I said nothing of the sort. I said unencrypted email is more secure than faxing. Just clarifying my point of view.

Ah, but you know that your email is encrypted end to end and you can know if your email is offering encryption to the end user's system. After that it's not your concern in the least. Literally... zero concern on your side. Delivery is complete, handoff is made. Just disable non-SSL/TLS communications and your concerns are all set.

I guess I read the how thing wrong.. I though your boss told you to hire the new HR cordniator somehow..

@Dashrender said in Windows 10 Update -- Hard Drive No Longer Recognized:

@scottalanmiller said in Windows 10 Update -- Hard Drive No Longer Recognized:

@Dashrender said in Windows 10 Update -- Hard Drive No Longer Recognized:

I'll side with Dustin here. Will MS still help you solve the problem because it came from WU? Probably, but really this is a manufacturer's fault for providing a bad BIOS update to MS.

Not to me. The manufacturer did not provide it to me, MS did. No one but MS and me are involved. If MS has an upstream provider not doing their job, that is purely between MS and them. By the time that it gets to me, MS alone is responsible for it.

And I gave that to you by saying that MS will help you fix it, which I know from experience when a RAID controller driver was updated by WU and hosed my system over a decade ago.

Sure they will fix it. But not because they want to, because they are responsible for it.

@scottalanmiller said in Oh, soft phones...:

Why not get new numbers and start moving customers over ASAP. When calls stop going to the old numbers, you drop them.

That's what I was trying to say. Maybe I was just too long winded. 🙂

Put the app/extension ID alone in the Chrome extension whitelist and blacklist policies. The $ID;$URL format, like you have in the OP, is only used in the Configure the list of force-installed apps and extensions policy.

FYI, rather than selectively blacklisting I choose to use * in the blacklist policy to deny all. I then explicitly allow certain apps/extensions in the whitelist policy. And finally there are a few of those allowed apps/extensions that I have force installed like uBlock Origin, LastPass, Chrome Legacy Browser Support, etc. It's worked well for me and the clients I manage.

@scottalanmiller said in Cerber virus/ransomware making the rounds...:

@wirestyle22 said in Cerber virus/ransomware making the rounds...:

@scottalanmiller said in Cerber virus/ransomware making the rounds...:

@wirestyle22 said in Cerber virus/ransomware making the rounds...:

@scottalanmiller said in Cerber virus/ransomware making the rounds...:

@wirestyle22 said in Cerber virus/ransomware making the rounds...:

@scottalanmiller said in Cerber virus/ransomware making the rounds...:

@wirestyle22 said in Cerber virus/ransomware making the rounds...:

@Nic said in Cerber virus/ransomware making the rounds...:

@Dashrender said in Cerber virus/ransomware making the rounds...:

@Nic said in Cerber virus/ransomware making the rounds...:

@JaredBusch said in Cerber virus/ransomware making the rounds...:

@Rob-Dunn said in Cerber virus/ransomware making the rounds...:

@Kelly said in Cerber virus/ransomware making the rounds...:

@Rob-Dunn said in Cerber virus/ransomware making the rounds...:

Another cool thing that we're going to be doing, but not as a result of this infection, is evaluating and maybe implementing Cylance in lieu of Trend on our systems.

I'm not sure if it's appropriate to say, but their engine seems revolutionary.

What makes you say that Rob?

Mostly that it's not conventional scanning, but instead it analyzes what the files do rather than just signatures or patterns. The closest comparison I can come up with is the way Android app permissions are broken down in the app store - - it can identify if a file's threat by the characteristics contained therein. Here's an analysis of the FreeConferenceCall.com installer:

I really want to see a good comparison of Webroot and Cylance from someone not related to either company.

My problem with Cylance was that there was no small business pricing. they started at something like 1000 licenses at their SpiceWorld 2015 demo. Only knocking it down to 500 during the show.

Hopefully the testing companies will get there eventually. They're all so geared towards signature detections and it's hard to get them to change. That's why we don't show up in some of them, as they won't come up with a methodology that better reflects what we do.

I liked Cylance's demo - go to totalvirus, download the last 100 uploaded viruii, and run them.

That's a good start, but it's tough to truly get a zero day virus that hasn't been seen yet, for a real world test. If it's on virustotal then it's already been identified as a virus by most of the AV companies.

No way to get around it entirely

Run them side by side in the real world (honeypot kind of thing) and test.

No I mean zero day viruses

Me too.

I don't have faith either would do the job

Isn't the other choice... neither, though? Will "none" do the job?

That's definitely a question

What I mean is... certainly trust nothing for zero days, protect as much as you can. But part of that would be getting the best AV that you can. It's part of the security picture.

Agreed

@LAH3385 said in Windows Desktop PC's: preferred suppliers?:

@scottalanmiller said in Windows Desktop PC's: preferred suppliers?:

@FATeknollogee said in Windows Desktop PC's: preferred suppliers?:

Anyone know of a Softmart equivalent on the West Coast? I'd like to eliminate the 1 week shipping time from the East Coast.

They don't ship from Philly. Their warehouses are all over the country. I used to do local pickup in Dallas all of the time. No delay to the west coast.

Do they charge for pickup? And where in DFW are they located at? Just curious

They don't charge us at least. And in Carrollton where the tracks cross Josie just north of Trinity Station.

What do the logs say about the system going down? I'm guessing that it is going down for whatever reason there is then a RAID issue.

@s.hackleman said in Best Practices:

Could I make a DNS alias called HistoryServer Then point it to both History1? Then point all apps to HistoryServer. When ever an upgrade comes due, I can just update the DNS alias in one place?

Yes, but if you can do that, you could just rename, too. This is the better way to go, and ideally should be done from the start.

@scottalanmiller said in ownCloud 8.2.4 to 9.0.2 upgrade problem:

have you tested yet?

I have more systems that I can upgrade, but I have not done so yet.

I'm sure NSC Global would support it

It's been easily a decade since I worked with that, I'm afraid.

@scottalanmiller said in Server 2016 Eval - Maps Services:

@tonyshowoff said in Server 2016 Eval - Maps Services:

Did they get rid of Explorer and replace it with an over the top, tablet-ready file browser which hides most of the files and randomly selects which are most important? If not, can I patent this before Microsoft uses it?

Too late.

Thank god I use FreeBSD for the most part; I've had the same Openbox (before that Blackbox) config for 16 years, bashrc / bas_profile too.. even longer actually. I've long dreamed of some sort of Unix with native NT API implemented. I contributed some to ReactOS until those people went completely insane, years ago, and started being big babies about decompiling and also using leaked source code. I care more about what I want than goofy software concepts of "right and wrong", tbh.

@scottalanmiller said in It's a turrible day. Just turrible!:

@DustinB3403 said in It's a turrible day. Just turrible!:

Yeah it's not the greatest tool out there, but the integration with Outlook is pretty awesome. Plus if you have businesses you deal with that use it you can incorporation the SfB systems so you can message across domains.

We never found anyone that would do that and the functionality was so poor that we gave up on it.

Plus that can be a liability to the business. iMs aren't logged at most company's, emails usually are.

@scottalanmiller said in SMB NAS:

@BBigford said in SMB NAS:

@scottalanmiller said in SMB NAS:

@BBigford said in SMB NAS:

@scottalanmiller said in SMB NAS:

@BBigford said in SMB NAS:

@scottalanmiller said in SMB NAS:

Thunderbolt is DAS technology. So you can't use it on a device being used as a NAS. The two cannot coexist for the same "shares."

Right, I've been debating between the two. Get a Synology NAS, or a LaCie 2big RAID with Thunderbolt. Easier to manage, but the internals of the LaCie have far less resources than the Synology from what I can see. Going all over different sites and LaCie's site, I can't find any specifics on the CPU, RAM, etc though. Weird...

Again... don't even look at consumer gear. It will all end in tears.

With the budget I'm working with, and how few users are going to be on it, I can't afford something in the business class with a better SLA.

Something like this with a couple 4TB WD Red Pros would suffice...

http://www.amazon.com/Synology-Station-Diskless-Attached-DS716/dp/B016UTXLYQ/ref=sr_1_1?ie=UTF8&qid=1462478801&sr=8-1&keywords=synology+ds716+plus

Synology is not consumer. Lacie is.

Your short list should be Synology (and ioSafe by extension) and ReadyNAS. That's pretty much it. Buffalo, Drobo... they have a place but pretty niche. For your needs, Synology and ReadyNAS, that's it.

Which of the three manufacturers do you typically always recommend? Whenever I see reviews between Synology and ReadyNAS it always seems like a push... like it comes down to preference if the prices are the same. Nothing definitive from either side like "their support is terrible, the turn around on parts is fantastic whereas the other is not, the software on this one is garbage/buggy/etc."

ioSafe is unique. If you want what they offer, use them. Plain and simple. No one else does fire and water proof NAS devices. And ioSafe is quite active here, which is a huge bonus. And I have one myself 🙂

Synology vs ReadyNAS is to me basically HPE vs. Dell. They are basically the same quality and same product. Personal preference is more important than the differences between the two products. Both are excellent. Don't worry about which one you choose. I refuse to play favourites, they are both totally good choices. You can't get religious about these things. Rule out the companies that don't have good support or products or cost too much, figure out where the remainder fit on the field.

Synology and ReadyNAS take the big "cake" bit of the SMB storage field. Drobo handles most of the icing. Buffalo trails behind but offers one or two niche solutions because they offer a Windows based product.

Fair enough. If I was going to use it as central storage for accessible data, I might consider using the ReadyNAS since it has ReadyCloud. An overview of the data being widely available is pretty cool. But we have SharePoint and it won't be used for central every day data... though the ReadyNAS is cheaper than the Synology with roughly the same specs (about $200 for diskless), which would make someone wonder they would buy the Synology over the ReadyNAS. hmm...

Very nice.