I've used tor, it's functional, but removes a lot of what most people consider useful from most websites.

@Reid-Cooper said in Fortinet Experiences:

I guess it matters then... who else is on the list? What about Sophos, are they an option?

Looks like only their disk encryption is.

Here is the list: http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/1401vend.htm.

@Dashrender said in Two ISP Fail over Internally vs Externally Fail over:

what does it do that the ER-L doesn't? I know someone else (the guy at SW who swears more than JB) recommended the Peplink to me years ago... but I think the ER-L can do many of the same things now.

Much like Tivo and generic DVRs, they function the same, but the actual execution is more refined.

Outbound load balance has been a feature for many different devices for a while now. I've got an ER-L right now, yeah it does the load balance between the two circuits. But since they are very different speeds, they don't balance as evenly as Peplink can do it. They also don't offer bonded VPN and their interface is easy as fuck to deal with.

Yeah, I can buy a TWC DVR, but my Tivo does more.

@Reid-Cooper said in Open source Firewall:

pfSense was really good in the past. But I agree, the days of building your own firewall on an old PC that you have are over.

Right - the cost just isn't worth running your old PC. Power alone will cost more than the cost of an ER-X or ER-L.

By default, traffic will pass between VLANs 1 & 2, unless you go into the firewall & add rules to deny traffic

I've built one once... It was a Firewall / Router using straight up Linux, Shorewall, and ClamAV for a 10 meg connection. Our main firewall just went kaput, and the company was not responding to phone calls for support (it's a long story).

Set up Linux on a system with 8 NICs and went to town.

Edit:

It's not hard to build one if you understand the concepts of routing and such... Not for the faint of heart if you have to make one work well enough to be used in production.

@bransona said in MS-CHAP on Ubiquiti EdgeRouter:

@scottalanmiller is correct. I have Edgerouter 2.0.9 and it STILL requires PAP in the Windows policy. Under Config Tree, there is no way to make the router use MSCHAP or MSCHAPv2 instead of PAP (cleartext). I went to notify Ubiquiti hoping they can potentially have this included in another firmware release soon, but Ubiquiti Support was apprised of this 5 years ago! https://community.ui.com/questions/Encrypted-Radius-Supported/7857b119-91d8-4365-8c2a-8c21de0937a4

Yup it has been a big issue for a while now on the EdgeSwitches too.

Apparently I figured out my issue with the dual wan traffic shaping. Had to turn on stickiness.... just goes to show you how little I've dealt with networking.

@JaredBusch said in VyOS Port Address Translation for HTTPS:

@scottalanmiller said in VyOS Port Address Translation for HTTPS:

Got it working. The firewall rule was in the wrong section of the firewall.

You had it on eth0 local instead of eth0 in?

Yuppers.

@PSX_Defector said:

@Brains said:

It's just bad timing and we are in the healthcare market and subject to Texas's Workers Compensation craziness, so its been a rough year or two for us.

Then you best not be using PPTP. Compliance audits will come down on you hard.

If anyone will be at Lone Star PHP in Texas this weekend, let me know. Ill be there and will buy you a beer.

I thought you were talking about Big Texas Beer Fest, which was last weekend.

I was planning on trying to use L2TP and darn for missing the Beer Fest. That's my kind of place! Well Whiskey Fest would be MORE my kinda place haha.

I also wanted to ask you about this as well:
3 Year Warranty & InControl 2 for Balance One/Balance One Core

I really doubt the cloud management would be useful for us since we only have 2 local devices (one active at a time). We will get free firmware updates AFAIK, so I don't really know why that is mentioned. Is there any reason we should get this package? 25% price increase for 2 additional years of warranty doesn't seem worth it to me.

@Dashrender said:

@johnhooks said:

@scottalanmiller said:

@johnhooks said:

@scottalanmiller said:

@johnhooks said:

I think it still runs Linux, so yo could probably do most of that. However that kind of defeats the purpose of being centrally managed.

VyOS, it is extremely capable. We've been on VyOS or its parent Vyatta for a very, very long time.

Ya EdgeMax is, does the USG run VyOS?

Yes, they all do the same stuff under the hood.

Ok, I didn't realize that. But like I said, I think needing to dig into the cli on the USG kind of defeats the purpose of having everything centrally managed by the controller.

I thought I mentioned it's not about fully managing, it's more about the reports/graphs.

Yes it's a bit more expensive...

Ah I missed that.

@Dashrender said:

@scottalanmiller said:

@Dashrender said:

So if the OP wants to do web filtering and firewall services - what stuff should he buy?

Same thing that I keep saying... ERL and Squid.

I just wanted you to post it again 🙂

LOL. There it is.

Definitely most everyone that I have seen is on .local. It was the advised standard for so long and it was so during the era when the majority of companies moved to AD. Even though the new standard has been around for a little bit now, nearly every company I deal with moved to AD prior to that time period. New companies get new AD, obviously, but as a market percentage they aren't so much yet, that I've seen.

@Jason you be careful with that!

@Jason said:

Nevermind. #faceplam. forgot to go into configure mode first..

I may or may not have done that more than once.

@akp982 said:

@oschaudhary FAN hasn't been updated in years (well 2 years)

https://download.centreon.com/ has a more up-to-date nagios core and centreon front end, moving from one to the other is a @@@@@@@@@@ but its much better supported by the community and has a better update process.

Its missing nMap by default I believe but its easy to add in 🙂

Whoa! @akp982 is back! Dude haven't seen you around in forever!

@technobabble said:

@anonymous well that is extremely inexpensive...thanks for the link!

You bet 😄

@anonymous said:

Just rebooted 2 more times, no luck. It's a ER-X if that makes any difference.

You have to have offload enabled. A number of things disable the offloading of some packets. Including certain QoS.

http://community.ubnt.com/t5/EdgeMAX/v1-7-0-Wondering-why-traffic-is-not-showing-up-in-the-new-quot/m-p/1287642#U1287642