I thank Dustin big time he has helped me out tremendously!

@jaredbusch this is just one of those times in life I wish I never let someone fiddle with the networking. All I can say is im thankful it “worked” somewhat but I do see that my concerns weren’t fake, they were real.

Now I’ve found after reviewing the port forwarding that RDP was open guys im not a network guru, but i know RDP shouldnt be open on the internet. Now I have more fires to put out.

@scottalanmiller is it too late for a flamming dr pepper?

Running an older version 7.1 and will be looking to move to the latest/greatest build this summer.

• Dual Socket Host

• 128 GB of RAM

• 16 TB of raw storage, using a Raid 10 /w Dell Per H730 (I don't know to make the Xen Server see the added storage, I added 8 TB of storage to my RAID 10 /w help from Dell Technical Support. The storage is "there" but the hypervisor doesn't see the added storage.

• Disks are all spinning rust nearline sas

• VM's are thin provisioned

• Windows and Linux VM's

Ram and CPU aren't overcommitted. Things are working but we are definitely seeing plenty of times where the speed is not where it use to be.

Target needs security along with Sony

Hey guys my backup time dropped tremendously. It now takes about 10-20 minutes tops! Thanks you saved an entire work day for me

I have a newly appointed CFO that will need to use Quickbooks from another state. I know we can utilize Team Viewer for the remote access into a computer located on the network with the host pc. However, I'm not sure it's legal to even virtualize a Windows 7 desktop, as a vm into XenServer. I do have Volume Licenses for Windows 7 but I have never used them in this manner. I also do have Windows Server 2012 Data Center licenses but I'm in the middle of a VMware to XenServer migration and I only have 1 real server. I have made a desktop powerful enough

What would be the smart way to allow that person remote access since they won't have a desktop in-house?

She has a new laptop already and while I could install Quickbooks Enterprise 2015 locally on the laptop, it almost makes no point.

@NerdyDad because VMDK's import straight into XenServer

I remove / strip the Xen Tools from the vm, shut it off, then copy it. I import it into XenServer and use it's native tool to perform vm clean up. So far I have imported over 5 vm's with no issues!!

Can anyone assist me with this? I'm in a XenServer environment, I used the native backup tool of Windows 7(sorry it was my first time) and made a system image but I'm not too sure how to recover this machine. Any help would be thankful!

So when I first install XenServer and I "tick" thin provisioning, behind the scene it's making the drive ext, so I assume if I didn't choose thin provisioning it would have made it LVM?

@JaredBusch & @dbeato I think a trip to the local brewery will be in order soon. The Office WLAN should use the dhcp server of the Windows box. At this point I don't see the point of the Guest LAN since apparently, people are logging into the main one ;( now that I can see the logs!

Gonna nuke the guest and re-do this one later.

A lot of people will be dumping Ubnt NVR products (just the nvr side). Synology NAS just specifically for NVR is appearing to be the better offer for smb deployments up to 100 cameras.

@scottalanmiller It's pretty mature now. The feature set is minimal but works fine compared to some other options I've played with. If they added a few more features it would be golden.

@travisdh1 so I figured out he is working for an out of town MSP. I don't see their product line they support but I assume it's SOPHOS. Like I said before, if I'm going to deal with a local MSP I already have one in place aligned with the goals not only I but my director would have in mind since they actually come talk to you and plan before telling you they wanna rip out everything for a project that doesn't make any sense.

For those unaware, I work at a small non-profit. Our Saas app and basically finance app (Quickbooks) pretty much run the entire workload. 0 need for a VPN outside of goals that would align with IT directly. If we gonna do a VPN what sense would it make to do that without using our current NEW equipment before plunking down on another set of hardware? We are one cough away from another outbreak of COVID. We would be spending $ on a project no one in house would need since all our work already has been successfully deployed remotely for students and staff.

@scottalanmiller there is suppose to be a new USG being made since I think they are switching the cpu/chipset over for the entire product line. But honestly, until reviews are back and tested I'm holding funds. Just turning on the traffic analysis makes me cringe since it's not able to handle it without losing too much speed.

@travisdh1 said in Router/firewall recommendations for small branch office:

stick with Ubiquiti where you're not paying the backshe

The problem is he either was fired or let go from his previous job. So he eventually got a new job. I don't "know" if he works for Sophos because honestly in Alabama they really don't have a huge presence since any small to medium businesses I know don't even touch their stuff. I know Sophos well. I also got a taste of them about 10 years ago and decided to never go back also!

@travisdh1 see here is the thing, I actually have a relationship with a local MSP. "IF" I were to take on projects I don't want to deal with, I would rather deal with them. This contractor is not of my suggestion, he is just a guy that happened to be the son of one of our managers, who is no longer employed here. Case in point, if I say let's do a,b,c, if I blink and go to sleep, I come into an office where x,y,z is done with no sign-off or explanation or feedback. It's largely a leadership and an internal political problem I'm dealing with. One month things are good or relatively good and next time you look some outlandish project comes with no one knowing where it started from.

Just for an idea of my trust level for him, it's only in the direction of him installing cabling and hardware and basic administration. He has botched every installation of AD nor didn't know what virtualization was. However after he botched a site to site vpn setup prior 3 times which he actually never reported to me nor my management, it let me know were dealing with someone who worries about getting hours and checks not getting work done, also not being accountable. I'm not a network engineer (yet). But I can pretty much handle what was been thrown our way or find someone (read MSP) that can. So for him to not even start by using what we have in place showed me these are marketing tactics (thanks @scottalanmiller for teaching me their ways years ago lol) are being used to force his way into something and we pay for it and then he will roll around with fat check.

The only logical benefit I see would be connecting our servers and for AD, but keep in mind, in the proposal his "goof-ups" for AD aren't mentioned. I'm not an AD god, but even I know if you put the wrong dns settings in, you break AD. For the most part, 95% of our staff and students use SaaS apps or services to accomplish work and training. That 5% is like really just for the people in IT and finance and 1 small team for a project. We use Intuit Quickbooks. Honestly because I hate QB, I'm considering just moving to a hosted plan and take it off-prem. File servers are really only being used by IT for software distribution and backup. We do run a few servers for RDP usage but the people that need to use it, are IN office and can remote in.

Is that a vette?

I have the 2nd and 3rd one along with some other models. They work as advertised. I really like how Samsung and HPE have made some excellent chromebooks without breaking the bank.

Scott, the 3rd party guy now wants to talk about doing site to site vpn on Sophos hardware. We still at 3 offices. Any point or benefit to even doing this? Keep in mind only 5-7 people in the entire company need to remote into anything which they effectively can do now. Honestly this "3rd party" is becoming more of a sales guy for untested solutions to lace his pockets.

LOL my first thought was, dummy we already have edge routers in place, we can use that to do site to site but there is almost no benefit at our size unless its just to have the sites talking to each other. I can do that with Zero Tier (just not pretty with AD).

Ok @scottalanmiller now I see why you were saying your heavily on MeshCommander. I like it actually, it just needs an interface change and add reporting and more exports of data and it would really be the open-source champ. The remote tool works but possibly needs a few options added. It's very similar to how Google built Chrome Remote Desktop which basically works out of the box also.