@Kelly I think of an ISR as something the ISP provides as part of the service.
I found one of the units you were describing on Amazon for $383, most seem to be closer to $1,000
It's interesting that juniper has any interest at all in that market. It looks like something an IT guy would buy versus a CPE.
@scottalanmiller In my world ISR would bring Adtran to mind. Also 3com/US Robotics before HP bought them up.
I think Cisco was about a decade late to abusing that terminology. Because what they call Integrated Service Router really isn't anything an ISP would be interested in using as a CPE.
@Dashrender said in What Are You Watching Now:
Saw Wonder Woman this weekend -
What was so awesome about it? Why did the internet love it so much?
The whole DC universe in movie format is a giant fail IMO. Marvel was never my favorite for comics but they are crushing it. DC movies are like a fart in the wind.
@Kelly said in Firewalls, the good, the bad, and the ugly.:
I'm working on switching away from Cisco ASAs to Juniper SRXs. I was actually surprised by how inexpensive the Junipers were relative to Cisco. JunOS is proprietary, but it is very readable, and they learned a lot from seeing how IOS does things poorly (oh how I love rollback 0). It is based on FreeBSD.
That would be interesting. Its an actual firewall and not an ISR?
Never touched the books though some in my office are always way ahead of the series because they are fans.
I don't think it's the nudity.
Another good show is History channel Vikings, more realistic.
Really looking forward to this weeks Silicon Valley..
@DustinB3403 said in What Are You Watching Now:
@EddieJennings no spoliers, still on season 1, watching with the girlfriend
I just completed a month long binge rewatch in anticipation of season 7
The North remembers...
I did manage to get Windows 10 Home Edition running as a kiosk RDP thin client. $179 for a Windows Minix, no add-ons or hacks.
All was done in the registry. I will post later for reference.
Considering it has a legit Win10 Home license you could consider it a $79 fully capable RDP 10.2 thin client.
I'm still surprised at the lack of Linux based RDP 10 solution. FreeRDP has really fell behind. RDP 10 or even 8.2 is a significant improvement over previous versions.
@scottalanmiller lol had to google that. No, the TV series... http://www.fxnetworks.com/shows/fargo
@scottalanmiller I loaded core on a Rasberry Pi before I understand much about it. There is no Windows UI. What advantages there are I don't know. I read it only runs on 3 platforms right now.
I know, embedded is embedded. The IoT Core is at least somewhat deserving of the name. Microsoft has never been very original.
Can you imagine Raspberry Pi v IoT?
@scottalanmiller I see where you are going with it, but these will be stand alone and possibly in different locations. Just looking to lock down the wind 10 home user profile to run an app, not concerned with preventing changes (though Windows UWF in IOT Enteprise would also be nice)
If IOT Enterprise was affordable and available per device would be worth the $$$. Win Pro doesn't do all the things IOT E does though.
BTW the name change is terrible for searching, I just come up with IOT Core stuff.
@scottalanmiller said in Looking to lock down Win10 Home as a Thin Client. Is there a new iteration of Windows SteadyState?:
Steady State died off long ago. You'll need third party software for this now or do something unique like virtualize or use a SAN.
Not following on how the SAN would fit in. I have win 10 home tiny computers, just want to lock down a login so all it can do is run Remote Desktop. Open to suggestion for apps to do the lock down. I don't mind some more cost, just couldn't justify spending $500+ for new thin clients with Windows IOT Enteprise (the new Windows Embedded).
I settled on Minix Z83-4 for basic RDSH 2016 thin clients.
I was hoping for something like Windows SteadyState or a KIOSK mode, but the latter requires updates and the former apparently is no longer updated by Microsoft (https://en.wikipedia.org/wiki/Windows_SteadyState)
I managed to get GPEDIT installed on Win 10 Home using this (place in a bat file and run as administrator)
@echo off
pushd "%~dp0"
dir /b %SystemRoot%\servicing\Packages\Microsoft-Windows-GroupPolicy-ClientExtensions-Package~3*.mum >List.txt
dir /b %SystemRoot%\servicing\Packages\Microsoft-Windows-GroupPolicy-ClientTools-Package~3*.mum >>List.txt
for /f %%i in ('findstr /i . List.txt 2^>nul') do dism /online /norestart /add-package:"%SystemRoot%\servicing\Packages%%i"
pause
Sorry I don't know how to post that here for easy copy/paste, but I will update post if someone tells me how.
Anyway, I attempted to apply my target kiosk user with a User GPO that replaces the User Environment but its not taking. Maybe Win 10 Home just ignores the applied group policy. I remember something like this working in previous windows version though.
Just looking for tools, suggestions or otherwise.
@bj yeah it's just that you didn't list anything specific that would make me think Palo Alto would bring anything to the table for you. They will still sell you."
I read it and added that, maybe still didn't come off right. You're here on mango lassi so everyone expects a certain level of competence 
on my first post I got a little but hurt over @JaredBusch but now I prefer it
I'm at the point where I would believe more in a firewall + hosted security service like webroot. But I don't deal with anything outside of connectivity and backend network stuff on a.l daily basis.
I gotta ask.... Has anyone ever even heard about a major virus that spread through the internet, attacking and penetrating your everyday routers and basic firewalls? And DPI/SPI is not worth much if you aren't configuring your router to do anything with that info.
Let your firewall/router do its job and if you need more features it falls to a proxy server or outside service like webroot.
I much preferred M0n0wall to PFSENSE, but since Manuel is busy doing other things everyone had to move to PFSENSE. I disagreed that the project had run its course.
A Palo Alto device is not for you if you are posting these kinds of questions. And that's not a slight to you. PA customers have specific issues (like being targeted for attack) that brought them to pay that sticker price.
Sonicwall MAYBE was a good option 10 years ago. 99% of your SonicWALL guys use it because they have been using it for 10+ years and you cant really argue with them about it. Its familiar but it offers zero real benefits over a Ubiquiti Edgemax.
Your Ubiquitui USG can tie into a Unifi controller you could host on Vultr. So you get a self hosted Meraki experience. Last I evaluated USG had some bugs vs Edgemax so I can only speak to the latter. I would assume those issues are resolved by now. @scottalanmiller or @JaredBusch would know.
Ah, so it couldn't double as a premise file server?
My only issue is 2 users overwriting each other...
Been researching thin clients and supposedly RDP 10 is supported on Android. Has anyone installed that version and tested with 2016 RDSH?