@thecreativeone91 said:

You can of course turn on port mirroring and use wire shark but, good luck sorting through it.

Agreed - nice,.. but i don't need that much detail nor do I have that sort of time. Who does?

Thanks to @scottalanmiller and @JaredBusch; I have a nice flowing network currently... well.. as nice as can currently be with a mess still behind it.

While I still sifting through the book and forum, I just wonder what kind of reporting can be generated from it. While I understand UT is a full OS with 'stuff on top', it had what I felt was some good reporting tools. It was pretty easy to see what was being passed back and forth, which is how I found a computer being used to access a gaming site - without the user knowing.

It would be rather nice to see some of the reports that I had access too with UT.. at least to some degree...

Thoughts? Pointers?

@ajstringham said:

@g.jacobse said:

@Dashrender said:

Hold on.. are you saying the calendar wasn't in the PST?

Seemingly not. Which is why so much irritation regarding the matter. It's not rocket science.. It's just a D*^@M .PST file. how difficult is that,.. especially when you not only export it, but copy the whole folder offline.

I'm still searching for it. I don't have the original system since it was a suspected rootkit / zombie / malware / IDKoC system. I backed up the 'normal file locations' and nuked it - partition table and all... Only thing I didn't do was a DoD level wipe.

What are you using for email that doesn't have a calendar function built into it? It was a local calendar?!

Yes - I am still in the process of migrating from POP/IMAP email. Only a few people used (Outlook) Calendars, which was in local PST files. Once I get things imported into O365 it won't be much of an issue. But It's a long row to hoe when you have 160 people in 9 counties and '6' dozen offices. The O365 migration script is running and pulling mail from the host, but of course, Calendars are on a POP host.... But it's getting there.

@Dashrender said:

Hold on.. are you saying the calendar wasn't in the PST?

Seemingly not. Which is why so much irritation regarding the matter. It's not rocket science.. It's just a D*^@M .PST file. how difficult is that,.. especially when you not only export it, but copy the whole folder offline.

I'm still searching for it. I don't have the original system since it was a suspected rootkit / zombie / malware / IDKoC system. I backed up the 'normal file locations' and nuked it - partition table and all... Only thing I didn't do was a DoD level wipe.

In this case it's not just the users, though they do add quite a bit of it. It's also hardware and software issues - so it's a Vendor Issue... and in this case. It's a Micro$oft issue.

I've logged two eight hour days in the last twenty-four hours... no biggie.. I've done my fair share of them. But dealing with M$ is not always the most straight forward or easiest. I've put my phone on DnD (let the firey dragons deal with vm) while I deal with it.

What's the point in copying the User profile, saving the OUTLOOK data folder, making a .PST export if the damn calendar isn't going to go with it. This really shows the limitations of NOT having Exchange in a business environment...

And he makes the sixth (sith) person to hunt me down this morning.. I don't mind the lack of sleep.. but how about you leave me be a while....

Ever have a moment when you want to just sit and rant? Use language not really suitable for the office, ladies, or young ears?

Yea - it's one of those days today.

I admit that anything is possible. When you recycle hardware like I am doing - there is that chance that, while it works,.. it doesn't exactly work right.

As for UT being a resource hog - hmm.. I can't answer that.. I don't get into all that. I know that IT was reporting only about 25% CPU / memory useage...

But - the reports is what helped me catch a desktop that appeared to have a root kit on it... or something. And it was simple (the UBNT appears such so far...) to take a turn that IP address off. Now that I have some back ground with the unit,.. one will be on order for the house,.. and to replace this one (it was suppose to be on another site...).

I'm extremely grateful for the assist. And I get to learn more.

ETA: Looking at the dashboard - we are pushing 8MB - no one is here and I can't say that Pandora should be pulling that much right now.

@scottalanmiller said:

And you are able to post to ML again from a desktop?

The previous was from a laptop, this is from my desktop that I am at normally. It would seem so.

I may download a new image of Untangled and see - but that will be a weekend project.

With some assistance earlier today ( @JaredBusch ), the EdgeMAX lite is up and running. And for the moment it appears that everything is clipping along. A speed test came back with nearly 9MBs RX and 1.3MB TX.

Of course, there is no one here currently, and next to nothing going on. However during the ccourse of the day, I found that a PC appeared to have had a Rootkit on it. As discucssed with Jared, Log files are extremely helpful in this manner. The Untangle Box gave me those reports - Maybe they are there with the UBNT unit,.. I don't know yet. I have some config to do still so that my drivers can use there tablets tomorrow (port doesn't seem to be open). and a PC to rebuild...

Thus far, I'm impressed with the little spit fire..

@scottalanmiller said:

$40 is a large percentage of a $99 drive!

Yea,.. nearly 50%.

146GB is $59
300GBis $99..

@JaredBusch said:

Easily. Can you schedule a time for a meeting?

Uhm - Anything is doable - but I can't pay mileage since I'm trying to learn it -

@Reid-Cooper said:

@g.jacobse said:

So with my recent debacle with my Sonicwall and Untangle.. I have to ask... Can you lend some guidance on how to configure the unit?

They are a little trickier than the average router for initial setup. But if you update to the latest firmware, there is a wizard that walks you through everything. I think this is part of their preparation for the new UGS unit that will replace the RouterLite.

UGS - Ubiquity Gigabit switch?

@Hubtech said:

it's pretty cool how powerful this low lvl stuff is getting.

Yes it is,.. Grabbing my walker,.. I can remember the days with 8MHz was smoking,.. especially since we also has a TURBO button for 12MHz...

That is pretty cheap.. jeez,.. My brother and I have been trying to deal with how to backup our data as well as our dad's for the last year or so. And we have thought about setting up replication between the three houses. We all get off site and even out of state backups - This could be a good option. Though a power hungry one.

@JaredBusch said:

You can get a nicely equipped Dell R620 for about $1200 from XByte.

Yes - I actually spoke to Andrew and Scott there earlier this week about the drive and system. I've worked with Andrew in the past, and it's nice that they are so responsive.

There is 'plenty of space' on the 146GB drive, but I feel that going with 300GB drives is better, besides, it's only $40 more at $99 a drive.

@JaredBusch said:

@g.jacobse why is open source out? support can be purchased for both solutions you mention.

Hmm,... 'out' is the incorrect word.. I'd rather go OpenSource as opposed to the Big Box software/hardware...

So with my recent debacle with my Sonicwall and Untangle.. I have to ask... Can you lend some guidance on how to configure the unit?

@Reid-Cooper said:

Very true. pfSense only makes sense if you have existing hardware to reuse.

@JaredBusch said:

@thecreativeone91 said:

Honestly I don't know why more SMBs don't consider Pfsense. They rule it out as "home grade" or something. But it's cheap (free aside from hardware) and P4 or core, or iseries will run it with ease. I've ran them very successfully with many VPNs (10gb throughput) and it has great firewall, vlan and limiting settings. even scheudling on the limiting so you can open it up for nightly updates to run full speed when no one is on the network.

Sonic wall is something I'd stay away from. Ubiquiti has good stuff. Cisco does as well, but IMO cisco is becoming less and less attractive in the market as others come up with better priced/feature units than cisco offers.

The only reason I do not run pfSense is because I want a small simple hardware device, and Ubiquiti fits that for me. Prior to finding the Ubiquiti EdgeRouters, I was using pfSense on old hardware. Prior to that I was using ClearOS.

I have a Ubquiti Lite router for one site,.. just haven't had much luck with decypher it yet.. Of course when you have one crisis after another (Yes, I do know it's the IT world... it's a daily thing) I need some decompression time.

I like Untangle for the same basic reasons it would appear that pfSense is out,.. Open Source and free....

As for size,.. shame the Raspberry Pi isn't 'big enough' to run as a FW with either..

@thecreativeone91 said:

MRTG on your side + on the ISP side will give you a good picture of what does on,

Sorry .. What? What is MRTG -...

Looks like my predecessor used the vol shadow copy, and 'x-copy' to an external drive. Which I just don't know about...

Backups are a serious issue.. but then so is the whole network. no AD, no central point of management... Different user name schemas ... and I'm still finding stuff..

I'm going for a full network build... as best I can with what I have if I can.

I've talked with Andrew and Scott at xByte and discussed what I am seeing versus what I expect.

While the issue of only one hard drive is reason enough to rebuild the box, maybe I don't have a hardware issue with the drive.

No Events are logged. Dell OM reports no issuses in health other than the psu1 being down (unplugged) and SAS firmware update needed.

The drive seems to be 'norml' other than the drive health indicator isn't on. Not orange or green,.. Completely off...

Could this be causing my posting issue?