@dbeato said in Security Information Event Management (SIEM):

@JasGot Make sure you go directly with them as opposed as a vendor. The reporting is kinda hard as you have to always request it instead of readily accessible to you.

Do you mean instead of through a vendor? I'm looking into this for one of our customers. I thought I would set them up directly rather than becoming a reseller or partner myself. It's our first go, and I don't think I want to get too involved.

Is this what you meant?

@JaredBusch said in Security Information Event Management (SIEM):

I looked at Arctic Wolf in 2019. Was interesting, but not something the client ended up going towards. They did not feel the spend was worth it.

But I thought it was a good solution at a decent price.

Thanks! Got a demo setup already.....

Anyone able to recommend a Security Information Event Management (SIEM) vendor?

Is the DNS Server the Domain Controller?
Is the VM Host a member of that domain?

I run into this all the time. So far no resolution.

But to get back running again, I run this, and it works every time. I believe I suffer from DNS poisoning very often and I don't know why. If you are suffering the same, give it a try and report back. This is NOT the same as ipconfig /flushdns.

dnscmd /clearcache

You can also do this from the UI:

@JaredBusch said in Fanvil Dual SIP Accounts?:

That does not sound likely. If the second PBX was working already, why would there be some setting that needed changed there? The fail2ban block is understandable if you were failing to log in and caused it to kick in.

For reasons I don't exactly recall (something to do with PJSIP a year and a half ago) the ports were set to 5062 and the phone was set to 5060. Also, it turns out there were two places the port needed to be changed from 5062 to 5060 in the PBX, once that was set correct things started to improve.

Not exactly sure why the fail2ban triggered. I know the user id and password were correct when I was setting it up. But I did, while troubleshooting, change the user id and server ip to another identical pbx, perhaps, during this change, I bumped the original server with the wrong user id too many times while making changes.

Then I had to change the port at Skyetel because it too was 5062.

Everything is on port 5060 now and it is singing right along! One phone, two different systems just like your video clip.

@JaredBusch Thanks for the screen shot, it made me know I was setup at the phone correctly. It turned out to be some settings at the PBX, then a block in fail2ban, then an issue with the device mapping.

With the help of the PBX support, it is all sorted out now!

@JaredBusch Must be an issue at the PBX. I'll look into that next.

I use option 66 in GHCP to setup provision in this Fanvil X5U phone and it works well.

I have added the credentials and ip address to the Line Registration settings page for a second SIP PBX. It won't register. I get a "Failed with 403" error.

The second line register just fine with the info for the first pbx, so I know I am filling in the fields properly.

My questions are:
Is the phone only able to register with the server assigned by DHCP Option 66 when we use option 66?
Am I missing a setting somewhere to turn this on?
Does the second SIP server have to be on another port, ie; 5062?

Thanks.

@JaredBusch said in Looking for a Remote Web access: Remote Workspace replacement:

ODfB not OD. Completely different mentalities. Though both pretty much the same technology now (finally).

Do you know if the OD that is included with Microsoft 365 (Non Profit, if it matters) is the Business version?