To come back around to the initial question, I'll throw GLPI + FusionInventory into the mix as a decent replacement for SpiceWorks. You keep the ability to have your whole IT environment managed and documented in a single system (Equipment, users, ticketing, contracts, contacts etc etc....)
So the laptop is my main driver and runs the 3 displays + it's own.
The lower display to the right is for a workstation that's used for building / maintaining our windows 10 deployment images as well as a GNS3 install that I need to find the time to use to mock-up our WAN / VPN topology.
The fireplace on the arm is a drastically underpowered 20" inspiron all in one touchscreen that had been doing nothing for years so I've taken it, put linux on it and it's just a toy / conversation piece.
EDIT: fireplace has now become an ASCII aquarium
I searched really quickly and didn't find a section or category where folks have been posting useful how-to guides or articles for the community. There are a couple of things that I've worked through lately that could probably be useful to others, just don't know exactly where to stash it on here. As an example, how to make a uefi bootable USB to automatically apply BIOS settings for Dell. In all honesty, my motivation here is as much to share with the community as have stuff like this publicly documented so I can find it if I need to re-do or update it for my own needs.
@valentina said in What did you have for lunch or dinner today?:
I ate 2 boneless bbq wings
Isn't that just marketing chicken fingers to adults? :face_with_stuck-out_tongue:
@mr-jones knowbe4. They provide training modules for users as well as allow you to run simulated phishing exercises. There are other companies out there that provide the same service(s) but we're using these guys for now.
On a related subject, not looking forward to the eventual request(s) to have he/him, she/her etc added to AD and our automatically generated email signatures
Good afternoon from Eastern Canada! I'm part of the IT team for a manufacturing company with offices throughout Canada and the Eastern US. Cheers!
It feels like the OP thinks that this is a seller's forum as opposed to a group of IT professionals looking to help each other out. Or just trolling to waste time. Or a college kid who was given an assignment and is looking for us to provide the answer.
Trying out Fedora on my personal laptop and watching season 3 of the grand tour
@DustinB3403 said in Bad one: SonicWALL Remote Management Vulnerability:
@wrx7m said in Bad one: SonicWALL Remote Management Vulnerability:
WTF? People NAT their iDracs?
Some people...
Probably the same people that put ketchup on a perfectly good steak..... psychopaths the whole lot of them
@jimmy9008 said in Cloudflare Spectrum alternative:
@dashrender
There are a range of TCP/UDP required ports for the solution to work. Once example is EDT. Our DC team have that on to help the user experience for remote connections. I think that is UDP 2598. There are other examples too.TCP / UDP : 2598
TCP / UDP : 443
TCP: 8008
UDP: 16500 - 16509
I'm not the citrix expert in our shop, but we're full VDI (XenDesktop) with S4B and Zoom both running HDX and the only thing that we have to have open to the internet is HTTP and HTTPS incoming. I'd ask the questions surrounding why those other ports have to be open inbound (and make sure that the answers make sense) before spending anything or adding more moving parts into the picture than you've already got.
@dashrender said in Random Thread - Anything Goes:
@nadnerb said in Random Thread - Anything Goes:
Context is everything.
I took it more as globally defining variables is bad
@gjacobse said in New customer - greenfield setup:
@dashrender said in New customer - greenfield setup:
@gjacobse said in New customer - greenfield setup:
Not knowing all of the aspects you will run into, something we have here - and is a pain point sometimes is the WI-Fi and vLans.
We have iPads for certain tasks,.. we have a few RING cameras as well, In some cases - they only need to go to the internet - so they are routed as such.
The iPads are used as interruptor stations - so only need to hit that web site (iPads are MDM'ed), and the Ring camea only needs access to RING.
These are my thoughts as well, it's one of the draw backs to Ubiquiti gear - limited to 4 VLANs on WiFi (at least used to be). For now, I think four will do me.
Production
IOT - internet only
Guest
medical equipment - future potentiallol - well as much as I don't like them - we use Cisco and Meraki... I think we have almost 30 vlans and a dozen SSIDs.. but some are getting added to retire others.
knock wood beyond the price I can't say anything too bad about Meraki for wireless.... firewalls is another topic, but we've got their wireless deployed at 10 or so sites and it just works. The only thing I've had to do that's a bit outside the norm is script a nightly reboot of the antennas and it was setup strictly as a peace of mind thing as the gear is getting on in age.
@dashrender said in New customer - greenfield setup:
@notverypunny said in New customer - greenfield setup:
@dashrender said in New customer - greenfield setup:
@notverypunny said in New customer - greenfield setup:
For the filtering piece, I don't know that anything relying on DNS filtering alone would be adequate in a business environment. I'd come back to your firewall option from Sophos or an equivalent FortiNet product (just because that's what I'm used to) with a web-filtering subscription. That way even if you've got devices that are getting around your DNS (especially mobile devices) to look up the undesirable sites and services, the FW would still block traffic to and from the destination based on it's web-filtering. This should be possible without any MiTM type inspection as well.
Yeah - this is where I'm leaning. I care less about the virus filtering on the guest network - where all the phones and guest devices should be.
Depending on how petty and litigious the guest network users might be, that could be a dangerous stance with regards to the guest network.
I personally do refuse to use any guest WiFi that requires the installation of a third party cert to use. That said - I can only recall this happening one time.
I'm not against DNS filtering - all the things Pete.S mentioned, but SSL inspection on guest - nope, not interested... Hell I'd be more worried about being sue for breach of privacy.
Absolutely this too. A FW shouldn't have to do anything like MiTM for basic webfiltering, just block traffic out to undesirable sites. Your subscription service is keeping that list of sites up to date and accessible to you..... The SO's place of work wants to to dpi / MiTM on their guest wifi, so guess who's data plan got upgraded recently.
@dashrender said in New customer - greenfield setup:
@notverypunny said in New customer - greenfield setup:
For the filtering piece, I don't know that anything relying on DNS filtering alone would be adequate in a business environment. I'd come back to your firewall option from Sophos or an equivalent FortiNet product (just because that's what I'm used to) with a web-filtering subscription. That way even if you've got devices that are getting around your DNS (especially mobile devices) to look up the undesirable sites and services, the FW would still block traffic to and from the destination based on it's web-filtering. This should be possible without any MiTM type inspection as well.
Yeah - this is where I'm leaning. I care less about the virus filtering on the guest network - where all the phones and guest devices should be.
Depending on how petty and litigious the guest network users might be, that could be a dangerous stance with regards to the guest network.
For the filtering piece, I don't know that anything relying on DNS filtering alone would be adequate in a business environment. I'd come back to your firewall option from Sophos or an equivalent FortiNet product (just because that's what I'm used to) with a web-filtering subscription. That way even if you've got devices that are getting around your DNS (especially mobile devices) to look up the undesirable sites and services, the FW would still block traffic to and from the destination based on it's web-filtering. This should be possible without any MiTM type inspection as well.
There's mention of a tftp recovery option in the link below:
Don't know if it still applies but might be worth trying.
Also:
https://help.ui.com/hc/en-us/articles/360018189493-EdgeRouter-Manual-TFTP-Recovery#4
@dustinb3403 said in TacticalRMM issue today, anyone else?:
Sounds like you're using this in production, correct?
Truth. It's not the only remote tool that we're using, but it's a nice backup / complement to our other options.
@pmoncho I don't think it's bricked, but I seem to recall problems when going from the 1 series to 2... IIRC part of the problem might be that the button inside that pinhole for the paperclip reset is a bugger to actually hit and hold... I can't say with 100% certainty whether it was the ER-X or one of my dd-wrt projects that I ended up having to hold the paperclip / pinhole reset for something crazy like 5 minutes for things to play nice.
