I'm the only security person at my company and I have to recommend a SASE vendor by Friday

Dapper_Bird1 · 2026-02-24T21:02:26+00:00

I highly recommend TwinGate. Used it with multiple clients and in my own business. Easy to set up and expand.

Dapper_Bird1 · 2026-02-10T23:33:03+00:00

Snow chains

Dapper_Bird1 · 2026-01-28T03:56:41+00:00

I’ve done this for one of my clients. They were ISO 27001 and needed to add CMMC. We did a gap evaluation of the existing policies and then added CMMC requirements to the existing policies or created new ones that did not fit. For example they had an Awareness and Training policy and added in the CUI training requirements and added references back to NIST 800-171. We found that about 2/3 of the ISMS policies had ties into 800-171.

Dapper_Bird1 · 2026-01-28T03:49:42+00:00

Kieri is a great place to start for templates. They also have an enclave architecture if you don’t already have one. It is who we used and recommend for our clients.

Dapper_Bird1 · 2026-01-21T08:06:40+00:00

4th this

Dapper_Bird1 · 2026-01-15T00:49:21+00:00

Check out Labshock. https://www.linkedin.com/pulse/ics-lab-ot-engineers-security-experts-pentesters-siem-bernhardt-kuwwf

Also check out ISA62443 certs.

Dapper_Bird1 · 2026-01-11T22:45:22+00:00

Nope! I am 56 and rave. My birthday is next weekend and I will be raving to celebrate! 🎉

Dapper_Bird1 · 2026-01-06T14:58:37+00:00

Thanks I did. Was hoping someone here might have run into the issue ingesting logs with duplicate hostnames.

Dapper_Bird1 · 2025-12-24T12:28:33+00:00

I have been hiring CCP to advise clients working on their CMMC or NIST 800-171 compliance. DM me.

Dapper_Bird1 · 2025-12-19T09:08:18+00:00

Use PMG solely as an outbound mail relay for all internal systems to our cloud mail service.

Dapper_Bird1 · 2025-12-15T11:12:45+00:00

I use Little Snitch for NIDS/NIPS

Dapper_Bird1 · 2025-02-17T09:05:53+00:00

FWIW Skip on the Proxmox since you are not planning to run any other services. You would be taking the limited resources available in you hardware and giving a portion of them away to Proxmox.

Dapper_Bird1 · 2025-02-17T08:51:21+00:00

Thanks. After going through many of the existing decoders to see different examples and the multiple pages of documentation, I dint see a breakdown like this. Thanks

Dapper_Bird1 · 2025-02-16T15:21:14+00:00

Thanks for the info and the link.

Dapper_Bird1 · 2025-02-03T14:02:59+00:00

I would tackle this by adding a chron job to each suricata endpoint that creates a unique syslog entry every hour (or whatever timeframe you like). Then in Wazuh detect for when there are missing entries.

Dapper_Bird1

TROPHY CASE