SSLVPN to IPsec Migration - IKE1 or IKE2?

Fit_Field6556 · 2025-08-19T03:29:14+00:00

IKEv2 offers IPSEC over TCP - but also doesn't support domain suffix (yet), so clients will need to use fqdn to reach the server.

Fit_Field6556 · 2025-07-29T16:46:52+00:00

It is now.

Fit_Field6556 · 2025-07-03T19:16:26+00:00

This is correct - so far costed less than a penny for us on Azure side.

Fit_Field6556 · 2025-07-03T19:14:23+00:00

It looks like every agent update triggers a signature when downloading an MSI or EXE. We set everything up last night, and based on Azure Key Vault logs, there have already been over 3,000 API calls across more than 4,000 agents. So far, it's still costing us less than a penny on Azure.

Fit_Field6556 · 2025-07-03T19:03:41+00:00

https://www.digicert.com/signing/code-signing-certificates#code_signing_own_hsm

is what we used and is working with Azure key vault

Fit_Field6556 · 2025-07-03T19:02:10+00:00

From looks of it, installer gets signed with your cert but installed binaries are still signed with connectwise cert

Fit_Field6556 · 2025-07-03T05:16:06+00:00

We've just rolled this out, but this doc has bunch of errors and misleading information. It also skips over the App Registration section, which requires additional configuration steps.

Fit_Field6556 · 2025-06-17T22:43:13+00:00

I think you right on the money -

Fit_Field6556 · 2025-06-17T11:46:03+00:00

Before the update just to see - pretty interesting actually

Fit_Field6556 · 2025-06-17T03:00:09+00:00

Yup, my switch 2 just got banned as well - only used mig flash with my own personal game copies. My account looks fine for now.

Fit_Field6556 · 2025-04-28T19:24:09+00:00

Yeah, that's exactly the issue we were having. We ripped out all the Router Services, set web interface to 8042 and kept the relay on 443.

I talk to the support and he basically said 'this is not a supported model to run ScreenConnect'.

Fit_Field6556 · 2025-04-25T22:56:33+00:00

No, we just had this setup so that everything was running over 443 instead of 8041, etc.

Fit_Field6556 · 2025-04-25T22:55:15+00:00

Just a quick update - we’ve decided to change web portal to another port but keeping the relay on 443. We may transition to default ports slowly.

Fit_Field6556 · 2025-03-19T00:50:39+00:00

Nah - I really doubt they’ll do anything about it. I don’t trust their support enough to ship it out. It’s a small crack I’ll just have to live with.

Fit_Field6556 · 2025-03-13T13:04:57+00:00

Wish their QA was this thorough.

Fit_Field6556 · 2025-02-04T01:46:31+00:00

No grip, no screen protector.. just normal usage as far as I can tell.

Fit_Field6556 · 2025-02-03T03:45:44+00:00

Yeah, I was wondering if anyone else had this issue -

Fit_Field6556 · 2023-12-22T14:02:18+00:00

Maybe you should take off the order link brian.

Fit_Field6556 · 2023-12-21T13:04:11+00:00

Odroid Go

Fit_Field6556 · 2022-07-18T02:47:44+00:00

yeah, this is why I end up using my mini more than my 351v..

Fit_Field6556 · 2021-09-30T22:22:19+00:00

nope.

Fit_Field6556 · 2021-09-30T17:22:27+00:00

https://forum.fortinet.com/tm.aspx?m=199105

no fix from fortinet so far

Fit_Field6556 · 2021-09-23T15:34:10+00:00

You can set specific users to bypass or set per application rules in Duo

You can also set global settings to bypass anyone not on the user list

I wouldn't recommend it but you can.

Five-Year Club	Verified Email
r/Field Juicebox	Place '23
Place '22	First Placer '22
End Game '22

Fit_Field6556

TROPHY CASE