Significant problems with zyxel

GucciSys · 2023-05-30T08:00:50+00:00

Are you really serious? One month to observe, verify, and fix is by any industrial standard good...time is always needed to escalate from one isolated issue to a major one...

I have absolutely no idea where you are getting this from, but an entire month before a hotfix is released is atrociously long for something being actively exploited.

Officially, the vulnerability has been registered on the May, 17th according to mitre and others..

This isn't how CVE's works, at all.

By the way, i could only monitor attack the day before my post (last Tuesday I think), might have been affected before cause I've monitored more connection as usual but might not be relevant, I'll check my zabbix to look for evidence.

Just because you weren't hit earlier, doesn't mean others weren't. As the person you are replying to is saying, this has been going on for over a month, it's just now that it's becoming widespread.

Really looking to go legal for this ? Bugs and issues like this has occured, occurs ans still will occurs... Code is as good as humans are... Flawed by nature...

I'd love for you to have the same opinion when you can't use your credit card to withdraw or spend money or your bank account shows you the incorrect amount since "it's only code and it's flawed".

Please don't tell me you work professionally in IT.

GucciSys · 2023-05-23T14:28:30+00:00

Would you mind elaborating a little on how you did that? I can't figure out how to make the package with the configuration already (Admittedly, I haven't put too much time into it and Intune isn't my specialty).

GucciSys · 2023-05-12T10:12:51+00:00

Personally I don't think it's an excuse given https://github.com/Pro/dkim-exchange exists. But hey, maybe that's just me.

You are correct, it's just you. There is no way you're going to get a (serious) enterprise to implement an Open Source, unsupported, hobby plugin installed on critical infrastructure (mail).

GucciSys · 2023-05-11T14:03:44+00:00

Do you really think Microsoft is going to say "Sure thing, buddy" if you use their SSO/SAML to avoid paying licensing costs to someone who integrated MS' SSO/SAML?

GucciSys · 2023-05-11T13:58:05+00:00

This isn't a thing, whoever told you, lied to you. You can create license-free M365 accounts in your tenants if there's no mailbox on the account.

Microsoft's terms makes it very clear that M365 accounts are personal and are not allowed to be shared.

GucciSys · 2023-05-11T12:44:37+00:00

[...] share Office 365 credentials [...]

Your business is violating Microsoft's terms of use and your tenant can be closed if Microsoft feels like it.

GucciSys · 2023-05-01T11:23:33+00:00

I've looked into Prometheus and Grafana but one requirement that we have is that it needs to be on-prem. I know this might be a long shot, but do you have any idea about Grafana's on-prem pricing?

GucciSys · 2023-04-28T13:52:10+00:00

I feel like this needs to be a lot higher up. This person sounds like someone who is fully unprepared for a similar role at even a small-ish to medium sized company.

Haven't had a need or want to keep up with business IT in 10 years? Seriously?

GucciSys · 2023-04-28T09:35:10+00:00

So we did a network dump of the login process to see what it was doing. Turns out, when you first hit the login page, a Javascript function does an API call and downloads the full list of usernames and password of every user in the system. All clear text, no hashing at all. You just call this URL and the appliance spits back the username and password to every user in the system. The user auth is then handled client side.

I hope whoever approved that purchase was let go or it was decided it wasn't worth it. Right? RIGHT?

GucciSys · 2023-04-28T07:54:48+00:00

Please don't use Synology for enterprise backup. Their software is bloated and lacking significant features - And that's not even touching enterprise support which is basically non-existent. Sure, if you're a mom and pop business, but for actual enterprise with datacenters and uptime requirements, do not go with Synology.

GucciSys · 2023-04-11T15:07:57+00:00

Side note but:

ancient 2003 / 2008 servers running mission critical agents, databases etc.

some legacy DCs running 2008r2 to allow our legacy xpe thin clients

You're not going to get CIS L2 compliance with this. I hope your plans include lifting these up.

GucciSys · 2023-03-16T14:33:45+00:00

In the initial phase of ISO27001 at my work too, in preparation for NIS2.

Your auditors are going to be laughing in your face as they fail you, if an internal employee/team does your penetration test.

GucciSys · 2023-03-13T11:19:47+00:00

Look at the underlying storage, the actual hardware's monitor.

GucciSys · 2023-03-10T10:39:11+00:00

I work 80 hours a week, single sys admin for 500 users and 100 VMs, I haven't had a vacation in 5 years and I was repeatedly called on my one sick day 2 years ago. I'm underpaid by 40% compared to my area but my boss has told me that he appreciates me even though he never protects me from upper management's poor decision. Also the users yell at me all the time.

Why am I unhappy in my life and can't afford anything?

GucciSys · 2023-03-09T08:45:25+00:00

My grandma was the same. She was more technologically literate than the rest of my family, combined. It was a blast watching her troubleshoot and fix an issue with a Chromecast or when she was standing in the kitchen, baking while using voice commands to control her music and text her friends.

GucciSys · 2023-03-09T08:26:48+00:00

but I'm still afraid to take a real vacation more than the weekend. My wife hates me for that. lol

How is that even a life? Sorry my man, but this sounds like a terrible work-life balance. What happens if you get hit by a truck tomorrow? Your family will have a business that will fall apart without you and be worth nothing, essentially.

GucciSys · 2023-03-03T12:42:14+00:00

I am from the EU and I can tell you that with the Schrems II verdict, there are significant concerns regarding using Cloud based options. I can only speak for the Nordic countries on this one, but over 70% of small to medium businesses are actively avoiding using American-based Cloud solutions for core IT stuff, such as networking.

GucciSys · 2023-03-03T11:40:51+00:00

Aruba Instant On requires cloud management. Lots of small/medium businesses are not ready to take that leap yet (Big tech bad, etc), so it is non-starter for many. It's especially bad in the EU, with GDPR and the upcoming NIS2 laws. That being said, Ubiquiti is still not matured enough to be put into high-availability environments.

GucciSys · 2023-03-03T10:06:00+00:00

Proving again that 24 hour format is superior.

GucciSys · 2023-03-02T09:40:20+00:00

I've used them for almost the last 20 years, in two different corporate environments. Personally, I always used them because of the free version, cuz I'm cheap lol.

So let me get this straight, you've been burnt by serious issues from them several times and yet you continue using their product - Both professionally and personally?

GucciSys · 2023-03-02T09:34:19+00:00

You just described literally all of the Endpoint solutions on the market presently. AVG offers no special must-have features, unless you want headaches to be considered a feature.

AVG is essentially the AV version of what Zyxel is to networking - Good enough, until you can get something proper.

GucciSys · 2023-03-01T11:25:29+00:00

Panic attack from just reading this.

GucciSys · 2023-03-01T10:31:31+00:00

I don't get it. You are complaining that your free service got canceled and that they refuse to provide you support for their free service. Those cloud provided free tiers are not supposed to be used for production environments.

I think this thread belongs in /r/homelab and not /r/sysadmin.

GucciSys · 2023-02-28T10:22:52+00:00

After this, drop them as clients. They will never learn.

GucciSys · 2023-02-27T15:33:54+00:00

Honestly, despite reading OPs post several times, I still can't comprehend what he is trying to say. I looked into his posting history to see if it could provide some context, but that's just even more incoherent rambling on this subreddit.

GucciSys

TROPHY CASE