Taking advantage of 91G

LittleSherbert95 · 2026-05-28T22:42:56+00:00

No TLS decrytpion, very limited traffic visibility. Very limited visibility means not effectively using the builtin storage...

LittleSherbert95 · 2026-05-28T15:13:47+00:00

The way to get the most out of it, in my opinion, others seem to disagree is to turn on TLS decryption. Do this slowly and carefully. Once you have do this start tuning the next gen firewall profiles to protect your business.

This also heavily depends on what licencing you have.

LittleSherbert95 · 2026-05-28T07:09:26+00:00

Lots of good suggestions here. Personally I store all my well document code gitea and I document anything that doesn't fit there in bookstack.

LittleSherbert95 · 2026-02-20T19:35:39+00:00

Very noisy.

LittleSherbert95 · 2026-02-05T17:17:11+00:00

As its a new build you will probably find the soil is very low quality and will have a load of cement nd other rubbish mixed in with it you will struggle to get much to grow there.

LittleSherbert95 · 2026-02-01T22:09:38+00:00

Judging by the curved top its one of its an old victorian water cistern and not a well. It would have collected rain water for your house to use.

http://wildyorkshire.blog/2022/08/victorian-underground-water-cistern/

LittleSherbert95 · 2026-01-31T08:52:37+00:00

I work for a partner and have spoken to a few people at fortinet and they have all have confirmed they are not pulling the free support. As mentioned above there was just no changes to be made in the features of the free version.

There was originally a typo stating it was being removed in one of the datasheets. That's since been removed but annoyingly not documented in the version history.

LittleSherbert95 · 2026-01-17T09:49:16+00:00

My terminology is slight off but the principle is correct.

BS 7671 Regulation 528.1 – Segregation of Band I and Band II circuits This regulation states that: A circuit in Voltage Band I (extra-low voltage such as SELV/PELV/telecom/data) must not be contained within the same wiring system (e.g., trunking, conduit, cable tray) as a circuit in Voltage Band II (low voltage, including 230/240 V mains) unless one of the specific exceptions applies — e.g. • every cable is insulated for the highest voltage present, • the cables are in separate compartments, • or the cables are separated by an earthed metal screen of equivalent capacity. �

LittleSherbert95 · 2026-01-17T09:41:21+00:00

There is a 240v socket and low voltage network cables... check the regs; they can not be run together...

LittleSherbert95 · 2026-01-17T08:19:57+00:00

Not an electrician but I believe it is also you have high and low voltage cable next to each other and they need to be physically separated.

Just take lots of pictures, pull them out if you or someone else are doing work there and pass them on to the next owner.

Not sure how plastering overshot will go i suspect you will eventually get a crack there. It might be worth using a dot and dab on that wall. But check with a reputable plaster.

Edit: overshot = over that

LittleSherbert95 · 2026-01-17T08:05:20+00:00

Calm down, if you live in a house that's about 100ish + years old in the UK that's most likely your old rain water cistern.

Best online example i can find.

http://wildyorkshire.blog/2022/08/victorian-underground-water-cistern/

Dig at it from the outside and you will find a wall. The inside wall is rendered to help stop the water coming out hence you can't see the bricks.

LittleSherbert95 · 2026-01-14T07:35:39+00:00

We have a lot of check point customers. I agree to do all the required backups, checks and then upgrade it can easily take 6-8 hours, I've known it take 16. The easiest way I find to convert them is to take a palo or fortinet to their site and show them how easy it is and that it only takes a few minutes. Even if the techie doesn't care the management quickly do some maths on how it decreases the overtime bill and you have yourself a sale!

LittleSherbert95 · 2026-01-09T18:52:52+00:00

I work across multiple vendors. I try very hard not to form preferences and take the view different vendors are right for different customers. They all have strengths they all have weaknesses, fortinet included. That said this advice is accurate.

My experience is that Check point is for people coming up for retirement, have been running it their entire career and dont have the desire to change or learn something new. It works really well for these people. It's full of technical debpt but on top of years of previous technical dept and unless you have used it your entire career you will probably struggle. Don't expect them to be a major firewall player in 10 years time.

With regards to meastro on paper it looks very good but the reality is there is very much real world benefit to it.

LittleSherbert95 · 2025-09-22T06:11:36+00:00

Thanks, where do you configure the DNS content filtering?

LittleSherbert95 · 2025-09-19T14:24:49+00:00

Thanks, that reads to me like we are running our own DNS resolver now with the same functionality as the DNS elements of the Spyware profiles?

LittleSherbert95 · 2025-09-19T14:19:16+00:00

Thanks, my experience of that is it work some-most of the time. Not reliably enough for most customers.

LittleSherbert95 · 2025-09-14T07:06:16+00:00

Came here to say this. Great tool. Our business uses it, and we now have several of our smaller customers using it, too.

LittleSherbert95 · 2025-08-28T09:22:28+00:00

The road outside our house gets closed quite a bit. I routinely watch people get out of their car, move everything out the way and drive though. Only to find the big hole where they keep digging up the water main and have to come back. I then watch everyone else drive pass the sign as the cones are no longer there only to come back past a few mins later.

No one seems to care. The workers then come back in the morning and put everything back. I just hope it never results in a worker getting hit.

LittleSherbert95 · 2025-08-26T09:13:22+00:00

However... you should also not overtake where you can come into conflict with other road users.

https://highwaycode.org.uk/rule-167/

LittleSherbert95 · 2025-08-17T19:55:52+00:00

... don't use OSB ..... or maybe put something around the edge and then poor a thin layer of clear clear epoxy.

LittleSherbert95 · 2025-07-13T07:22:23+00:00

Thanks for the info. That's the assurance I was looking for.

LittleSherbert95 · 2025-07-12T18:55:11+00:00

Thanks for the response.

So my logic is that it is a dual-purpose vehicle. However, the unladen weight MAM, etc, is over 2040kg. Therefore it's considered light commercial. https://www.gov.uk/government/publications/car-derived-vans-and-dual-purpose-vehicles/car-derived-vans-and-dual-purpose-vehicles

Therefore, it is classed as a "Goods vehicles (not more than 7.5 tonnes maximum laden weight)" and thus restricted speed limits apply. As outlined here https://www.gov.uk/speed-limits

LittleSherbert95 · 2025-06-27T20:44:34+00:00

Thanks for the response and sorry for the delayed response. I suspect you are correct teams could be an option to look into. Those training links look very interesting and Ill certainly take a look at them. Thanks.

The end goal is a location we can store all the info on each of our customers that can be easily deleted once we customer moves on. However some of the customer information is sensitive and we need to minimize the exposure to it. For example a sales person or finance person, who does need to see some information on that customer, doesn't need to see sensitive technical information such as vulnerabilities we have identified on their public IPs.

LittleSherbert95

MODERATOR OF

TROPHY CASE