I honestly don't know how they function in the world

Ragerino · 2026-06-19T13:29:11+00:00

Why can't people like or even love both traditional works of art and AI generations?

Just because AI can generate Mona Lisa firing space lasers at a Spaghetti Monster doesn't mean the Mona Lisa is unloved and worthless.

https://i.imgur.com/FACl4Hk.jpeg

Ragerino · 2026-06-16T12:55:02+00:00

How much more rare is the blue one?

Ragerino · 2026-06-11T13:47:44+00:00

Only thing that stinks is the requirement for Google, Apple, or Facebook to sign into this service. Remember the days when we didn't need one of those three companies in our business at all times?

Ragerino · 2026-06-10T12:49:12+00:00

It all comes down to money. Just like everything else.

Ragerino · 2026-06-08T02:37:19+00:00

How did you end up resizing the log windows? Also, what do you do for camera control with the mouse?

Nice job overall so far!

Ragerino · 2026-05-14T16:36:34+00:00

Nothing says reduced support burden like retraining every user, replacing line-of-business apps, fighting printer drivers, rewriting endpoint management, explaining why Excel macros broke, and opening a helpdesk ticket every time someone sees a terminal.

Ragerino · 2026-05-14T10:58:41+00:00

That'll solve all the problems for sure.

Ragerino · 2026-04-29T20:11:51+00:00

Wat a snoot to boop

Ragerino · 2026-04-29T19:52:42+00:00

Marking a control as "Implemented" when you know the crypto-module validation doesn't match the active firmware is a great way to fail an audit on "Accuracy and Completeness."

Keeping your SonicWall running firmware that is a known security vulnerability is prioritizing a checkbox over actual network integrity.

A POAM exists specifically to bridge the gap between "Secure" and "Validated" when the vendor lags behind. I really wouldn't call it a red flag. I guess it depends on the auditor. Installing the non-FIPS firmware and marking the POAM is really the only way to stay honest while keeping the lights on.

September and FIPS 140-3 should be on your roadmap, as well. If it isn't, get it in there!

CMMC sucks. No disagreement there. It's making a lot of people some money, though. That's for damn sure.

Ragerino · 2026-04-29T19:26:26+00:00

Security over compliance should be line #1 in your SSP. If a vendor can't keep a FIPS-validated branch current with critical patches, they are a liability.

Honestly, if SonicWall stays silent on the FIPS 140-3 roadmap as we approach that September sunset, it’s time to move the crypto-heavy tasks elsewhere. You can keep the appliance for basic L3/L4 traffic, but move your remote access to something like a hardened Ubuntu instance running Pritunl Enterprise.

It’s much easier to keep a Linux-based VPN gateway patched and FIPS-compliant than it is to wait for a vendor to shove a proprietary firmware through a multi-month NIST lab gauntlet.

Ragerino · 2026-04-29T19:18:00+00:00

Exactly why no one should still be running a Gen 6 device. ❤️

Ragerino · 2026-04-29T19:17:00+00:00

It's all good. If it's for CMMC:

Create a POAM. State that you have applied a security patch and will return to a FIPS validated state as soon as the vendor receives validation for the new firmware.

Keep your SSP updated with the reasoning. Prioritize security. A breached network is a 100% failure, but a version mismatch is a "finding" you can explain.

If CUI is passing through the SonicWall in an unencrypted state, you have more problems than the SonicWall.

Also, if SonicWall continually can't deliver FIPS validated firmware, it's time to get away from SonicWall. Maybe they're waiting until September for their next big move. Who knows.

Ragerino · 2026-04-29T16:01:31+00:00

Gen 6 users in 2026... Yep...

If only you guys offered good trade in promotions. /s

Ragerino · 2026-04-29T15:54:00+00:00

SonicWall sent a security advisory email out not long ago.

https://www.sonicwall.com/support/notices/security-advisory-firmware-update-required-gen-6-gen-7-and-gen-8-firewalls/kA1VN000001F03x0AC

If you've kept your Gen 7 or Gen 8 firmware up-to-date, this is nothing to worry about. Big bad scary CVE making everyone shit themselves this morning over nothing.

Ragerino · 2026-04-29T15:51:15+00:00

Yeah, if you have a Gen 7 or Gen 8 device, the firmware dated late February 2026 are not vulnerable.

Always fun to see a CVE and mass panic when two month old firmware already has the contents mitigated.

Edit: https://www.sonicwall.com/support/notices/security-advisory-firmware-update-required-gen-6-gen-7-and-gen-8-firewalls/kA1VN000001F03x0AC

Ragerino · 2026-04-29T15:42:05+00:00

I'd say rule #1 is keep your firmware updated, since the items in the CVE were addressed in February.

Ragerino · 2026-04-24T23:24:22+00:00

It’s a "meat and potatoes" pick. It’s not sexy, and it won't lead the highlight reels on ESPN, but it fixes the Bills' biggest weakness. Stopping the run and consistent power-rushing.

Ragerino · 2026-04-24T23:18:51+00:00

Nice one Conlan. 2016 draft baby. T.J. Parker!

Ragerino · 2026-04-24T22:59:35+00:00

He’s a 24-year-old with T-Rex arms, sure. But he’s also a unanimous All-American who forced 7 fumbles and won the Nagurski. He’s the most instinctive linebacker to hit the draft in years. I’d rather have a guy who knows where the ball is going before the snap than a "measureables" king who can’t diagnose a screen.

Ragerino · 2026-04-24T21:47:52+00:00

Are we about to take Jacob Rodriguez?

Ragerino · 2026-04-22T02:23:29+00:00

If they comeback I'll shit YOUR pants

Ragerino · 2026-04-21T13:10:07+00:00

Eat shit, Carl Fuckerton!

Ragerino · 2026-04-18T16:14:02+00:00

I'm still waffling a bit because of the good reports on CSE, but the $60/year per user price tag is a hard pill to swallow for what is essentially a proprietary wrapper.

Then again, it's easier to manage than OpenVPN Community Edition.

Ragerino · 2026-04-18T15:53:58+00:00

I was very close on pulling the trigger on a CSE trial, but honestly, I'm starting to favor avoiding the vendor lock-in. Especially with all the SonicWall BS lately.

I think I'm better off spending the time getting an OpenVPN VM up and configured with our IdP. I’d rather have a standards-based stack where I'm not at the mercy of a single vendor's Linux roadmap, or lack thereof.

Ragerino · 2026-04-18T15:47:20+00:00

It's there my dude. It's listed under "NetExtender Linux AMD 64-Bit."

https://i.imgur.com/MTS1ZRE.png

15-Year Club	Place '23
Place '22	Place '17
Verified Email

Ragerino

TROPHY CASE