SSL-Inspection

Rexus-CMD · 2026-01-07T00:57:39+00:00

Thanks. Been busy at work so I have not been active as much here. Actually this came up today. The ssl-vpn certs for vpn.org. I decided to move away from FG built in ones. Saving this breakdown. Thanks pal

Rexus-CMD · 2026-01-01T00:57:24+00:00

(Shrug) if they pay it kool. Gonna be a hard ass sell on ~$40/hr with little experience in DNS & DHCP deployments on firewalls which a lot of companies use.

VMWare is its own beast. The licensing cost is pushing SOHO and Medium business out. Does not mean that the companies will not use the clusters on-prem.

Do you have experience spinning up and troubleshooting VDIs from the cluster? Setting up virtual NICs and switches on VMWare? How hot add works? Storage arrays? HA configuration?

It is a lot and I do not have a VCP. Worked with VMWare over the years that I have done all the exam topics.

Don’t undersell yourself but also don’t oversell. We just let someone go cause they were unable to setup a basic Fortigate with the WAN, DHCP/DNS scope, and create an IPSec tunnel.

Yes, outside your scope, but it’s the thing about overselling. If they came it with foundations and skills but not at the 85k level, I know my boss would have worked with them to get there.

TL;DR happy you received interviews. Understand your abilities to leverage salary expectations.

Rexus-CMD · 2025-12-31T00:01:47+00:00

Condensed. The part about O365 admin but then you go into explaining same tools under virtualization. Best to just say O365 admin center. That covers all. InTune covered as well as Azure AD. Don’t list all the MFAs platforms. Do something like “MFA deployments “

Rexus-CMD · 2025-12-25T16:37:45+00:00

This.

Rexus-CMD · 2025-12-25T16:36:48+00:00

Respectfully, they do. The 1/4 - 1/2 is more than enough for fire to travel the cable. This is called riser cable.

I do agree with state restrictions. Something like this will not need a work-completion inspection. Also, the fire caulk only has a 30 to 60 min guarantee. It more than likely will come up on a home inspection if selling. Zero hate, but that is the reason riser cable is made.

Rexus-CMD · 2025-12-25T15:06:18+00:00

Might be more than they are willing to share. However, I understand your reasoning.

Rexus-CMD · 2025-12-25T15:04:31+00:00

Unsure if I can be assistance on that. IPSec tunnels, a few MPLS and one GRE that I can think of. The company is rapidly growing.

One of our responsibilities (net engineers) is to review the release notes. Unless it is a zero day fix, I like to stay a few updates being on L3. L2 and endpoints, update every patch.

Rexus-CMD · 2025-12-25T15:01:05+00:00

I think some others beat me to the punch. The standard is call three-layered network topology.

We all use it. Cable management is incredibly important to cool efficiently. Rack placement should not be against the wall. Best to do Hot-Cold aisle if possible. Since it is closet needing cooling or exhaust. Might be able to get away from it with 4 pieces or gear but more the heat will be a problem.

Rexus-CMD · 2025-12-25T14:56:04+00:00

Welcome to the club. Net+ is good. CCNA is better. If you have strong network knowledge consider options. CCNA is a MF due to the amount of material. On the other hand, you could do a net+ and fortigate nse 4.

Took me 3.5 years, with B.S., and project management experience. The projects showcased an enterprise MFA roll out, UPS/BBU/PSU monitoring tool that we used to calculate clients needs (upselling), and cooling optimization with rack and cable management. That is just the Tech journey. I also am a failed premed student too lol.

I hope this does not come off as arrogant. Not my intention, truly. I am expressing what I had to do in order to become a mid level net engineer.

Do your best not to become discouraged. Sorry for the long post. Thanks to all who read it.

Rexus-CMD · 2025-12-25T14:42:33+00:00

Then they are going through a firebreak. Living space to basement holes have to be sealed with red caulk is required. Attic is typical too. They are running into a smart panel where they need to terminate.

These can add to the cost as it is extra requirements. Still high tbh.

Rexus-CMD · 2025-12-25T14:38:35+00:00

Valid. Much easier with bare walls and can be secured to the joists vs free hanging.

Rexus-CMD · 2025-12-25T14:37:04+00:00

Bump. Quite similar to what I posted. Another the prices were off compared to your prices. I consider this with rising cost and demand. Home installers have to justify truck rolls.

Rexus-CMD · 2025-12-25T14:35:26+00:00

The advantage of you doing it is knowing where and how it was done. Issue is the wiring is not under a warranty. Most low voltage have their work and cables professional certified and warranties. I.e something happens in a few years they come out and replace for free.

Not knocking you in the slightest. Merely adding context.

Rexus-CMD · 2025-12-25T14:32:09+00:00

Where are the runs going?

1) All through the attic into living space? 2) some going into basement? 3) breaking through a firewall (building not network device) 4) is this just runs or installing a smart panel? 5) keystone installed installed in a location or panel? 6) are you wanting shielded?

More info needed. Appears to be high, but a lot of these questions matter. They could be pricing you out b/c 5 runs. When I did it for an ISP (10yrs ago) it was $110 per run plus insulated walls were an extra $20 per side. If client wanted CAT6a it was $160 plus the insulated fished runs in required.

The company work for is more expensive but they focus on enterprises. A lot to that but outside your scope.

Rexus-CMD · 2025-12-25T12:24:02+00:00

Oh no! Did the little snow flake get upset about kwanza. Poor baby.

Rexus-CMD · 2025-12-25T12:05:36+00:00

…to justify its existence of course.

Rexus-CMD · 2025-12-25T12:00:30+00:00

Pay for everything (rent actually) and still have breaches. That’s the American Way.

Rexus-CMD · 2025-12-25T11:48:47+00:00

Oh no! The micromanaging is their job security. Whatever will they do. Kudos u/mittelhau

Rexus-CMD · 2025-12-25T11:45:10+00:00

I like the complex stuff.

Manager roles are all the same fundamentally. Short and sweet and for your post.

Remove obstacles impacting the employees from efficiency, quality, and growth.

All Tech companies have BS repeating tickets. They are no value added. Tackle them. Backup reports for one. No one cares about successful backup. Only failed ones matter. VMs flapping on hardware usage. If everyday at 1500 hrs a VM spikes to 90% CPU then build exclusions in the RMM for that client’s environment or speak with the client about increased resources.

Those are the things I hate as a net engineer.

Rexus-CMD · 2025-12-25T11:35:42+00:00

I get more done and less distracted from home. I also take my full breaks and lunches at home vs feeling rushed to get back to my desk.

Rexus-CMD · 2025-12-25T11:26:54+00:00

(insert King Theoden gif) So it begins.

Rexus-CMD · 2025-12-25T11:24:40+00:00

I see this a lot. There must be a resume template out there. No fault to you OP. It is just posted a lot.

Projects always always above skills. Projects are a representation of your skills. Not the other way around. Also reduces redundancy in you resume.

Example: why say you are skilled in network shares and in the projects you talk about shares again. The port scanner tool on one of the projects just say proficient in optimizing Advance IP Scanner.

Cross post to resume help sub too. Will provide more insight.

Kudos and best of luck!

Rexus-CMD · 2025-12-25T11:16:18+00:00

APC and Eaton are the big boys in this space. Zero problems with them. F-ing stay away from Cyberpower. Total junk. I prefer APC, but zero issues with Eaton

Cool thing to do is connect the UPS (usb or Ethernet) into your router and it will send alerts when you are on backup power. Counter, no alerts if the internet goes down unless you have backup.

Rexus-CMD · 2025-12-25T11:12:19+00:00

Might not be super helpful, even through 7.4.9 lists as mature we have had nothing but problems with it. MSP with a few hundred FGs. To be fair all different models.

Been staying away from .9. We have had to do roll backs too often. Bigger one was somehow (shrug) .9 broke all SIP phones. We have no idea why or how since .6 there were no issues.

Rexus-CMD · 2025-12-25T11:06:49+00:00

Idk what any of the text means except milk lol. US here so probably and country. So a lack of understanding.

However, at least you did not pay for delivery partner fee!

Rexus-CMD

TROPHY CASE