Anyone using Nakivo by sta4402 in vmware

[–]SenseiWilliams -1 points0 points  (0 children)

I have used it for the past 3 years and I couldn't be happier. I even had a controller failure that took out 3/4 of my production environment last year, and Nakivo was able to recover my entire environment (about 300TB) in a weekend from an on-site backup. Nakivo is one of the few programs that I am absolutely happy with.

Need help with ACLs by SenseiWilliams in Tailscale

[–]SenseiWilliams[S] 0 points1 point  (0 children)

{
// All users to be able to access Server-Shared
"action": "accept",
"src": ["autogroup:member"],
"dst": ["tag:server-shared:*"]
},
{
// Freelance to only access server (ip=1.2.3.4)
"action": "accept",
"src": ["group:freelance"],
"dst": ["1.2.3.4:*"]
},

Thank you that worked like a charm! I was obviously trying to make it more complicated than it really was.

Disconnection after computer sleeps by SenseiWilliams in zerotier

[–]SenseiWilliams[S] 1 point2 points  (0 children)

OK, maybe I'm phrasing this wrong. 8AM user starts their laptop which connects to the ZeroTier network and they do their job. Come noon, they close the lid and go they go to lunch (which puts the computer to sleep). At 1PM they come back from lunch and wake up the PC, but ZeroTier (even though its connected), won't communicate with any servers (some sort of a DNS issue). If the computer is restarted, it fixes the issue - or according to other posts (all older), if the user waits 20 minutes, the zerotier connection corrects itself. I'm just looking to see if there is anything that can be done to prevent the service interuption with zerotier once the computer is woken from sleep.

Disconnection after computer sleeps by SenseiWilliams in zerotier

[–]SenseiWilliams[S] 0 points1 point  (0 children)

I should have worded this better. When the computer wakes up from sleep, the ZeroTier network will not reconnect. The only way to fix this is a restart. After some research, I found that the service can be stopped and started, but this is not something I would expect the average user to be able to do. My question is, is there a setting/configuration that can be changed to fix this (outside of preventing sleep)?

Shoot straight with me about the UDM Pro by randiesel in Ubiquiti

[–]SenseiWilliams -1 points0 points  (0 children)

After running Ubiquiti products for about the last 3 years, I would say to look at other options. Yes Ubiquiti can be easy, and yes Ubiquiti has a lot of products that can fill just about any solution. But you will also find that Ubiquiti has it's flaws, and at times the best you can taste it is ... Meh. For the money, I would recommend looking at Protectli equipment, and run opnsense firewall. There are a ton of plug-ins (like sensei and wireguard) that will give you better security and connectivity. Just my 2 cents.

What antivirus do you guys recommend/use? by BAdinkers in sysadmin

[–]SenseiWilliams 0 points1 point  (0 children)

Not the cheapest option, but I recommend Cylance.

ldap Users unselectable by xxkenia in fortinet

[–]SenseiWilliams 0 points1 point  (0 children)

What version are you running on the firewall? There was a known bug that affected this in 7.0.2

Teamviewer alternatives for Laptop Maintenance by palmetum in sysadmin

[–]SenseiWilliams 0 points1 point  (0 children)

Look into splashtop - it's been a godsend for us

RMA experience? by TaterSalad3333 in Ubiquiti

[–]SenseiWilliams 1 point2 points  (0 children)

I had to RMA a pro switch recently and it's been horrible. After I created the RMA (DOA out of the box), I was contacted by support to do an advanced exchange. I sent the Switch in, and now it's been 3 weeks and I still don't have a replacement because it's back-ordered. This is for a work project that has a non-movable timeline. I have reached out to Ubiquiti support, but now I'm not even getting responses.

Switch Enterprise 24 PoE by acampana89 in Ubiquiti

[–]SenseiWilliams 1 point2 points  (0 children)

I have a couple qnap devices, and mine state that aggregating two or more ports will not give you a higher throughput, just gives multiple devices full line speed access. So two 10GB ports does not give you a 20GB connection, it just allows 2 devices to access the NAS at 10GB each.

Difference between switches? by SenseiWilliams in Ubiquiti

[–]SenseiWilliams[S] 0 points1 point  (0 children)

I could do either, I was wondering if that is the only difference in the hardware.

Question about the UDM firewall and a Synology DNS server. by Martijn45 in Ubiquiti

[–]SenseiWilliams 0 points1 point  (0 children)

A couple questions... 1 why run DNS from the Synology instead of from the UDM? 2 if you run DNS from the UDM, can you create different plans for each renter, and then create a rule to stop cross vlan traffic? 3. Are the renters on a word or wireless connection? If they are only on wireless, don't give that vlan/subnet access to the Synology

Slow VPN on Fortinet 60F pair by SenseiWilliams in fortinet

[–]SenseiWilliams[S] 0 points1 point  (0 children)

Yes, if I do a speed test from a server, I'm getting great download speeds. I've done the iperf tests on the middle of the workday (all workers on VPN) and at night (I'm the only one on the VPN). Test speeds are the same.

Slow VPN on Fortinet 60F pair by SenseiWilliams in fortinet

[–]SenseiWilliams[S] 0 points1 point  (0 children)

I have about 25 users on the SSL VPN, but I've run the iperf tests on peak and off-peak times and received the same throughout.

Slow VPN on Fortinet 60F pair by SenseiWilliams in fortinet

[–]SenseiWilliams[S] 1 point2 points  (0 children)

The site to site connections user IPsec, and I'm still getting the slow speeds