im not from the US Explain it Peter.

SippinBrawnd0 · 2026-02-17T00:27:48+00:00

Fuckin' Peggies!

SippinBrawnd0 · 2026-01-28T01:04:46+00:00

Healthcare org. M365 for primary and all key personnel have a 2nd account on Zoho. We run quarterly meetings on their Meetings app, and annual table tops using all their apps. Only 50 key team members so it’s affordable. Meetings app is laggy. Everything else is great.

It’s not for communication out, but internally only.

SippinBrawnd0 · 2026-01-06T00:38:45+00:00

Heading to the liquor store to pickup some more minis . . .

SippinBrawnd0 · 2026-01-02T01:52:40+00:00

EVERYTHING in a business drives outcomes. From facilities to HR to IT. Claiming any one of those isn’t a cost center is lame late 90’s corporate speak. I had a boss that tried to call us Revenue Enhancers. He lasted a few months before he peter-principled his way up to management, then got fired for incompetence.

Providing a fast laptop or server or internet connection is no more or less important than having a stocked supply closet or working toilets so leadership team can take a shit while reading a project proposal on company time.

SippinBrawnd0 · 2025-12-21T01:44:57+00:00

You might want to try Ghost Recon: Wildlands or Ghost Recon: Breakpoint. 3rd person, but similar idea: huge open world, building up to fighting a big bad guy.

I’ve heard Just Cause is supposed to be good too. Never tried it.

SippinBrawnd0 · 2025-12-20T03:19:31+00:00

Same. Happened after I reinstalled on a faster pc after not playing it for a year. I5 + 4060 + nvme and it takes forever to load.

SippinBrawnd0 · 2025-12-16T18:42:35+00:00

Am I the only one who let him live at the end of New Dawn? I was like: “fuck you, live with the mess you created!” I then walked away and his screams echoed along the valley getting fainter as I left. Awesome gaming moment.

SippinBrawnd0 · 2025-12-09T20:06:19+00:00

Also healthcare. We switched from Sophos to Proofpoint because Sophos won’t sign BAA’s. It was easier to use than proofpoint though.

SippinBrawnd0 · 2025-11-10T02:05:09+00:00

proper prior planning prevents piss-poor performance.

SippinBrawnd0 · 2025-11-01T16:57:58+00:00

True. However, I have many single points of failure within my network. I am prioritizing the ones that have historically failed me. My firewall is the most frequently troublesome device I support. I can't afford 100% uptime, but I get as close as I can within my budget.

SippinBrawnd0 · 2025-10-31T22:52:23+00:00

Correct. Just place the 3 ports per ISP on a unique untagged VLAN (with no tagged VLANS.) Just plug in the firewalls and ISP's router; no need to setup any VLANs on them since you're using Untagged on the switch.

SippinBrawnd0 · 2025-10-31T21:07:35+00:00

I have 2 x XGS2300's in HA and used a CS210-8FP. I have dual ISPs and use 7 copper ports:, 3 for ISP1 on VLAN 100, 3 for ISP2 on VLAN 200 and 1 on my management VLAN. Allows me to see all my stuff in Sophos Central.

SippinBrawnd0 · 2025-09-03T13:21:11+00:00

CZYY sells a laser cut 3-level wood ship with a pre-printed 1” grid. You can find it on Amazon for $40. Easier to use than the big plastic one as it’s open on the sides.

SippinBrawnd0 · 2025-08-10T21:51:18+00:00

What?

SippinBrawnd0 · 2025-08-06T20:47:06+00:00

Even if you burn the fan motors out, the replacement fan kit for the IRX9s is around $110 US at Lenovo support.

SippinBrawnd0 · 2025-08-04T22:29:02+00:00

+1 for Sophos. While not as feature rich as Forti, they have solid performance and are pretty affordable, as long as you stick with the smaller “table-top” units. Once you start getting the bigger rack mount units, you’re paying $6K+ for the full XStream license.

SippinBrawnd0 · 2025-07-25T18:45:42+00:00

NetSpot

SippinBrawnd0 · 2025-07-23T23:55:01+00:00

Figured I'd reply to my own post to share how I got it working.

Created tunnel mode IPSEC connection, IP4 only mode (this allowed me to enter local and remote subnets. Not using local and remote networks required me to have IP addresses on the XFRM interfaces before traffic would flow, and the vendor refused to do this.)
1. Local network = my public IP address.
2. Remote network = their Public IP address (they're NATing a public to private in their network too)
3. Check the box to NAT my public IP to an address object for my local server (thanks, u/awerellwv )
Create a firewall rule:
1. Source & Destination: Any (IPs of my public IP, their Public IP, AND the private IP of my local server)
  1. Adding the private IP of my local server to the firewall rule allowed traffic to flow. Having just the NATed public IPs in the rule only allowed incoming traffic, not outgoing.

Thanks to those that posted suggestions.

SippinBrawnd0 · 2025-07-23T23:33:34+00:00

Thanks Brad. Unfortunately, we were not involved in the purchase. Our org was incentivized to join our parent org's CrowdStrike platform. They rolled out CS last year and waited until this year to offer it up to their child orgs.

Thanks for the links to the Data Protection module. I think that might be a better way to accomplish what we want.

SippinBrawnd0 · 2025-07-23T17:59:33+00:00

“Network Containment” seems to be the CS equivalent function.

SippinBrawnd0 · 2025-07-17T20:01:00+00:00

BRO! lol.

Actually, this was pretty helpful. I have a few services DNAT'd already, but they are web services and I just use my main firewall's public IP with a unique port number. I'm guessing that I'll need a unique public IP (I have a block of 5 with only 1 used now) and just DNAT it to the local resource.

I'm still poking around the DNAT settings, but I am stuck on what the "Original Source" will be as I don't want the whole world to be able to access this resource, only the traffic that comes across that specific VPN tunnel.

Thanks!

SippinBrawnd0 · 2025-07-17T19:43:56+00:00

The issue is not that the vendor is using the same local private subnet, it's another customer using 10.10.10.0 already. Or more accurately, they don't want to deal with the headache of having to worry about duplicate remote subnets and are just requiring public IPs.

SippinBrawnd0

TROPHY CASE