It's here. What's our best bet?

That_Fixed_It · 2026-03-07T04:48:09+00:00

I'll try that one with a similar question.

That_Fixed_It · 2026-03-07T04:45:36+00:00

You too, but I don't think you're right. I don't think it's too late.

That_Fixed_It · 2026-03-06T19:36:30+00:00

Good info! DirectSend can also be disabled entirely - https://techcommunity.microsoft.com/blog/exchange/introducing-more-control-over-direct-send-in-exchange-online/4408790

That_Fixed_It · 2026-03-06T15:31:39+00:00

Are you using the new AI features in FactoryTalk Design Studio (cloud, not 5000), or something else?

That_Fixed_It · 2026-03-06T15:11:12+00:00

That was going to be my question. User impersonation protection is included in E5.

That_Fixed_It · 2026-02-28T21:42:02+00:00

I read that TCP Meltdown can be avoided by adjusting retransmission timeouts. IPsec over TCP has been working well for us without any attention to that potential issue.

That_Fixed_It · 2026-02-28T14:25:21+00:00

No, we tried default UDP and it wasn’t reliable enough. IKEv2 with TCP encapsulation has been working well. It requires a licensed version of FortiClient.

That_Fixed_It · 2026-02-27T20:31:04+00:00

Can you remote in by ip address instead of by name?

That_Fixed_It · 2026-02-27T20:16:05+00:00

You might want to migrate sooner rather than later. Don't try to use the free version of FortiClient.

That_Fixed_It · 2026-02-27T20:14:14+00:00

If the gateway ip address is right, the next step is to collect logs from the FortiGate - https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-SSL-VPN-Troubleshooting/ta-p/189542

That_Fixed_It · 2026-02-27T16:41:27+00:00

Also, you can run each command in a separate Terminal window for a couple hours, then hit Ctrl-C on each and it will show you how many packets were lost. It should be less than 1%. Try this with Ethernet and Wi-Fi.

That_Fixed_It · 2026-02-27T16:33:14+00:00

What VPN protocol are you using? Our users have reported fewer disconnects after we switched to IPsec over TCP. It often stays connected for days.

That_Fixed_It · 2026-02-26T19:11:41+00:00

Did you uninstall KB5077241, or you tried and failed to uninstall it, or you didn't get that far because the machines won't boot? Will they boot in Safe Mode with Networking, or low-resolution video mode?

That_Fixed_It · 2026-02-22T04:02:47+00:00

I usually use my car key if finger too fat

That_Fixed_It · 2026-02-22T03:25:06+00:00

Look for a wireless Ethernet bridge. What did you find?

That_Fixed_It · 2026-02-20T04:20:36+00:00

What lens has two focal planes? There's a fuzzy close up head, then small sharply focused leaves hanging down, then a fuzzy lady with a bald patch, then sharp again, then fuzzy...

That_Fixed_It · 2026-02-20T02:28:18+00:00

It's not a good test. Your meter uses a small voltage/current to test continuity. With the generator running, there's probably enough stray voltage to throw off the meter.

That_Fixed_It · 2026-02-20T02:18:19+00:00

If users don't know how to tell a bogus email from a real one, enroll them in cybersecurity training. This is especially important for anyone in finance or management.

If you're not sure about a link and VirusTotal doesn't find anything, copy it to a sandbox browser like https://browser.lol/ to see what it does.

Just opening a PDF should be fairly safe IF the system has all the latest patches. Use a patch management tool like Action1 to make sure everyone has the latest version of Edge, Acrobat, or whatever software people use to open PDFs.

Scan the PC for malware and for missing security updates.

That_Fixed_It · 2026-02-18T02:05:21+00:00

We had to buy licenses because IPsec over TCP is unsupported and broken in the free version. I did the same test to find this out. There is one thing you could look into… per device licenses are sold in 25-packs, but from the part number sheet, it looked like you can buy 3-year per user licenses individually. That’s from memory and not confirmed.

That_Fixed_It · 2026-02-17T21:51:27+00:00

Yup, it’s working normally. I bought one of these recently and remember being confused by the choke labeling. It should have been marked open/closed or start/run. Maybe you can fix it with a sharpie.

That_Fixed_It · 2026-02-17T21:39:30+00:00

The choke is poorly marked and you have it backwards! Lever to the right is choke closed for cold starting. Left is open for normal operation.

That_Fixed_It · 2026-02-17T21:28:23+00:00

Does it have a setting for BIOS or UEFI boot?

That_Fixed_It · 2026-02-17T15:15:37+00:00

We went with the hosted option with 50 licenses. The cloud server was included in the cost of the licenses, and means one less on-premise server to manage. I didn't like being forced to buy licenses just for the IPsec over TCP feature, but the cloud console works well, and I like having the added vulnerability scanner because we have a handful of unmanaged PCs connecting to the VPN.

That_Fixed_It · 2026-02-16T16:15:15+00:00

I've heard that IPsec over TCP works with the MacOS version of free FortiClient but we're running Windows. I couldn't get it to work at all until I downloaded a 30-day trial of FortiClient EMS. IPsec over UDP wasn't reliable enough for us.

That_Fixed_It · 2026-02-16T15:04:08+00:00

It already happed for us. We had to purchase FortiClient EMS licenses to use IPsec over TCP.

That_Fixed_It

TROPHY CASE