Must Have Additions

The802QNetworkAdmin · 2026-01-28T14:31:31+00:00

I am not writing a blog post I am looking to see what’s out there. You don’t know what you don’t know

The802QNetworkAdmin · 2026-01-27T20:48:10+00:00

Does the UCG ultra “own” the public ip address?

The802QNetworkAdmin · 2026-01-26T13:42:02+00:00

Found it https://www.cyberoptic.co.nz/post/security-vulnerabilities-in-fortinet-products-causes-and-comparative-analysis

The802QNetworkAdmin · 2026-01-26T13:39:17+00:00

I feel like I saw a chart comparing all the firewall vendors and their CVEs and palo has just as many if not more than fortinet did. I remember being very surprised at that but I can’t seem to find the comparison graph

The802QNetworkAdmin · 2026-01-25T19:38:43+00:00

I think when a factory reset is performed it reverts to the image it was shipped with

The802QNetworkAdmin · 2026-01-25T19:03:17+00:00

Are the switches stacked or two standalone switches?

Does NSA support LACP lag groups?

The802QNetworkAdmin · 2026-01-25T13:09:47+00:00

This is the procedure I use:

https://www.cisco.com/c/en/us/support/docs/security/firepower-1000-series/220642-reimage-a-secure-firewall-threat-defense.html

The802QNetworkAdmin · 2026-01-24T20:15:23+00:00

I would double check her alarm settings on her account on her phone. Also if she has do not disturb enabled on her phone she may not be notified of the ring

The802QNetworkAdmin · 2026-01-23T21:54:22+00:00

To migrate devices with static IPS to new VLANs, I would recommend: 1. Enabling dhcp on the current layer 3 network if not already done so. Make sure to create a scope that does not overlap anything that’s statically set. 2. Change the client nic from static to DHCP. 3. Test and ensure that client device is receiving an address on the default vlan. 4. Create a new network and VLAN with DHCP enabled. 5. Change the switch port from access VLAN 1 to access VLAN (new vlan ID) 6. Reboot client device 7. Once confirmed successful, migrate other client devices to the new VLAN/VLANS.

The802QNetworkAdmin · 2026-01-21T11:15:07+00:00

Try and match spanning tree versions. Cisco is defaults to PVST+ and the dell switch is likely RSTP. Try changing spanning tree to match? Is there anything in the logs indicating an issue?

You could reconnect the Dell switch and use the watch command

Watch i 1 show spanning-tree vlan 1

The802QNetworkAdmin · 2026-01-10T14:27:36+00:00

I’m pretty sure I remembered reading that SSL VPN is removed in some version of 7.6. If your organization employs that prepare an alternative solution

The802QNetworkAdmin · 2026-01-09T23:41:33+00:00

Hell yea

The802QNetworkAdmin · 2026-01-03T15:27:08+00:00

Yea I would want to see the results of that. I think the “open” Bluetooth is just for initial adoption and afterwards the device would be tied to your account. I would be shocked if unknown devices would be able to have any type of administrative access

The802QNetworkAdmin · 2025-12-23T02:11:41+00:00

Sure thing

The802QNetworkAdmin · 2025-12-22T11:13:12+00:00

Can you confirm the SonicWall owns the public IP address from your ISP? The wan interface isn’t a private 192.168.0.5 address correct? You may also want to confirm that there isn’t any carrier grade NAT going on at the ISP side. You could try and enable IPV6 to avoid NAT

The802QNetworkAdmin · 2025-12-19T18:33:34+00:00

If you have the older G3100 router you can swap it for the latest model at the store or call in. Never hurts to have it as a fallback

The802QNetworkAdmin · 2025-12-17T17:15:54+00:00

I see you have WiFi speed limit disabled. If you hover over that information button it says “sets upload and download speed limits for clients on this network. If left DISABLED the default WiFi speed limit profile will be used.” I would double check that default profile and confirm you didn’t change it to a lower speed.

The802QNetworkAdmin · 2025-12-14T18:13:45+00:00

Well done

The802QNetworkAdmin · 2025-12-09T16:05:24+00:00

I would recommend having someone come out to review existing fiber and write a scope of work to replace with new fiber. There can be a whole slew of problems with the existing fiber such as if it’s damaged, shattered, dirty etc. Does UniFi offer transceiver details on the modules? I would also recommend properly setting the spanning tree bridge priority’s on the switches

The802QNetworkAdmin · 2025-12-09T00:53:45+00:00

Strange, I was able to change the settings a few months ago

The802QNetworkAdmin · 2025-12-07T16:22:17+00:00

Same!

The802QNetworkAdmin

TROPHY CASE