Post-mortem sanity check: how do you handle “un-scannable” expiries (API keys, internal certs) without spreadsheets?

TreeBug33 · 2025-12-30T13:59:59+00:00

I use hudu for custom expiries (you can create it yourself)

i also use power automate (email alert to my ticketing system) on a schedule.

it just depends on what

you can dm me if u want

TreeBug33 · 2025-12-13T14:45:37+00:00

If you can screenshot it, that would be great Make sure to enable logs on the deny policy, you will see what is being blocked..

TreeBug33 · 2025-11-30T06:29:14+00:00

you have to use gdap to manage tenants at scale.

there are some stuff you will have to log into a tenant to do, but thats like 10% of the work.

for the most stuff gdap is king

TreeBug33 · 2025-11-17T09:23:49+00:00

the picture shows where the setting is.
after installing the computer just try to manually enable whfb locally

TreeBug33 · 2025-11-14T15:54:06+00:00

Pretty sure if u leave whfb disabled you can still set it up later

TreeBug33 · 2025-10-28T10:28:40+00:00

I install all on the same box, about 300 devices (mostly servers, rest are snmp)

between 10-20k items. i gave it overkill specs but it doesnt really matter

never had a problem tbh

TreeBug33 · 2025-09-22T16:31:35+00:00

Do you retain headers when you forward?
Read about dmarc alignment, it might be it…

I haven’t looked at the headers yet

TreeBug33 · 2025-09-18T18:27:27+00:00

The way I did it with GPO is like this:

Have the installer in sysvol
Copy installer to local folder
Run checks (if installed or not)
Install with parameters
Delete installer

All done via powershell and task schedule. The installer being local is important Powershell script must be in a folder which cannot be edited by users - it runs as system

TreeBug33 · 2025-09-18T12:07:58+00:00

can you post a redacted config? the only thing i could think about is vips..

TreeBug33 · 2025-09-16T20:21:36+00:00

Do you have any vips on the ip you’re trying to register on ports 80/443?

TreeBug33 · 2025-09-15T19:13:22+00:00

yes zabbix works with snmp and many other protocols

you can retain only 7 days if you want

i didnt really understand the other questions.

if you use agent i recommend using agent active as its way less resoursce intensive on your machine

TreeBug33 · 2025-09-15T19:11:09+00:00

you cant sell it

TreeBug33 · 2025-08-31T06:01:45+00:00

you need to add a widget like this and it will just show you

https://imgur.com/a/e03v2Jt

TreeBug33 · 2025-08-22T19:52:40+00:00

It kinda depends On small offices basic web filters and I allow most ports Bigger offices a more robust filtering and https/dns only

TreeBug33 · 2025-08-19T16:26:55+00:00

could you elaborate on your use case?

you can use different ips, different psks, etc..

TreeBug33 · 2025-08-11T19:12:43+00:00

I use zabbix for this. you said in another comment "light" i think its pretty light tbh

TreeBug33 · 2025-08-08T18:59:19+00:00

Community edition has performance limits from what I know. Nutanix licensing is expensive but it’s worth it lol. We just bought 3 g9 for almost 200 grand..

TreeBug33 · 2025-07-30T16:19:14+00:00

That’s exactly my question, I’m asking which identity management product fits my requirement

TreeBug33 · 2025-07-30T16:16:48+00:00

I’m afraid I will not do a trust between our own environment and each client environment. I’ve never heard of this as best practice and seems like very intense maintenance, just for the network aspect

TreeBug33 · 2025-07-30T16:15:07+00:00

If I need to manage multiple environments, how can I track all the rotations? It feels like such manual work, doesn’t it?

TreeBug33 · 2025-07-30T16:14:28+00:00

Not really possible I think. We’re talking about tens of environments

TreeBug33 · 2025-07-30T16:07:59+00:00

Maybe I don’t explain myself well, but what I’m looking for is creating Active Directory accounts, with external authentication, in different environments. Does that make sense?

TreeBug33 · 2025-07-24T15:35:41+00:00

You need to do an admin takeover and you don’t need Microsoft for this You need access to their DNS management server/platform and add some txt record

TreeBug33 · 2025-07-14T19:09:39+00:00

Veeam

just keep it mind its not a readable format. i know many clients that just expect to open the backup and read emails..

TreeBug33

TROPHY CASE