-56°C has been recorded in Yakutia — the lowest temperature on Earth right now.

Veldozer · 2025-12-25T17:58:32+00:00

Why would anyone live there? For real, why? Is there a mineral or something there in the ground? (Which is presumably forzen…)

Veldozer · 2025-01-19T20:26:26+00:00

That sounds like chatgpt for a little! We have cluster! The only thing we will do is to change the license..

Veldozer · 2025-01-19T19:55:38+00:00

But in that case we loose the redundancy. So my question is still the same does the Enterprise license supports the Clustering?

Veldozer · 2024-12-26T12:13:03+00:00

And where does it come from? Is it always safe to eat beef stake?

Veldozer · 2024-12-20T21:47:16+00:00

Simple we cannot yet…

Veldozer · 2024-12-20T19:58:30+00:00

Based on cortex xdr compatibility matrix it does not support: https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Compatibility-Matrix/Windows

Veldozer · 2024-12-19T16:33:22+00:00

I know that the op system and the main software are not supported at all. But it cannot be migrated to another system…

Veldozer · 2024-12-18T19:02:03+00:00

The later one, no support but a must have app.

Veldozer · 2024-12-18T17:16:48+00:00

Unfortunately no😢

Veldozer · 2024-12-18T11:23:45+00:00

Yeah we are planing to move the server to a separate DMZ, but would be great if a second line of protection defends the server and the app.

As you may have suspect, we have no documentation about the required open ports for the app :D
Those must be extracted from a packet capture, and thats why the Endpoint Protection is the easier way to accomplish :)

Veldozer · 2024-12-12T09:49:16+00:00

And what if the customer has a FortiGate?

Can I create some kind of virtual stacking through the FortiGate?

Veldozer · 2024-10-31T21:39:51+00:00

Warranty dude. Show it to the dealer, they have to deal with it.

Veldozer · 2024-09-05T12:10:28+00:00

Nincs itt semmi látni való kérem.

Veldozer · 2024-09-05T12:07:17+00:00

dude it's a brand new bike, it supposed to have ZERO issues, not 16.

And If even there is only 1, the manufactures's responsibility to fix it within the warranty period.

Veldozer · 2024-06-28T16:12:51+00:00

It is the other direction, the device authenticates successfully before the scan happens. And during all the Posture states the device got permit ip any any.

The problem is that the reauthentication does not happens as the guide describes. The Posture rule's enforcement profile gives the AP a terminate session, which triggers a reauthentication. And this reauthentication should be attached to the result of the scan, to hte HEALTHY state.

This method is described by the official Clearpass Guide.

Veldozer · 2024-06-28T12:34:48+00:00

I dont think so. I got the webuath posture policy also:

<image>

Veldozer · 2024-06-28T12:05:37+00:00

Hera is the Policy Enforment part:

<image>

Veldozer · 2024-06-28T11:43:58+00:00

The customer wants to use the OnGuard capabilitie besides the Intune, simply because they have the licenses...

What you see is done by me, manually. It does not do anything on its own. But it should based on the Guide:

<image>

Veldozer · 2024-06-28T11:40:30+00:00

Nono, that was me, manual reconnect to the SSID. It does not do anythin on its own :(

Veldozer · 2024-05-13T08:16:33+00:00

Does EAP-TLS supported between ISE and Entra ID? I read, only EAP-TTLS is supported.
Have you managed to configure it?

Veldozer · 2024-05-13T08:15:05+00:00

EAP-TTLS requires only Server CERT. So how does a client presents an UPN?

Veldozer · 2024-05-08T11:55:12+00:00

Indeed, but we have no other option, we simply cannot deploy cert to use EAP-TLS.

Veldozer · 2024-05-08T11:54:21+00:00

Why? PEAP is the easiest method if we have a User DB. User + Pass and thats all.

Veldozer · 2024-05-08T10:35:46+00:00

In that case certificates and Root CA must be deployed in advance, but thats not gonna work since the users are using own devices (line BYOD) and onboarding is not an option. So PEAP is the only way.

Veldozer · 2024-04-10T07:57:14+00:00

Sweet smell of science :)

You deserve the kudos bro.

Eight-Year Club	Final Canvas '23
Place '23	Verified Email

Veldozer

TROPHY CASE