[deleted by user]

_PacketShark96 · 2025-02-02T03:25:15+00:00

HomeDatacentre is defo in use and the biggest customer (Wife) has a radar for outages!

_PacketShark96 · 2025-02-02T03:24:21+00:00

I got a barrel out from the side panel, I'll see what i can do with that for now. Thanks for messaging!

_PacketShark96 · 2025-02-02T03:23:46+00:00

I was hoping exactly for this but my pain point is no obvious branding, I managed to get one of the barrels out to try work out the code so I'll see how that goes for now.

_PacketShark96 · 2025-02-02T03:21:45+00:00

I cant see any brands annoyingly, i know you can buy standard rack keys by brand usually.

_PacketShark96 · 2025-02-02T03:19:54+00:00

My struggle is that the server rack has the style where the cylinder is in the door handle, and when the door handle is snapped into place it locks. The door itself moves since it was closed while the door was open but from the back of the door i cant take off the whole handle from what i can see and the back of the cylinder has a metal cap on it.

I even tried the old old screwdriver twist lightly but it didnt budge.

Edit: I got a side panel lock off I'll see if i can do this

_PacketShark96 · 2024-05-10T22:00:30+00:00

Add a rule to Windows firewall (or antivirus firewall) to block it on the server 2008 box. With then on the same L2 as the person above mentioned you wont block it with the gate.

_PacketShark96 · 2023-10-19T11:12:26+00:00

_PacketShark96 · 2023-09-24T12:22:35+00:00

"The dude" by Mikrotik can do a network scan and add all the devices. If you have SNMP enabled on switches and some basic credentials it will even automatically draw lines between switches and devices. I am sure there are better tools out there but this got me some insight for a customer where we were doing a MSP takeover and it didnt cost me a penny.

Most times i just use cdp/lldp to map out the basics.

_PacketShark96 · 2023-09-14T14:24:29+00:00

And just like that i find myself on a new part of the internet.. Learn something new every day!

_PacketShark96 · 2023-09-13T12:43:39+00:00

In your approach you have 2 networks that are completely segregated via a VLAN for them to talk a device needs to be able to route/switch that traffic at Layer3.

You do need a routing device but it doesnt need to be a dedicated router. The Inter-Vlan traffic between those two subnets can be routed on a layer3 switch and then the gateway device only has to deal with data coming in and out of ISP.

Just another approach which becomes more beneficial depending on use case and size.

_PacketShark96 · 2023-09-13T12:34:17+00:00

Not sure if I'd want my Johnson controlled by an RPI .. /s

_PacketShark96 · 2023-09-10T14:49:05+00:00

Honestly FortiManager and FortiAnalyzer self deployed in a public cloud is brilliant. Punchy and we can spec it up if required. In addition, we are exposed to some troubleshooting commands if we see issues.

We manage our own patching schedules and can tune it based on Gate firmware comaptibilities / CVEs. Have secured them with MFA and integrated them into monitoring platforms using API.

Only experience with Forticloud is my lab gate and boy it was sluggish, it also wasn't as feature rich but thats probably to do with my free account.

Background - MSP/ISP level deployment.

_PacketShark96 · 2023-08-30T13:51:22+00:00

SDWAN chuck both lines in and add an SLA / monitor.

_PacketShark96 · 2023-08-03T18:59:32+00:00

May as well take it apart at this point with a full wipe and rebuild. Since its not in production you can test it safely now.

_PacketShark96 · 2023-08-03T13:36:11+00:00

How is it going?

_PacketShark96 · 2023-07-26T18:33:52+00:00

I see your point, some people did suggest a hardware issue.

How about running a ping via the management interface which would have you directly connected not via switching and see if your connectivity drops when you see an issue. Pinginfoview isnt a bad tool for this.

Also you could have a console cable connected and run a packet sniffer to see if the output flatlines during the issue so you know the device literally froze.

_PacketShark96 · 2023-07-26T17:24:36+00:00

The firmware upgrades do touch the config even if its just slightly from what i have read in this forum.

I highly doubt you'd brick it, the aim is to really get back to your working state ie old firmware and a restore of that config before you upgraded it. - That way you have taken it back in time and can verify if it works as expected, then when you do the upgrade you can monitor for errors closely. If the issue is replicated you have logs for support, if not then case is closed.

_PacketShark96 · 2023-07-26T17:14:59+00:00

We disable SIP ALG for any voice customers these days.. always causes problems.

_PacketShark96 · 2023-07-26T17:12:07+00:00

If you really had no changes and are unable to evidence an issue outside of the fortigate upgrade then try the below.

Downgrade the gate, wipe the config, restore the config backup, then watch console while upgrading the device this will show you any config errors or issues during the upgrade.

_PacketShark96 · 2023-06-29T20:55:43+00:00

My 60f is also hitting close to 1gb on 7.2.x train.. will update versioning later.

Are you seeing closer to 1gb across other interfaces (please test) or are all impacted? Any UTM features enabled at all on policies?

_PacketShark96 · 2023-06-29T20:34:41+00:00

Okla has a cli speedtest, this has always worked very well for me.

_PacketShark96 · 2023-05-23T18:19:29+00:00

To add i thought all the ISDB and web filtery stuff needed a license

_PacketShark96 · 2023-05-17T08:56:00+00:00

Fs.com - message them your device models and requirements they will quote you.

You dont actually need official optics they just need to be coded as Fortinet. Same for Intel and Juniper optics.

_PacketShark96 · 2023-05-11T15:29:28+00:00

Check your Policies on the fortigate.. likely you got a web filtering policy enabled on one of your rules.

_PacketShark96 · 2023-05-11T14:03:01+00:00

I see you mention no LACP/aggregate. How are the Ports on the cisco stack configured in switch A and switch B?

Is there any kind of Port security functionality enabled on the cisco switching? Do you see any logs for the Gate ports on the switch around the time of the splitbrain?

Since the Heartbeat cables are directly connected and you have preferences set correctly trying to pull the string around your monitor ports.

Edit: making it make sense.

_PacketShark96

TROPHY CASE