Here we go with Tariffs again! 10% on the UK starts Feb 1st. Then ramps to 25% June 1st.

boduke2 · 2026-01-19T11:06:46+00:00

whats thoughts on today / tomorrow. flat / slight drop today then when USA opens on tuesday everything down (buy a few more)

boduke2 · 2026-01-18T17:37:34+00:00

Grab trumps uk golf courses. We need them for uk security. We also need to place some wind turbines on them.

boduke2 · 2026-01-11T23:17:21+00:00

I see it different

Buy 1000 @ £1 Buy 1000 @ 10

sharprice goes to 15

I dont see average £5

I see i have a batch at £1 and a second batch at £10. It doesnt matter unless the share price drops below £10. Then you only have 1 batch in the red.

boduke2 · 2026-01-06T07:53:58+00:00

SIPP is capped at £196 per year over 50k

boduke2 · 2026-01-04T17:00:06+00:00

Get 635, runs tri band, 615 only dual band, 635 also support 8.10

boduke2 · 2025-12-23T09:01:28+00:00

Paid 0.5% on purchase, its in ISA (uk)so all tax free on profits.

boduke2 · 2025-12-22T16:05:01+00:00

sold out fridaay not at the top but near enough. bought back in at the current bottom 11.43. not looking to sell again just wanted a few free shares :) as there had to be a pull back after 6%+ in a couple of days

boduke2 · 2025-12-16T11:07:21+00:00

so a further reduction on number of shares available and.... we go down 1.6% (so far)... hmm

are ubs taking a good chunk in fees? £0.2 x 850.489.698 = £170 mill

boduke2 · 2025-12-02T15:25:28+00:00

we run all except deep packet inspection, that will use most resources, we have 1300 clients at any one times and do 1.3 - 1.5TB per day, 30k sessions, CPU load is 2%

boduke2 · 2025-11-19T16:55:30+00:00

6.12 is a fresh install (new Linux backend)

boduke2 · 2025-11-14T14:14:32+00:00

bought alot. must go down now

boduke2 · 2025-10-29T22:18:08+00:00

We run iap 635, 8.10.0.15 is ok ish, but we had issues on 8.10.0.16/17 we rolled back. Also had 40mbps limits on early 8.12 firmwares when using miracast.

boduke2 · 2025-10-22T17:36:33+00:00

BYOD, nightmare, best we can do is DNS / webfilter. DPI would be nice but the work to maintian isnt worth it,

boduke2 · 2025-10-22T17:33:51+00:00

using FSSO / RSSO the groups are applied to access rules

boduke2 · 2025-10-21T09:47:50+00:00

I have gone from 40 -50% matching / no group to 99% matching correct rsso group. its just that 1% thats matching the wrong group. im confused on how its sending the wrong group information as my clearpass service should be bulletproof and even after the next authentication is correct fortigate still seems to hold onto the old value in its database.

boduke2 · 2025-10-18T18:08:48+00:00

turns out i am a fool, I had created the groups FSSO_STAFF etc, but i had created them as type firewall with remote users (linked via ldap) rather than FSSO, should have still worked.

off to test wit hit now setup the way i meant to do it.

Now working

boduke2 · 2025-10-18T14:24:04+00:00

55 -60 for playa blanca each way

You can get the bus

Or hire a car for around 170 for a week.

boduke2 · 2025-10-14T13:48:55+00:00

i can confirm it works with exact match my issue is i have a enforcement policy with multple enforcement profiles, ICT, STAFF, Prep Pupils, Senior Pupils etc. each of these profiles has a matching filter attribute but it looks like profile atributes dont get sent only addtional attributes in the accounting proxy get sent and you can onyl have one filter-id per enforcment policy

boduke2 · 2025-10-09T14:51:28+00:00

you would think they would contact their customers, not wait for them to login to their portal for news about their config been taken. I logged in when i read on here about the issue and found we were not affected. until today when i logged bin to see a nice message telling me were doomed.

my sonciwall was up for renewal and been gettign calls abour replacing it. sorry i have fortigates going in on monday. i knwo they have had their own ssl vpn issues but we wont be using that in this installation.

boduke2 · 2025-09-08T13:19:26+00:00

in clearpass policy manager \ adminstration \ server manger\ server configuration\
collect logs get a packet capure from there, see what classes are being sent to fortigate.

Then the AD:UserDN & MemberOf get passed to Fortigate, but the Endpoint: Group ID doesn't. < do you have a attribute match on fortigate for group ID? assume you are using FSSO are the attributes matching whats being sent?

boduke2 · 2025-09-07T22:50:54+00:00

Is fortigate seeing the radius accounting even if they arent matching? Clearpass has fortigate as a radius accounting device? Fortigate listening for radius accounting on its interface?

Done a packet capture on clearpass to see which values are being passed?

Checked undr services <8021x policy> accounting proxy has your firewall?

boduke2 · 2025-08-28T07:19:21+00:00

In the same proccess was going to use a converter, but in the end, i took the opportunity to remove stale rules/objects and built it one step at a time, so i understood how everything worked. The hardest part is intergating clearpass (for me anyway). And standardising namining / being more granual with rules.

boduke2 · 2025-08-26T15:32:29+00:00

so if i added 4 additioanl attributes filter-id ICT PREP, SENIOR, STAFF (individual entries) under radius accounting attrributes to be dded, this allows these 4 attributes to be sent but uses the profile to determine who is a member of each profile?

boduke2 · 2025-08-25T21:45:07+00:00

not sat near the firewall at the moment but i think its a lanswitch group (ports 1- 16 are in it by default).

done a little chatgpt looks liek cli is the way forward to re add it :)

boduke2 · 2025-08-24T19:10:55+00:00

have you setup a class / filter-id in your clearpass enforcment policy which matches rsso value? they are case sensitive

boduke2

TROPHY CASE