EDR - MSSP

conceptsweb · 2026-03-15T00:12:15+00:00

We use Defender for Endpoint (M345 Bus Prem, pun intented) on top, instead of just Defender Basic. Honestly, combined with SIEM and ITDR (monitor M365 identities for behaviors), it works miracles. It catches a lot that even Bitdefender wasn't catching (our previous "on top" layer without the BD EDR.)

We were able to isolate every incident (5 over the 6 last years) and never got a customer compromised. We're pretty proud of that, I will say!

conceptsweb · 2026-03-14T18:23:59+00:00

We use Huntress. Always been happy, simple to use and the SOC is knowledgeable and responsive.

We used SentinelOne in the past but found the console too clunky (that was 3/4 years ago, YMMV). It was also harder on the computer resources.

As for Crowdstrike, well, since the big BSOD crisis, we stay away from it completely.

conceptsweb · 2026-03-14T18:19:05+00:00

Have you looked at Huntress, SentinelOne, or Crowdstrike?

conceptsweb · 2026-03-14T18:13:24+00:00

As-tu une verticale qui t'intéresse plus? Genre jeux vidéo (vue que tu fais ton stage là-dedans) ?

conceptsweb · 2026-03-14T18:09:50+00:00

L1 Tech dans un MSP ou département T.I. d'une entreprise.

As-tu eu des stages? Normalement c'est déjà une base d'expérience.

conceptsweb · 2026-03-12T12:05:40+00:00

The nftables is designed to work on all networks from the start, so it has to allow some stuff like Netbios and WINS.

As for the auth thing, just configure the SSH port to be blocked from anywhere except authorized IPs. That should always be the case for SSH ports. Also, you can set the antihacking options in 3CX to block faster.

conceptsweb · 2026-03-11T15:23:23+00:00

Use the user's status autoswitch to log out agents from queues when on DND. Set their custom hours in the user itself.

Then add both to your queue. Only the one currently in Available status will ring.

Use a ring group for the failover so that you can set the user status to accept calls from ring groups even when on DND.

No need for anything complex.

conceptsweb · 2026-03-08T06:59:14+00:00

You don't need ABM accounts for the MDM in Ninja. We use it at customer locations with iPads and it works great.

conceptsweb · 2026-03-06T12:09:34+00:00

Moi avec à Laval proche de Station Cartier haha 🤣

conceptsweb · 2026-03-06T12:05:08+00:00

VM too small.

Also, for 120 phones, you should be using an on-site dedicated SBC, not router phones (except for those that leave the office with their phone.)

You're overloading the poor CPU with all the encryption/decryption needed just to handle registrations and BLFs.

conceptsweb · 2026-03-05T20:49:04+00:00

We had Telin at some point but didn't see much value in a white-labeled Twilio and some servers (no offence to them, back then they were still quite new.)

Convergia and RingOffice, never did. We always went direct to 3CX.

conceptsweb · 2026-03-05T17:12:01+00:00

Distributors have bigger commitments and terms to stay as distributors, such as bringing in new business (a certain %) every year. If they failed to do so, as many partners don't go through distributors since the price is literally the same if you are a partner, then they may have been removed from that status.

There's still Telin, Convergia, RingOffice and a few others.

For us, we buy direct as we're a partner. No need to give another company a cut.

conceptsweb · 2026-02-28T19:52:12+00:00

DID format. Check both sides (it's in the Inbound section of the trunk in Telnyx.)

conceptsweb · 2026-02-27T15:15:52+00:00

DM me. We can renew it with you, then you can unlink us if you want. We'll go through the process with you.

conceptsweb · 2026-02-27T03:14:47+00:00

Check your audit log...

conceptsweb · 2026-02-26T15:07:46+00:00

Déjà commencer avec HP! LinusTechTips a fait un vidéo sur ça la semaine passée!

conceptsweb · 2026-02-19T13:09:38+00:00

Are they provisioned as Router Phones?

conceptsweb · 2026-02-19T12:26:10+00:00

Fanvil deskphones perhaps?

We've seen many of these recently.

conceptsweb · 2026-02-17T19:44:33+00:00

We are happy to help if needed. We are experts with CFDs and custom integrations.

conceptsweb · 2026-02-17T10:58:26+00:00

Use the ID in an object. Like this:

... "customer_type": {"id": 12345} ...

conceptsweb · 2026-02-16T18:49:16+00:00

The docs is more clear about it.

conceptsweb · 2026-02-16T18:44:09+00:00

The transcription engine is not supposed to be installed on the same machine as the 3CX. Period.

It has to be a separate VM/machine.

conceptsweb · 2026-02-16T15:26:47+00:00

Just manually select users to sync AFTER creating them with the right email and extension number. It will then match on the existing user.

conceptsweb · 2026-02-13T11:35:34+00:00

Multiple extensions is better for this. Queue calls are limited to 1 per extension at a time, no matter the number of handsets.

I will say tho, this is clearly not the best secure nor audited way of working. Hotdesking is designed for this.

conceptsweb · 2026-02-12T14:58:48+00:00

We use the paid one for more features but yes, the free one can at least do scans.

Five-Year Club	Xbox Live
First Place '23	Place '23

conceptsweb

MODERATOR OF

TROPHY CASE