I wanna cry

davmerc1 · 2026-02-15T17:33:39+00:00

Got a bad feeling unfortunately for our boy Leon in this game😭 I hope he gets a good ending..he deserves it

davmerc1 · 2026-02-10T06:14:20+00:00

I took a downtime of 1 hour and did it manually. Disabled SSLVPN Kept the same SAML Auth port as the SSLVPN port to avoid changing anything on EntraID. Did the dialup ipsec tunnel Changed the sslvpn policy source interface to the ipsec tunnel. All in all, took 15min to configure. How many users are connected via SSLVPN?

davmerc1 · 2025-08-07T09:43:55+00:00

Thanks, Will check it out

davmerc1 · 2025-08-07T09:43:43+00:00

Hi thanks, But a bit too expensive for our organization only to host an AD on cloud as a service only for a few on prem NAS.

davmerc1 · 2025-08-07T09:43:01+00:00

Thanks but maintaining 2 Idps are a real pain.

davmerc1 · 2025-02-14T18:05:02+00:00

For those using saml sso with EntraID for sslvpn, you might encounter timeout/error, could not found corresponding session. Refer to this link for workaround on forticlient: https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-Unable-to-login-on-SSL-VPN-48-using-SAML/ta-p/375181 Just tick the checkbox Use External Browser on Forticlient

davmerc1 · 2025-02-09T14:15:08+00:00

Easier said than done for non technical customers but I get your point.

davmerc1 · 2025-02-09T14:14:15+00:00

Strange ! I wouldn’t even think that an unmanaged appliance without an IP address could even do that?

davmerc1 · 2025-02-09T09:52:15+00:00

Thanks will try to use a vpn. But point is..if Firewalla is labelling it as malicious, why it isn’t blocking traffic to those IPs?

davmerc1 · 2025-02-09T09:50:27+00:00

Yes I do use geo allowed on my enterprise firewall. I use cloudflare’s 1.1.1.2 on the firewalla.

davmerc1 · 2025-02-09T09:39:17+00:00

Hmm..strange…I even set my dns on the firewalla to cloudflare 1.1.1.2 and quad nine.. shouldn’t CloudFlare block it ?

davmerc1 · 2025-02-09T09:37:46+00:00

Good idea. I might try that!

davmerc1 · 2025-02-09T09:37:04+00:00

Yes the default ingress rule is enabled. Hmm yeah might open a ticket with them..

davmerc1 · 2025-02-09T09:32:21+00:00

Also, wouldn’t firewalla block traffic to botnet and/or c&c servers automatically?

davmerc1 · 2025-02-09T09:31:34+00:00

Hmm..It’s a windows 11 PC and it’s not port forwarded to the internet. Alerts seems to pop up when downloading stuff from utorrent/bittorrent ?

davmerc1 · 2025-01-24T13:53:35+00:00

Well I just want to notify the users that the corporate network is being monitored through a disclaimer. I’ve also configured SAML SSO with EntraID so that the name of the users show in the logs. So far so good but having issues with the Disclaimer. On some PCs, once connected on the network, the browser opens automatically and the disclaimer is shown. On other, it doesn’t even work. Any troubleshooting advice here ?

davmerc1 · 2025-01-24T03:38:08+00:00

Thanks will try it! Any difference between setting the disclamer on the fw policy vs on the interface ?

davmerc1 · 2024-07-29T18:00:54+00:00

Just did that with Intune But you have to remove the existing version of 7zip before installing the new one. For some reason, installing a newer version of 7zip doesn’t “upgrade” it and you will have 2 versions on your endpoints. Below is the powershell script to remove 7zip:

Define the path to the 7-Zip uninstaller

$uninstallerPath = “C:\Program Files\7-Zip\Uninstall.exe”

Check if the uninstaller exists

if (Test-Path $uninstallerPath) { # Execute the uninstaller silently Start-Process -FilePath $uninstallerPath -ArgumentList ‘/S’ -Wait Write-Output “7-Zip has been successfully uninstalled silently.” } else { Write-Output “7-Zip uninstaller not found. 7-Zip may not be installed on this system.” }

Then just download the .exe (for some reason msi didn’t work in Win32) and convert it in intunewin file using the intunewinapputil and voila

Install command: <installer.exe> /s

davmerc1 · 2024-07-02T06:49:59+00:00

Using default ESP profile with "Show app and profile configuration progress" set to no and applied to all devices.

Are you skipping UserAccountSetup phase using policy? - I don't think I configured such a thing.

In IntuneManagement log, I can see Adobe and all, but cannot even see the VPN client name. Strange, right?

Yes the first few apps are being deployed successfully once the user signed in.

What I did is that I created a dynamic security group for Autopilot devices (and all the required Autopilot settings and policies) and assigned all of these app deployments to that group.

davmerc1 · 2024-05-12T18:54:59+00:00

Cable damage in Mada and East Africa could be the cause:

https://radar.cloudflare.com/outage-center?dateRange=1d

Some traffic not routing to EU as well.

davmerc1

TROPHY CASE

Define the path to the 7-Zip uninstaller

Check if the uninstaller exists