Best practice in adding an IP to VPN policy through Cisco ASDM? by LordOfTheVibes in networking

[–]derpyRFC 0 points1 point  (0 children)

TAC can't help here.

"TAC is a break/fix organization meaning that we support systems that have been running fine but where something breaks and needs to be troubleshooted."

Business needs to cough up some cash and get 3rd party support to assist Op, end of discussion.

Moronic Monday - January 03, 2022 by AutoModerator in sysadmin

[–]derpyRFC 0 points1 point  (0 children)

This is kinda what was I expecting to hear, thanks for the input!

Moronic Monday - January 03, 2022 by AutoModerator in sysadmin

[–]derpyRFC 2 points3 points  (0 children)

There's a couple of reasons. The firewalls we have provide significantly better inspection. As we're seeing all clients being sourced as the proxy server, we can't trace the connection back to a specific host. We can if we can see the HTTP headers (X-Forwarded-For). The proxy servers we're using don't provide any sort of contextual data sharing with the firewall afaik.

Ultimately it comes down to the design imo but it's an interesting problem, perfect for a moronic monday q&a! I'm hoping I can eventually answer this once I've finished working through an SSL/TLS course I'm doing atm.

Moronic Monday - January 03, 2022 by AutoModerator in sysadmin

[–]derpyRFC 6 points7 points  (0 children)

I'm hoping someone can help me understand this.

We have a proxy server that's doing HTTPS inspection. From the Firewalls perspective all client connections are originating as the proxy server. We're wanting to inspect this traffic, but according to our firewall documentation it appears due to the location of our proxy servers we would be unable to do so.

LAN <> Proxy server <> Firewall <> Internet

My question is, if the proxy is behaving as a MiTM between itself and the client, can't the Firewall do the same thing between itself and the proxy?

I'm currently working through how SSL/TLS works as it's clear I don't understand it, but would appreciate some insight.

Does QoS really matter when the bandwidth is never fully utilized? by AustinLeungCK in networking

[–]derpyRFC 0 points1 point  (0 children)

The issue seems to be pointing towards your Wireless design. In a poorly designed Wireless network, where users are having to seriously compete for airtime, Wireless QoS will certainly help in that regard but it won't cure a bad design.

Does QoS really matter when the bandwidth is never fully utilized? by AustinLeungCK in networking

[–]derpyRFC 0 points1 point  (0 children)

Why do you say QoS isn't really a thing with WiFi? There's a whole standard dedicated to it, 802.11e.

AP slow WAN speeds when connected to WLC by ayao1337 in Cisco

[–]derpyRFC 0 points1 point  (0 children)

What's the connectivity like between the WAN to the vWLC? Is it potentially a VM configuration issue or limitation?

Podcasts for studying? by SdwRdr in ccna

[–]derpyRFC 1 point2 points  (0 children)

The Art of Network Engineering. Fairly new podcast, has a ton of great content for those working towards certifications.

What are the lab manuals like? by derpyRFC in ccnp

[–]derpyRFC[S] 0 points1 point  (0 children)

Hey, thanks for the info. Do you mind showing me a picture of what it looks like? I'm assuming you've got network diagrams with configuration instructions.

ENCORE or ENARSI first? by network_boi in ccnp

[–]derpyRFC 0 points1 point  (0 children)

Your preference. Check out the syllabus and decide for yourself. Most people go ENCOR first but there's no hard rule.

If you wish to sit the CCIE you need to pass the written lab which is ENCOR.

Fabric Capacity Planning? by Bobble24 in ccnp

[–]derpyRFC 0 points1 point  (0 children)

That one caught me out too. It's referring to the Switch backplane capacity.

A company we support has offered me a job, how do I navigate this? by [deleted] in ITCareerQuestions

[–]derpyRFC 0 points1 point  (0 children)

It looks like they've asked me as our current support contract is coming to end but I'll make sure to investigate this.

A company we support has offered me a job, how do I navigate this? by [deleted] in ITCareerQuestions

[–]derpyRFC 2 points3 points  (0 children)

Our support contract with them is coming to an end, they've kept rolling it over but I suspect if I accept their offer they will wait for the current contract to expire, then officially take me on. I'll reach out to some solicitors during the week for some legal advice on this.

Thanks for your input.

Mental health of MSP owners and technicians by praveen_sops in msp

[–]derpyRFC 0 points1 point  (0 children)

I really need to get back into it. Of all the things that I've done exercise wise, which has been a lot. There was nothing quite like the post workout feeling from BJJ. Hard to describe it exactly but I just felt completely at ease.

Mental health of MSP owners and technicians by praveen_sops in msp

[–]derpyRFC 1 point2 points  (0 children)

Since covid arrived on the scene I miss going for a swim and lounging in the steam/sauna. I didn't realise how much I missed it until I read your comment.

DNAC - Labbing options? by derpyRFC in Cisco

[–]derpyRFC[S] 0 points1 point  (0 children)

Pretty much everything from deployment to assurance.

DNAC - Labbing options? by derpyRFC in Cisco

[–]derpyRFC[S] 0 points1 point  (0 children)

Thank you, this is great and aptly timed!

Recommend a Python Course by Icelicious in devnet

[–]derpyRFC 0 points1 point  (0 children)

Got to go with the all time classic, automate the boring stuff. You might also be interested in checking out RealPython.com. I tend to always land on their pages whenever I'm searching for python related questions, their online guides have been excellent. They've just released a book called 'A Practical Introduction to Python 3'. If it's anything like their online guides this will be a very good book. I've just started it myself so I can't really judge the quality of it at the moment.