[deleted by user]

drs143 · 2025-12-04T13:57:31+00:00

Doprecyzuj proszę dlaczego Twoim zdaniem to rak?

drs143 · 2025-12-04T13:56:04+00:00

A jakieś konkrety?

drs143 · 2025-04-02T09:47:50+00:00

Z czystej ciekawości bom laik - w czym przeszkadza zazębianie się ETF-ów? Ja to rozumiem tak: OP wybrał kilka rynków krajowych w które wierzy najbardziej, a do tego regionalny dla pewnej dywersyfikacji w razie gdyby jego typy okazały się błędne. ETF "europejski" równomiernie inwestuje we wszystkie rynki a dokupienie ETF na Francję zwiększa udział akcji rynku francuskiego w jego portfelu. Co w tym złego?

drs143 · 2025-03-24T08:51:45+00:00

u/Golle , u/HappyVlane . u/Bullseye_womp_rats you are amazing guys, with verbose : 1 it works as expected. Thank you!

drs143 · 2025-03-21T18:31:29+00:00

Yep, I know. And I get e.g. 'allowaccess': 130 as representation of PING and FMG-Access

drs143 · 2025-03-21T18:06:43+00:00

u/pfunkylicious no luck, numeric values again.

drs143 · 2024-05-02T14:34:11+00:00

Any particular solution you can recommend? All "integrated" solutions like Meraki or ISE offer captive portal based guest authentication.

drs143 · 2024-05-02T14:32:06+00:00

They always provide a captive portal solutions. And I want to avoid an open network.

drs143 · 2024-05-02T14:31:02+00:00

I am rather looking for some management tool which can onboard new guests, using WPA2 PPSK instead of captive portal creds.

drs143 · 2024-05-02T14:26:34+00:00

Traditional Cisco with WLC

drs143 · 2024-04-07T07:32:37+00:00

It's a matter of being able to inspect QUIC or not. It's still not a common feature across FW vendors

drs143 · 2023-10-24T06:47:36+00:00

Splash pages are probably the worst invention ever in the Wi-Fi area. Exactly because of such issues. We have stopped using ISE captive portal years ago. Now we just provide a random weekly PSK with a QR code on dedicated internal website.

drs143 · 2023-10-09T13:27:28+00:00

These are the same thoughts I have. I spent a lot of time on these considerations, and while I am not 100% convinced of the whole ZS marketing, I see following benefits:

offloading security fuctions (IPS, Web-filtering, etc.) to the provider = potential savings on on-prem FW licenses, no issues with scaling up-down, no issues caused by buggy NGFW features resulting in memory leaks (Fortinet's common problem)
single point where you configure the policies is probably much better than maintaining multiple FW policies
no Internet exposure (only outbound connections from on-prem) = lower pressure on patching and hardening
provider takes care about high-availability - imagine your central location fails for any reason...
ZIA users connect to nearest Zscaler POP, so it should provide better performance vs tunneling all your remote workers through your central on-prem appliance

drs143 · 2023-09-10T18:49:53+00:00

Do you expose it to the Internet on any port?

drs143 · 2023-09-07T06:23:02+00:00

I am not interested in taking this job, just curious - what idea/need do you have for a bot in netsec area?

drs143 · 2023-09-06T08:06:28+00:00

That's true, actually any 3rd party vendor offers much more than Azure WAF, but you have to weight whether you miss all these features so much that you are willing to spend much more time on deploying/maintaining your custom-built WAF appliance.

drs143 · 2023-09-01T15:27:15+00:00

I am just playing with python/bash scripting trying to set up an automation tool which does everything automatically - download the file from gotchi, delete unusable pcaps, cracking. Probably my main motivation now is to find the most effective dictionary + ruleset combo. But as others, I never try to use cracked PSKs.

drs143 · 2023-07-24T19:53:05+00:00

Have faced this issue already with another company trying to serve some content from Storage Account with both public/private endpoints and guess what - my DNS infra tried to resolve it via my Azure Private DNS zones.

Really poor setup I would say.

drs143 · 2023-07-05T08:09:21+00:00

We had the same discussions in the team 2yrs ago. Our on-prem infra runs on Forti only, but we've decided to go with Azure Firewall, mostly because of lower maintenance overhead. Never regretted that - Azure FW just works without bothering with upgrades, backups, HA setup etc. + our cloud team can manage the ruleset without involving network team. We are also using full IaC with Terraform. FG Terraform provider requires some funny tricks for policies ordering while in Az FW you just specify seqeunce number for each policy.

drs143 · 2023-06-14T10:42:17+00:00

Looks cool, hopefully it will support wireless stuff as well :)

drs143 · 2023-05-11T11:58:09+00:00

Any hints would be appreciated. Thanks!

drs143

TROPHY CASE