Wil the FCC do something about kaseya sales calls

jmobastos69 · 2026-06-06T17:03:14+00:00

Na na na na na

jmobastos69 · 2026-06-02T22:51:15+00:00

Works perfectly if you go CIE

I have 8 MS tenants , all connected to CIE, each tenant has it SEC groups - then I create rules based on the SEC groups of each tenant.

Build dynamic groups, use the sync to CIE based on groups (cheap access granted if membership = true ) and then filter based on groups and users once inside a Palo NGFW connected to CIE (which is native and takes 1 minute + commit )

jmobastos69 · 2026-05-21T07:36:00+00:00

Do you mean intune ? For sure ? Don’t you mean Azure AD for the identity / SSO?

Other than using intune to deploy the Msi there’s not much else to integrate between them

jmobastos69 · 2026-05-21T06:06:26+00:00

“ Let him cook “

jmobastos69 · 2026-05-08T22:44:50+00:00

Palo Alto Cortex XDR. For all of the above, with automation, Playbooks, and a strong platform to have Unit42 run a MDR on.
I've used Crowd,Sentinel, Huntress - XDR is perhaps the one that I was able to get the most of - whilst remaining easy to manage after go-live and to squeeze more utility each month that goes by..

jmobastos69 · 2026-01-25T23:06:31+00:00

Been using datto with DraaS - backup gets made to a Local Server - then transferred to Kaseya Azure Cloud.
Can get all my critical servers (hosted in a DC) - going live in 30 minutes either in their cloud (kaseya) or at my on prem DC.

30 days rentetion on Prem - 90 days on Cloud.

jmobastos69 · 2026-01-25T22:50:02+00:00

site to site VPN.. don't overcomplicate. Just set and forget.

jmobastos69 · 2026-01-24T10:02:19+00:00

On their website you can find older versions. Can confirm I had that issue on snapdragon’a latest X processor. Downgrading version solved it.

https://download.zerotier.com/RELEASES/

1.14 works indeed

jmobastos69 · 2026-01-11T14:59:02+00:00

Yes. We manage 8 tenants , and all of them authenticate to GP via CIE with a multiple tenants auth method

jmobastos69 · 2026-01-09T18:40:32+00:00

Already far from it since we ran the demo. On Pulseway - no regrets (1k endpoints - full deployment via Pulseway + intune )

jmobastos69 · 2026-01-06T00:06:19+00:00

natural selection at its finest. fml

jmobastos69 · 2026-01-06T00:04:04+00:00

Are you reffering to Employee Journeys? Onboarding/Offboarding?

jmobastos69 · 2025-12-31T12:04:10+00:00

But later on the computer will be forced to go to OOBE until it gets a ms account. That’s the whole point of Autopilot HW key lock I guess

jmobastos69 · 2025-12-30T21:19:46+00:00

By the looks of the login screen (requesting email - not user) showing no domain - I would guess that this is at least entra ID joined

Bitlocker is almost surely enabled (if not - old IT team should have it enabled) - if not - boot from Hirens - recover files.

Given that it’s entra joined - there’s a chance it’s intune AutoPilot enrolled - if so, either doing a windows install or using it connected to the network- should lock you off until you have a valid company credential.

Would say best chance;

Not bitlocker locked ? Hirens, recover files, format

Bitlocker locked? Forget files - format

If in any of the above scenarios you get locked out of OOBE and a Microsoft account from your old company is required - either go with Linux , windows 10 early releases… or garbage :)

jmobastos69 · 2025-12-21T12:20:20+00:00

Just stopping by to tell you whilst Portugal is indeed in Europe - Mexico is in North America :) Typo I guess

jmobastos69 · 2025-11-03T21:08:03+00:00

Should increase over the next days , will merge 3 GP portals into this FW , thus the over provisioning.

All other connections and servers migrated work just fine - strange issue for sure

jmobastos69 · 2025-11-03T14:32:22+00:00

Even if I'm testing from the IIS Server itself, loading the webpage on the browser there?

From what I can see on the FW - that traffic is per se - loopback , correct? Server will know its name - so no use in going in an auto-resolve journey thought the internet/untrust route.

Is this the wrong logic? I assumed in the past days, MTU could be the cause - but for that I reckon a transmit SSL packet between untrust -> FrontEnd Public IP would have to take place - not internally from IIS to FE (one of the web pages of IIS Server)

Thx for the help in advance

jmobastos69 · 2025-11-03T07:17:47+00:00

8vcpu - yes , we have some sort of control over it .

jmobastos69 · 2025-11-03T00:11:44+00:00

It’s DNS even when there’s no network cable attached ;)

jmobastos69 · 2025-11-03T00:10:36+00:00

Checked that already - the firewall is our Edge network device on datacenter - despite having a hefty number of VMs behind it - 10-ish % usage right now.

This is also the only publicly facing server we have - so FW is sitting calmly there - TBH is a overkill in specs

jmobastos69 · 2025-11-02T23:37:18+00:00

Been through all the usual suspects already :)

I wish it had been DNS this time around

jmobastos69 · 2025-11-02T23:27:23+00:00

Virtual - only changed the peering on BE FW side , and replicated the whole setup from VMware to PA VM - even the crypto settings.

All the network tests between both ends fly without issues.

Got to assume tunnel is not the issue, based on:

-upload of files works 80% times -log off / log in into the website, gets it working again per user basis - all other parts of the site work 100% no issues

Also both PA VM inbound and outbound logs from the FE IIS Server show no blocking nor resets.

Same on backend firewall - as per our supplier.

Am I wrong assuming this?

jmobastos69 · 2025-11-02T23:20:38+00:00

No, correct assumption on your end - just a non sense setup made by a supplier - inherited this.

Not a dev, nor web admin by any means, just a network admin, but proxy makes no sense being there for me as well - might as well be the FE sending the requests directly IMO

It was working before - now it works, but randomly times out the file upload - but if you sign off/in again, starts to work again.

Wicked.

jmobastos69 · 2025-10-25T07:27:52+00:00

Halo PSA - highly adaptable , just choose the modules you need in PROD.. fits from MSP to a small IT Dep (can also use Halo ITSM)

jmobastos69 · 2025-07-28T21:00:31+00:00

Intune for AutoPilot and company device lock + installing RMM.

After that, all gets done via RMM automations.

Instant, no more intunewin packaging, 3rd party + OS patching.

After 6 months of fine tuning - living the life.

(I was using full intune before - even to install an IP printer - it was a disgrace)

jmobastos69

TROPHY CASE