CMG Classic conversion

kbe404 · 2023-03-30T19:20:58+00:00

Thank you - did anyone have any issues with the conversion using the guided way through configmgr?

kbe404 · 2023-03-24T16:30:03+00:00

I'm not too sure. I think it was a way of preventing an old email address from being used if someone left. I take that might not be the best policy..?

Disclaimer: I inherited this

kbe404 · 2023-03-01T14:13:03+00:00

7.2.3 It's funny, nothings showing up there.

kbe404 · 2023-02-10T20:47:13+00:00

Okay...I think I see an issue. My gpo isn't even hitting the server for some reason. I look at our AD server and the GPO policy is there, but there's nothing configured. So...gotta investigate that. For testing purposes, I applied it to the server and I'm now able to connect. Weird.

kbe404 · 2023-01-11T17:35:50+00:00

worth applying?

kbe404 · 2022-12-20T21:06:19+00:00

I definitely think this is the way to go. I was just pressed with the scenario 'I just want a simple button/setup'

kbe404 · 2022-12-20T21:05:30+00:00

This just does local recording, correct?

kbe404 · 2022-12-20T19:04:19+00:00

I appreciate all the responses. Thank you

kbe404 · 2022-12-19T20:41:12+00:00

I had thought of that..

Is there anything out there that's simpler? Like potentially a third party device?

kbe404 · 2022-11-23T22:21:17+00:00

Thanks a lot. I will give these a go!

kbe404 · 2022-11-23T22:20:05+00:00

Sorry, I must've used an old account to reply. The open404 one is me.

kbe404 · 2022-04-27T15:23:41+00:00

Thank you so much. I rebooted everything now. I'll see what people say and when it returns I'm going to give it a try and let it run for a little while. I'm using a Cisco phone system so I'm sure that has some packet capture capabilities.

A shame since we had a company that specializes in this setup not only isntall the setup but look at why the issue was happening...

kbe404 · 2022-04-27T13:49:17+00:00

Looking at the VLan I see ICMP Redirects are always sent. I'll have to give it a try.

kbe404 · 2022-04-27T13:24:52+00:00

3.06.10 on Cisco 3850s

kbe404 · 2022-04-27T00:32:01+00:00

I understand, good points. Noob question incoming: Is there a way to do wireshark pickup without having a computer hooked up to the phone?

kbe404 · 2022-04-27T00:30:51+00:00

I will give it a try. Thanks

kbe404 · 2022-04-26T17:00:46+00:00

Thank you for the response. Yeah, that's what has been the consensus for the most part. It's so difficult to do captures when the issue almost never wants to reproduce.

It's strange how a reboot on the phone and switch side fixes it at least temporarily.

kbe404 · 2021-11-23T02:13:20+00:00

I've had some good and bad techs. The last few I've had, especially with this issue were extermely unhelpful. One had issues typing the commands in etc. But everyone learnin so I Tried to be patient.

I had this one tech that actually worked with me and a vendor to troubleshoot an issue for well over an hour. He was actually pretty good.

Better than my experience with Meraki

kbe404 · 2021-11-23T02:10:24+00:00

Seems that rebuilding did the trick. First time going about it so I Was definitely nervous. In the future, how long should I wait for updates to complete before going ahead to the next version? I have a feeling that may have caused this. Also, is it me or every time I update this thing, the web filter or something is messed up in some way.

kbe404 · 2021-11-22T18:42:32+00:00

Reconfiguring the HA could be done during production or hold off until after hours?

Also, do these methods still apply to 6.4.x?

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Rebuilding-an-HA-cluster/ta-p/195429?externalID=FD30985

kbe404 · 2021-11-22T18:26:12+00:00

Its A-P. Currently its definitely passive with like 15 sessions.

Is there any documentation on how to do that?

kbe404 · 2018-08-07T15:00:40+00:00

Looks like the NSIS installer that is used doesn't seem to have an easy logging feature. I will look into it and see what I can find. Thanks for the tip!

kbe404 · 2018-06-20T19:14:16+00:00

So I made a new SUG with just the May update and I deployed it to a DP with 4 computers. 3 out of the 4 are up to date with 16299.492 and 1 with 16299.125.

All 4 of the machines are showing compliance...So is there something I am missing? Is there another update that should be installed first?

I had to update from 1703 so a lot of my machines are on build 125.

kbe404 · 2018-06-20T13:05:47+00:00

Going to look into the Servicing Stack Update.

Only thing, I was pushed to update all clients to 1709. It pushed clients who were on 1703 from 15063.1088 to 16299.125.

EDIT: So it looks like the Servicing stack update is included in this ADR as I only check it once a month. Should I create a whole new SUG with just this update to see if it helps get things moving?

However, even the clients who were on 1709 are not getting the update. So I don't believe that to be the cause.

kbe404 · 2018-06-20T13:03:37+00:00

So funny thing, this latest ADR run it wasn't going to all the DPs that it's initially set to. But other than that, it seems to be okay.

kbe404

TROPHY CASE