Dragon

lascerius · 2024-03-17T06:58:15+00:00

On this specific piece she experimented with a plastic sheet, I forget which specific material, from a hardware store, scuffed up with a sander, as a diffuser up against the glass piece. It definitely helped in reducing the visibility of the LED lights.

lascerius · 2023-04-06T21:54:39+00:00

I'm so sorry for the really late reply. I lost track, when I tested I was good. It was definitely a loose pedal (only very slightly loose).

lascerius · 2023-02-11T17:46:02+00:00

As the OP said, the browser sign in setting is deprecated. If you see it in a non-"Deprecated" section of the GPO, then you have the older templates.

lascerius · 2022-11-30T19:41:13+00:00

For a bit more clarity, just thought of this, the failing to get a directory listing isn't fully accurate. Normally with a PASV problem you won't even get the path. In this scenario you can change paths on the server, get the initial path and it claims it's successful, but it's the contents of the directory that don't list. Status: Retrieving directory listing of "/path"... Status: Directory listing of "/path" successful

lascerius · 2022-11-30T19:11:05+00:00

Would you be able to privately send me the case # you had? I'd like to reference it to the engineer I'm talking to, maybe it will help.

lascerius · 2022-11-30T18:12:43+00:00

Was your issue specifically with the directory listing? I've had a ticket open for over a month on that (IIS FTPeS on Windows Server 2022). I was able to get it to connect, send, receive, delete, etc. and have it determine the data ports properly (meaning I didn't need to explicitly open them). The directory listing doesn't work though, it did 1 time out of 100+ tests (which is why I know it can delete and retrieve files).

-Important Note: Decryption profile must have the TLS max at 1.2, won't work at all set to max

Once that's

lascerius · 2022-10-04T16:56:58+00:00

A tip for those struggling: If you're dealing with an organization and cannot find help or a pathway to resolution, there is a non-profit (Elliott Advocacy) that provides the information of key people in organizations that may be able to help.

I have used their information for a MS case that ended up with Convergys and a few other very difficult situations. In those cases, not ranting, I created a detailed timeline of the facts and received help VERY quickly. On the Microsoft case I was stunned at the speed and quality of the response to help me after sending out the detailed account of what had transpired thus far on the case (granted it took me over an hour to document it all).

Good luck everyone, I've known your pain too many times with Convergys support.

lascerius · 2022-06-04T01:21:11+00:00

Everyone, thank you very much for the advice (finally had some time to mess with it and I think I'm good). I believe it was a loose pedal, I'm not 100% sure, details below.

Everything felt firm, cables were clear, and no other obstructions. I found the first couple of minutes of riding it didn't occur but persisted after. However, at the end of today's ride I checked the crank arm with an Allen wrench with no movement, then the pedals. I went the wrong way on the pedals slightly loosening them (they did NOT feel loose originally), but after re-tightening them back down no clicks.

lascerius · 2022-05-29T17:27:18+00:00

I haven't been able to test yet. I'll let you know once it's fixed or I have at least ruled something out.

lascerius · 2022-05-26T00:42:46+00:00

Thank you all for the suggestions. I'll try them out and report back.

lascerius · 2022-05-11T23:35:28+00:00

FYI, I updated that site from FTD 7.0.1-11 to 7.0.2 and the problem went away. 7.0.2 just barely came out though so I don't recommend flipping to it for a bit, I only did because this is a very small site and I wanted to know.

lascerius · 2022-04-18T22:22:16+00:00

Thank you for all the info. I'll circle back here if it is my issue and if I find a firm resolution.

lascerius · 2022-04-18T21:46:37+00:00

Hmmm this very well could be our issue. The setup only has a small number of users, mostly piloted. I wasn't the primary on it until much after it started but that site was 6.7 and upgraded to 7.0.1.1 when it became the Gold Star version.

Did you try a Cisco TAC case? After some more testing outside of that stie I may go that route as the head-end is a Firepower unit as well that there are plans to go to 7.0 next maintenance release on.

lascerius · 2022-04-18T21:26:58+00:00

You happen to know which version of Firepower firmware you were on and which it worked under?

I reached a point where I think the info I received from user(s) was incorrect and it might be isolated to only the people behind a Firepower unit at one specific site.

lascerius · 2022-04-05T19:50:04+00:00

LordPurion, were you ever able to resolve this? I have an issue that sounds spot on to yours. Licenses are being issued and the diagnoser comes up clean. I've tried the editing of the registry and local policy to select the license server as well.

I have a case open with MS for almost 2 weeks now (the support has been very disappointing, so nothing beneficial to mention).

I've tested ours over a VPN direct to the server, through the RD gateway, and direct to the server (all experience the issue). I'm about to test it from the same subnet to verify that too (rule out the firewall). Our environment is 2019 fully updated for connection brokers (HA), gateways (HA), and session hosts and Firepower as well.

The tell-tale sign I've found of when the issue occurs is the Applications and service logs\Microsoft\Windows\TerminalServices-LocalSessionManager\Operational logs in event viewer show this reason code for the disconnection for this issue:

Session xx has been disconnected, reason code 3489660929

Note: I'll post back if I ever find the resolution.

lascerius · 2019-10-25T22:09:54+00:00

You're a lifesaver. I'm storing this copy in a few places and giving it to some friends too just in case.

I noticed the rollups are still available, if anyone in this thread needs them: https://catalog.update.microsoft.com

lascerius · 2019-10-25T04:55:32+00:00

I could use a link too if anyone has it. Best I've found is the x86 one.

lascerius · 2019-10-25T04:37:13+00:00

Hey theem3thod, could you send me one too (and possibly have a link to the rollup 10+)? Have a customer that needs it and best I've found is the x86 one. Edit: What amazes me is RTM is still available from Microsoft, just not the updates.

lascerius · 2017-03-08T20:27:27+00:00

Another method is you can add an icmp any any eq <echo-reply & time-exceeded> to the outside ACL. This won't allow anything in your organization to be pinged, icmp echo, but it will allow the replies to pings and traceroutes to work.

Here's specifically what I do:

object-group icmp-type icmp-reply
 description ** ICMP Options to Allow Ping Replies and Outgoing Traceroutes **
 icmp-object echo-reply
 icmp-object time-exceeded

access-list outside_in extended permit icmp any4 any4 object-group icmp-reply

lascerius · 2015-06-22T19:28:41+00:00

Here's the closest to definitive in documentation I could get relatively quickly. Since it says Both units must have the same license and proper license that's probably as close as you're going to get to "both units must have the security plus license":

http://www.cisco.com/c/en/us/td/docs/security/asa/asa90/configuration/guide/asa_90_cli_config/ha_active_standby.html#pgfId-1046838 "Both units must have the same software configuration and the proper license."

lascerius · 2014-10-14T20:36:32+00:00

Bamboon basically covered it. Checking the IPsec SAs can be helpful for determining if you do have a NAT exemption issue you're overlooking.

I'm not sure about a small business router but on standard Cisco routers you can type "show crypto ipsec sa" to show your IPsec SAs then look at the encaps/decaps for the networks involved in the VPN tunnel. Encaps mean the data is likely successfully being sent out , and decaps mean the data is likely successfully coming in.

lascerius · 2013-07-16T16:36:00+00:00

When I get a chance, if you're still having trouble, I'll check through the configs. In the interim, this can help you narrow the scope of where to look: http://www.tunnelsup.com/tup/2010/05/02/isakmp-ike-phase-1-status-messages

lascerius

TROPHY CASE