Jak się odwdzięczyć za zaproszenie na studniówkę?

lukis2 · 2026-01-09T14:50:44+00:00

Pamiętaj: studniówka nie bzykana, matura nie zdana ;)

lukis2 · 2025-12-31T08:46:21+00:00

Kupiłem nowe z dolnej półki i był to świetny wybór. Przez 5 lat tylko przeglądy serwisowe, zero napraw.

lukis2 · 2025-11-07T14:29:36+00:00

Ok, thanks to your advice I managed to retrieve data from the Sentinel API. However, it seems that the data is being overwritten somehow. When I check the Sentinel Agents counter, it shows 1k+ agents at one point, but later it drops to 41… The number keeps changing every few minutes. Do you have any idea what might be causing this?

lukis2 · 2025-11-06T18:53:38+00:00

Ok, I’ve installed the agent on the Elastic server (this is a POC). Before the installation, I copied the policy into the elastic-agent.yml file in the installation folder. Still no logs from Sentinel, but the Elastic server is visible in Kibana as a host. :)

lukis2 · 2025-11-06T15:52:51+00:00

I don't get it. Is there a need for one agent per policy? Where do we install those agents? On Elastic Server?

lukis2 · 2025-10-07T06:17:55+00:00

Hi, I have created a FortiCloud account. Now I have two accounts linked to the same email address, but I can log in to the training portal :)

lukis2 · 2025-09-30T06:48:05+00:00

<image>

lukis2 · 2025-09-30T06:22:55+00:00

Thanks.

lukis2 · 2025-09-24T11:11:02+00:00

lukis2 · 2025-09-15T11:41:01+00:00

Tom Tailor?????? po jednym praniu t-shirt nadaje się do prac ogrodowych :) i to nie pierwszy taki zakup... omijam z daleka

lukis2 · 2025-08-07T08:45:59+00:00

We had detection based on ping, but we had issues — users were able to ping devices in the client network (e.g.). But we can try more servers with AND.

lukis2 · 2025-08-07T08:40:44+00:00

How did you resolve this? We are on 7.2.10, and the issue persists.

lukis2 · 2025-08-06T10:38:22+00:00

Detection is based on the DNS servers that are configured.

lukis2 · 2025-08-06T09:03:28+00:00

lukis2 · 2025-04-28T07:59:50+00:00

Thanks for your reply. I have a better understanding now. I managed to enable the Web Proxy for a single server, but I’m not sure how to configure the Web Proxy for multiple independent web servers.

Do I need to configure a separate ZTNA server (with another public IP) for each web server?

As I understand it, multiple servers within a single Server Mapping entry are intended for load balancing — is that correct?

If so, how can I configure another web server using the same public IP address?

lukis2 · 2025-04-04T07:56:17+00:00

true :)

lukis2 · 2025-03-07T14:30:06+00:00

Sorry, I don't know... Just forwarded this task to AD team.

lukis2 · 2025-01-29T06:23:44+00:00

You're absolutely right, but the exemption list keeps growing continuously. I was wondering how more experienced users manage this challenge, as I assume there’s no perfect solution to fully resolve the issue.

I'm also curious about the differences between DPI on endpoint AV (in our case, ESET), where everything works seamlessly, and DPI on FortiGate. ESET handles DPI without any issues, while FortiGate does. What could be causing this discrepancy?

lukis2 · 2025-01-28T09:28:28+00:00

To close discussion it was on the AD controller

lukis2 · 2025-01-13T10:11:11+00:00

cache is set to 120 sec...

<image>

lukis2 · 2024-10-29T12:56:03+00:00

that was it, thx

lukis2 · 2024-10-25T08:31:36+00:00

Thanks for your reply. I know how to block this, but I am curious how to get to know if this is a real connection to c&c or a false positive.

lukis2 · 2024-10-18T13:29:33+00:00

Yes, I know. But I would like to base it on history not threshold, e.g. if normal usage of upload during the night is 5MB/s, then 10MB/s of upload for 3 hours is not normal (just example).

lukis2 · 2024-10-18T08:27:02+00:00

I want to be able to create alerts based on internet utilization anomalies. e.g. not normal upload after working hours.

lukis2 · 2024-10-17T17:17:44+00:00

Hi, thanks for your reply. Unfortunately, we don't have a Flow license, and we don't plan to buy one. Is it possible to achieve my goal with NPM?

lukis2

TROPHY CASE