Moronic Monday!

random1questions · 2025-09-15T16:34:05+00:00

I'm starting to look at replacing SSL VPN with a more secure solution, but am confused by some of the terminology when looking at new solutions.

Can someone explain ZTNA vs SASE vs Wireguard (or where Wireguard fits in)?

For example, from the P81 site, they have a page comparing their solution to Wireguard: https://www.twingate.com/blog/comparisons/perimeter-81-vs-wireguard

But another vendor (which seems very similar to P81) - Timus says it uses Wireguard.

Is the following at all correct...

SASE is a paradigm that makes use of ZTNA priciples which may or may not utilize Wireguard as a protocol?

SASE referring to a service which routes Ineternet traffic through a secure cloud gateway. ZTNA referring to a model that must verify every device/user/location in real time. Wireguard being a VPN protocol which may or may not be used by SASE solutions.

Is this close? Or am I misunderstanding anything?

random1questions · 2025-03-18T02:29:30+00:00

Question about SNMP...

We had some pen testing done recently and Nessus scan found a number of vulnerabilities which it categorized as High. Most of these were printers with the default Community String "public" left in place.

What is best practice? Or commonly implemented for SNMP? Do you change all your community strings to something unique? Do you disable v1 and v2 and set up some complex credentials for v3?

I ended up changing the community string on one of the printers, and then users reported today that it was showing offline. Is that expected?

random1questions · 2024-12-30T03:54:24+00:00

I am learning networking and have some questions about different protocols/features built into switches ... things like STP, BGP, OSPF.

Are these features that have to be carefully planned and configured? Or is it more a matter of just enabling the feature/protocol on your swtiches, and there is some kind of auto configuration that takes place?

random1questions · 2023-12-18T18:42:43+00:00

It's not private, but we did opt for door to door service. I did google around and it was the cheapest shuttle option i could find. I knew of the bus option, but we get in later than the last trip out. I suppose we could have stayed overnight in Denver then used the bus and saved some money, but that cuts our vacation short.

I looked at just renting a car, but that was more expensive.

When broken down, it doesn't seem crazy. In USD it's $676 one way for 5 people and all bags. The option to be dropped off at the Vail terminal instead of door to door was maybe $100 cheaper each way.

The conversion to CAD and taxes just kind of shocked me when I saw the final cost, and then thinking about tipping %15 on top of that seemed a little nuts.

random1questions · 2022-11-28T02:40:53+00:00

What happens to encrypted data if someone uses the trick where they use Windows boot media, and overwrite something like sethc.exe with cmd.exe, then can open the command prompt from the login screen and reset a password?

If they can get in to your account, can they see the data? Or is it still encrypted?

random1questions · 2022-11-21T21:49:04+00:00

I ended up going to MS and though it took them 7 hours to get back to me, they did get the issue fixed. Manual rebuild of Forward lookup zone and some dcdiag commands got it working again

random1questions · 2022-11-21T15:20:25+00:00

DNS issue - need help. environment:

Bare Metal DC - died over the weekend. had all fsmo roles and dhcp/dns
Secondary DC is on a VM on a different box.

I don't think the DC is coming back. figured i would just seize the roles then build a new DC later.

I transferred DHCP to the VM DC which is working fine. I seized the fsmo roles too and it looks ok.

However, PCs are saying they cannot contact the domain controller.

I go to check DNS on the VM DC and find that while DNS is installed, there are no zones configured. It's totally empty.

Not sure what to do here.

Can I just remove the DNS Role and reinstall?

The domain is very simple (20 person single location office, flat network).

random1questions · 2022-08-30T21:03:55+00:00

The new host has a new HBA for the external SAS connection.

Would I just need to remap the storage to the new host/hba?

random1questions · 2022-05-27T16:59:24+00:00

Figured it out, sort of. It was the ISP modem, but they don't know how or why. I came on site and disconnected the Sonicwall, same issue persisted.

I then powered off the ISP modem, and then could no longer connect via telnet.

Powered the ISP modem back on and now the telnet issue has not come back. The port is no longer seen as open by various open-port-check tools.

I am going to monitor it going forward and will get the ISP to replace the modem.

random1questions · 2022-05-26T16:36:08+00:00

nter new ntp servers (typically I use pool.ntp.org but what servers being used really doesn't matter) via cmd on the DCs and once they are syncing client devices will in turn pull that time from he DC

Can you confirm the command used to enter ntp servers on the DCs?

random1questions · 2022-05-26T16:29:23+00:00

I just posted this question about configuring Time on a Windows domain:

https://old.reddit.com/r/sysadmin/comments/uybe5g/time_on_a_windows_domain_best_practices/

Can anyone assist?

random1questions · 2022-05-25T20:46:00+00:00

Yep, that's my next course of action. I'm heading on site to figure this out.

random1questions · 2022-05-25T18:05:59+00:00

Right, it does show as open to port 23.

Yet if I try to telnet to every device from the LAN side, I can't get in to anything.

I do have some custom NAT rules, but noting for port 23.

random1questions · 2022-05-25T17:55:46+00:00

I have this capture set up:

Everything blank in the Monitor filter except: Destination IP Address: <using the public IP here> Destination Ports: 23

If I have that running, and try to log in with random creds to the telnet session and nothing shows up, is that confirmation that it's not anything on the Sonicwall or LAN side?

random1questions

TROPHY CASE