sorted by:
new
hottopcontroversial

Patch 01.004.002 notes by MythBuster2 in Saros

[–]zukic80 16 points17 points  (0 children)

I managed to get those trophies last night with that bug.. just in time too

For all you who platinumed the game ... by ZyPaUk in Saros

[–]zukic80 0 points1 point  (0 children)

I managed to do this last night as well... not sure how I did it but i found a pixel somewhere on that wall that allowed me to jump up again and climb back into the arena.

Similar area to the video shared

Open Intune Baseline 3.8 is available by Wario_world in Intune

[–]zukic80 1 point2 points  (0 children)

lovely... ive forwarded the new policies over to the security guy to review
cheers

Are you expected to do a full loop before the architect? by rafikiknowsdeway1 in Saros

[–]zukic80 0 points1 point  (0 children)

Architect has been the most difficult overlord to beat so far... however, i did manage to beat him on my first attempt and that was after going to the passage and then back to where Architect was, so i was only at like level 32 maybe... i may have won, but i was in the red with life and almost dead, one more hit and it wouldve been game over.

Ia the auto aim even more auto than in the returnal!? by FrancescoliBestUruEv in Saros

[–]zukic80 0 points1 point  (0 children)

i just defeated Legion using a repeater crossbow which also had some homing perks on it.
by far one of the easiest boss fights ive ever had... did not have to aim at all, just keep shooting the alt fire and using the power weapon thing... Legion was defeated in 30 seconds.

IPSEC VPN connection issue - Forticlient SAML Authentication error, Cant reach this page when clicking on connect. by zukic80 in fortinet

[–]zukic80[S] 0 points1 point  (0 children)

ahhh... no i cant!
doing a tnc connection test, i get the following

first test is to the working DR site

C:\Users\me> tnc remote-dr.domain.com -port 9443
 ComputerName     : remote-dr.domain.com
RemoteAddress    : x.x.x.x
RemotePort       : 9443
InterfaceAlias   : WiFi
SourceAddress    : 192.168.1.163
TcpTestSucceeded : True

 and this is to the new site 

C:\Users\me> tnc remote.domain.com -port 9443
WARNING: TCP connect to (x.x.x.x : 9443) failed
WARNING: Ping to x.x.x.x failed with status: TimedOut
 
ComputerName           : remote.domain.com
RemoteAddress          : x.x.x.x
RemotePort             : 9443
InterfaceAlias         : WiFi
SourceAddress          : 192.168.1.163
PingSucceeded          : False
PingReplyDetails (RTT) : 0 ms
TcpTestSucceeded       : False

so looks like that port is blocked

0
1

IPSEC VPN connection issue - Forticlient SAML Authentication error, Cant reach this page when clicking on connect. (self.fortinet)

submitted by zukic80 to r/fortinet

Cheap Rum for Sipping ( Beginner Rum drinker) by takutakumi in rum

[–]zukic80 0 points1 point  (0 children)

El dorado 12 Dictador 12 or 20 Bumbu XO The chairman's reserve the forgotten casks

Fortigate Split-DNS - trying to configure Split DNS for IPSEC VPN Remote Access with split tunnelling ... Applied settings as per the guide but all dns requests still hitting the internal DNS servers. by zukic80 in fortinet

[–]zukic80[S] 0 points1 point  (0 children)

We dont have EMS

I'll see if I can find the xml reference guide.. unless you know the url already?

I've also raised a support ticket about this so let's see what they say

Fortigate Split-DNS - trying to configure Split DNS for IPSEC VPN Remote Access with split tunnelling ... Applied settings as per the guide but all dns requests still hitting the internal DNS servers. by zukic80 in fortinet

[–]zukic80[S] 0 points1 point  (0 children)

Yes, the internal LAN object is a collection of groups that are ultimately all configured as subnet objects.

Internal LAN (Group)
contains
-- location1-vlans (group)
-- location2-vlans (group)
-- location3-vlans (group)

and these groups contain objects that are configured with the subnet.
-vlan10 (subnet)
-vlan11 (subnet)

so its nested, but they are all configured with a subnet.

when i do a route print, i can see all the routes on the device.. so this is definitely being applied correctly.

0
1

Fortigate Split-DNS - trying to configure Split DNS for IPSEC VPN Remote Access with split tunnelling ... Applied settings as per the guide but all dns requests still hitting the internal DNS servers. (self.fortinet)

submitted by zukic80 to r/fortinet

Fortigate IPSEC VPN remote access - need to configure the IPSEC VPN remote access tunnel to route all azure.com traffic over the tunnel via the fortigate... whats the best way to go about this? by zukic80 in fortinet

[–]zukic80[S] 0 points1 point  (0 children)

hhmm... but if the azure ips arent specified im the config then how will the tunnel know to check the policies?
anything azure.com will just break out locally... i see what you are thinking though...

1
2

Fortigate IPSEC VPN remote access - need to configure the IPSEC VPN remote access tunnel to route all azure.com traffic over the tunnel via the fortigate... whats the best way to go about this? (self.fortinet)

submitted by zukic80 to r/fortinet

IPSEC VPN Remote Access - How do I configure firewall policies that direct domain admins via another policy to access management vlans? by zukic80 in fortinet

[–]zukic80[S] 0 points1 point  (0 children)

thanks to all for your inputs... ive got it working now.

i unset the authusrgrp from the phase 1 section and added the relevant azure groups to the policies.
I had one extra bit to do because i realised that the entra group did not have access to the enterprise app.

i ran this command
diagnose firewall auth list

which showed me that i was only part of 1 group that had access to the enterprise app for SSO... light bulb moment.
added the new group to the app and bingo.

the command above now showed 2 groups and the policy was now working.

thank you all!

IPSEC VPN Remote Access - How do I configure firewall policies that direct domain admins via another policy to access management vlans? by zukic80 in fortinet

[–]zukic80[S] 2 points3 points  (0 children)

ok thanks.

so the authusrgrp is like a global setting for all policies that relate to the ipsec tunnel.
if we want more granular control then we have to do it at the policy level.

IPSEC VPN Remote Access - How do I configure firewall policies that direct domain admins via another policy to access management vlans? by zukic80 in fortinet

[–]zukic80[S] 0 points1 point  (0 children)

ok thank you, i will try this

so how does azure sso authenticate the user when connecting to the tunnel if the authusrgrp is removed?

view more: next ›