Husband, Father, IT Pro, military service.

Don’t assume, ask. Don’t assume questions are statements or accusations.

I’d rather talk about difficult and nuanced topics in personal one on one situations over espresso or beer. Such discussion is very difficult in Internet written form.

I believe everyone should be treated with dignity and respect, but that doesn’t mean I agree with everything or everyone.

I have conservative and progressive views. I believe people can be both.

  • 1 Post
  • 8 Comments
Joined 1 year ago
cake
Cake day: February 11th, 2024

help-circle

  • I mind the work much less than the general corporate organization and interacting with it.

    I usually enjoy system building. I agree it’s taking many technologies and pieces and putting them together. Where we differ maybe comes down to the why, for whom, and how much good it does? Maybe if you’re any good at it?

    I have no interest in duck taping things. Any solutions I’m involved with need to be balls out, bullet proof, maximum effort, or not at all.

    I wonder how many of us agree with the ‘dona few things really well’ vs being a generalist.



  • Knowledge primarily, since I’m not running a business.

    At this point, like they say in Chips, TLS inspection is standard…

    If your enterprise isn’t doing TLS inspection on everything other than banks, medical, gov, they’re doing it wrong.

    Some times people think the hard part is getting the CA trust setup, but I find it’s far more tedious to deal with certain sites and mobile apps especially that do certificate pinning.


  • RedFox@infosec.pubOPtoSelfhosted@lemmy.worldSophos XG Firewall Home Use
    link
    fedilink
    English
    arrow-up
    1
    arrow-down
    2
    ·
    3 months ago

    I like OPN also. I’ve always appreciated the stability of the BSDs.

    My only personal complaint with OPN/PF was the TLS inspection.

    I’ve read about adding the modules to *Sense, but I haven’t figured out the configuration pieces.

    It just works with Sophos UTM and XG firewall, and the configuration was super easy.

    You always use what you like though.


  • RedFox@infosec.pubOPtoSelfhosted@lemmy.worldSophos XG Firewall Home Use
    link
    fedilink
    English
    arrow-up
    1
    arrow-down
    1
    ·
    3 months ago

    This is true, the 6 GB RAM limit and four cores.

    I run a pretty enterprise home lab, and I haven’t ever seen the devices hit the resource limit.

    I have around 3k IPS rules and TLS inspection for most categories of sites except the normal stuff like streaming, banking, etc that you’d not want or need to inspect.

    For anyone it might help, I use these as inline proxies rather than as the gateway at the moment. So they have more than just internet traffic going through them, they also have segments of my LANs getting evaluated. Performance has been great so far.