Topics created by beta

SAM-SD anyone?

2530-8G-PoE+ Switch (J9774A)
5355fe2f-0801-4920-b4f2-e1c01a93ee95-image.png

@beta said in RAID 6 in my backup VM host on spinning rust?:

@scottalanmiller said

It's always array size, never drive size, that matters primarily.

Just so I make sure I understand, array size meaning total TB or total number of disks?

Total capacity.

@JasGot said in One man IT shop looking for additional help options when needed. Hire a MSP?:

@Dashrender said in One man IT shop looking for additional help options when needed. Hire a MSP?:

@JasGot said in One man IT shop looking for additional help options when needed. Hire a MSP?:

A topic in Self Promotion for ITSPs and their geographic area may be helpful to this group.

ITSPs aren't limited by geography.
I know what you're trying to say - you'd like to see someone post where they have remote hands immediately if they are needed without waiting for a flight, etc...

Yes. That seems to be what most of us are missing with national support.

What makes that harder is that the ITSP does the IT work - which essentially never has to be (or should be) local. Remote hands / local work is bench work and you don't want ITSP staff doing that, you want bench techs doing that. This gives you better costs, and better service. Everyone wins.

O365 has this built-in. Check Exact Data Match (EDM), and Data Loss Prevention (DLP).

You define what makes a document HIPAA restricted (EDM) (or for any other other reason if you wish, it does not have to be a HIPAA issue), and then you create a rule about how any document meeting that EDM can be viewed or distributed (DLP).

In a nut shell; Let's say you have documents with Social Security numbers, you create an EDM to identify SS #s in documents (this happens as you access them) and it flags them as having met the criteria for one of your EDM rules.

Then, your DLP rule can, for example, only allow the document to travel through email within your domain, or within a group (department, C level employees, etc). It can disallow the document from being downloaded or printed, etc.....

Have a look here: https://docs.microsoft.com/en-us/microsoft-365/compliance/create-custom-sensitive-information-types-with-exact-data-match-based-classification?view=o365-worldwide

@krisleslie How is it better? It would take a lot for synology to be better than ubnt in my opinion. Not saying it isnt possibe, just asking the details is all.

When I worked in Connecticut, employees at GE headquarters had their cell phones all hijacked by another company sharing their building and all of their texts (ALL of them) were captured and stored by another company (with conflicts of interest as well.) Any text sent to someone there was guaranteed to be not just intercepted, but stored. And they had no way to know because of the complete lack of security in texting.

Thanks all!

Yup, I know about TechSoup, I didn't think they sell O365 licenses directly though, I thought they just direct you to MS as you can get the MS donations directly from MS.

Basically, thinking a little more about what I need to accomplish in 365:

Keep all emails for 2 years (company policy). Currently we are using a 3rd party filter/archive service for our on-prem Exchange server. I was thinking if we moved to Exchange Online we could possibly get rid of that and use MS services? I know there are retention policies that can be configured, but wasn't sure what level of 365 is required.

We have small departments, 1 handles applications that contain SSNs, the other handles payment processing (so they touch CC numbers, although our policy is not to store these - we use a 3rd party payment processor). I'd want to protect the data these users handle by making sure it's not leaked or shared accidentally while still allowing them to make use of the collaboration tools like Teams and Sharepoint. I'd also like to restrict any such data from being downloaded to a home device (editing in the web app version of Office would be ok). That's why I figured I'd need something more than E3.

Thank you all again!

Done

@beta said in Sanity check, which RAID level should I use for my Veeam repository?:

@dashrender said in Sanity check, which RAID level should I use for my Veeam repository?:

@beta said in Sanity check, which RAID level should I use for my Veeam repository?:

P.S. If I decided to keep RAID 10 and did need additional space in the future unexpectedly, I did think about a fall back plan of using Windows Deduplication (server will be running 2012 R2).

You're running Windows Server 2012 R2 on your repo? why waste a license?

I'm a Windows guy and I have the license to spare so seems logical to me.

If it isn't current, I'd call that an anti-reason. Spare licenses that depend on being free, but are not kept up to date means that what you are deploying you can't afford to deploy. It's out of date today and is already technical debt. It'll only get worse over time.

@scottalanmiller said in Thoughts on how I could improve my network security?:

@dave247 said in Thoughts on how I could improve my network security?:

@tim_g said in Thoughts on how I could improve my network security?:

@scottalanmiller said in Thoughts on how I could improve my network security?:

There are places where router and firewall merge and can't be pulled apart - and that is NAT. A NAT translation is assumed to be part of the routing functions, but is a firewall. NAT literally makes the router and the firewall be the same component and function. Of course, in theory, you can have a router that doesn't do NAT, but in the real world, no one has made one since the early 1990s, and maybe not even then.

Exactly. When packets reach the NAT and have nowhere to go, they get dropped. That's firewall.

Yeah, NAT is also not the firewall.

But it is. NAT is a form of firewall. You can't NAT without firewall. But you also can't NAT without router. It's where the two are forced to overlap.

oh right... forgot about the base NAT policies. I was wrong there.