Topics created by Emad R

The main thing to consider is security and availability. Both solutions can provide them effectively if done properly.

Security is a standard no matter what, but availability is determined by usage. If nobody uses the VPN, it will be respectively easy to maintain It's availability. You will know the requirements of that aspect better than us.

Lots of way to provide availability, and even high availability if needed.

Also lots of things to consider to make sure it's as secure as you are able to.

First step - determine what it is that you want to be learning.

Did anyone mention CrashPlan?

They have a free offering that should work.

I agree with Scott here - You shouldn't use your Windows server at all for the VPN solution.

What does your Windows server do for you? If you're not using it for Active Directory, and it sounds like you're not using it for file storage either (You have a NAS), then what? An application server? Are you hosting your websites from it? Seem expensive for no reason, unless an application you purchased required the use of IIS - then I'd ask, can you get rid of that and move to a solution that is uses a free OS.

As for VPN - If you really need traditional VPN, Find out if your current router/firewall can do it. If not, replace it with a EdgeRouter. They are very inexpensive and do this job great, and work with the native VPN client inside Windows PCs.

@scottalanmiller said in KVM nested virtualization ? stable and why would you ?:

@Dashrender said in KVM nested virtualization ? stable and why would you ?:

@scottalanmiller said in KVM nested virtualization ? stable and why would you ?:

This is where KVM and ESXi have a superior architecture. No need for a Dom0 VM.

uhhh.. ok - then can you do what JB suggested? Install KVM into your CentOS that's already on your laptop?

That's what Boxes is.

Ya don't use that crap though. I run VirtManager on my laptop. The console full screen through SPICE is awesome. Even over the network, on a LAN you could think you're using that machine instead of a VM.

@scottalanmiller said in Best tool to manage Centos KVM ? + Guide:

@msff-amman-Itofficer said in Best tool to manage Centos KVM ? + Guide:

but in Windows environment (virt-viewer) they dont have ssh... so how can I resolve it?

Windows has had SSH for a while now. Both OpenSSH as a server and OpenSSH as a client, plus tools like Putty, too.

That doesn't help with virt-viewer though unless you're making a tunnel. I've never used virt-viewer on windows so I don't know if it has an option for keys.

CLEAR! BZZT!
0_1489999186497_defib.gif
 
 
 
Just adding some more info to this thread.

https://www.itnews.com.au/news/no-updates-for-windows-781-on-new-hardware-455321

Microsoft's recent Patch Wednesday updates had a sting in the tail for Windows 7 and 8.1 users: if they are running the older operating systems on new hardware, the updates will not install.
 
Users with computers that feaure the latest processors from Intel, AMD, and Qualcomm were met with error messages when using Windows Update to get patches, including:
 
"Unsupported Hardware. Your PC uses a processor that isn’t supported on this version of Windows and you won’t receive updates."
 
And:
 
"Windows could not search for new updates. An error occurred while checking for new updates for your computer. Error(s) found: Code 80240037 Windows Update encountered an unknown error."

@msff-amman-Itofficer said in Can you SSL certificate an IP address without domain name:

Is it possible ?

My Goal is to provide an SSL an intranet site, and keep people using it via LAN and not WAN.

But I dont want to bother with purchasing an Domain name, also I searched and Lets Encrypt doesn't support this it seems, what are my alternatives (I prefer zero cost solutions)

You have no solutions that let you have a trusted certificate unless you set up your own CA internally and have all machines on your network trust the internal CA.

@dafyre said in Do you think I.T admins are easy targets for obsessive compulsive disorder?:

@IRJ said in Do you think I.T admins are easy targets for obsessive compulsive disorder?:

Once you bring down something production as a young tech, you will never do it again.

Are you certain of that?

Might be the start of a career-long trend.

PPTP is like an invitation for unwanted guests. You just don't want to use it.

Use something like OpenVPN/SSTP (SSL based, single UDP/TCP port) or IPSec. There's even a non-Microsoft open source server available for SSTP (and many other protocols) at https://github.com/SoftEtherVPN/SoftEtherVPN/.

@msff-amman-Itofficer said in What do you think about Windows Server Containers ? and are you using them ?:

@scottalanmiller

So what do you use instead of Active Directory and pushing/installing msi files remotely on end users?

You can use AD without Windows, we don't but you can. And you can do GPO without Windows, we don't but you can. Neither of those are Windows solutions. They are general ones.

You can replace Group Policy with scripts easily. And you can replace them even better with modern DevOps tools. We are moving to that, so much more powerful than anything that Microsoft offers for managing Windows machines.

Active Directory is not popular like it once was. The idea that remote access to everyone's machines is universally needed is fading away. Lots of places still need that, but a lot (like us) have realized that there is no need there. It's all marketing. It's an SMB thing to believe that AD is always needed and that we must always be able to log into everyone's machines in that manner. There are two thing we don't worry about: full control of end user machines and shared authentication. They just aren't things that are very useful. If they were, we would use Azure AD instead, which is free and does that without the limitations of AD.