Husband, Father, IT Pro, military service.
Don’t assume, ask. Don’t assume questions are statements or accusations.
I’d rather talk about difficult and nuanced topics in personal one on one situations over espresso or beer. Such discussion is very difficult in Internet written form.
I believe everyone should be treated with dignity and respect, but that doesn’t mean I agree with everything or everyone.
I have conservative and progressive views. I believe people can be both.
I like OPN also. I’ve always appreciated the stability of the BSDs.
My only personal complaint with OPN/PF was the TLS inspection.
I’ve read about adding the modules to *Sense, but I haven’t figured out the configuration pieces.
It just works with Sophos UTM and XG firewall, and the configuration was super easy.
You always use what you like though.
This is true, the 6 GB RAM limit and four cores.
I run a pretty enterprise home lab, and I haven’t ever seen the devices hit the resource limit.
I have around 3k IPS rules and TLS inspection for most categories of sites except the normal stuff like streaming, banking, etc that you’d not want or need to inspect.
For anyone it might help, I use these as inline proxies rather than as the gateway at the moment. So they have more than just internet traffic going through them, they also have segments of my LANs getting evaluated. Performance has been great so far.
Office culture nuances… I enjoy them.
DomainCode-SiteCode-Function##
ACME-USCA-WEB01 ACME-GERM-DC02
I worked for a company where the previous IT dorks named the servers after startrek ships. It’s cute at home. Had to rename everything and readdress the whole organization.
I have a stack of HP Gen 8 servers in the lab that I got off of ebay, for cheap. Cause they’re G8s…and not 10/11 :)
Just make sure it’s HBA mode and it’ll be fine. Sometimes called IT mode.
Google IBM m1015 hba, there’s a ton on eBay for no money. It used to be TrueNAS go to. There’s newer HBAs that are faster, but I don’t think it will matter for you
If you do TN, you MUST read the manual and look at their ZFS intro guide. Trust me.
TrueNAS is a propose built solution.
You’ll need to use it the way it’s designed, which is extremely capable, but reading the manual is mandatory or you’ll do it wrong and then it will suck. I know this.
There’s TN Core, and Scale. Ones based on FreeBSD, one’s Linux. You can compare for your needs.
TN can be an enterprise solution if that tells you the capability.
Edit, it’s meant to be a storage solution. Scale adds containers. It’s not great IMO as a general purpose server OS .
Unless you are forced to use the same network interface, always use dedicated NIC, vLAN when possible.
Like others mentioned, if the VM is on a hypervisor where you can use that to present the disk, you should try that.
Examples would be NAS box with two interfaces, use second one for iscsi. Connect that to switch with different vlan. Connect something like proxmox second nic to iscsi vlan. Add remote disk in proxmox from iscsi nas. Add disk to VM.
This idea spans all different tech.
Have you confirmed you’re not breaking corporate user policy?
Everyone has mentioned Outlook.
Also, 2FA is standard now, like eating ass.
Knowledge primarily, since I’m not running a business.
At this point, like they say in Chips, TLS inspection is standard…
If your enterprise isn’t doing TLS inspection on everything other than banks, medical, gov, they’re doing it wrong.
Some times people think the hard part is getting the CA trust setup, but I find it’s far more tedious to deal with certain sites and mobile apps especially that do certificate pinning.