StephenPink

Oooh interesting! Let me know how you get on? Where would you look to host if you went down that path, as I'd imagine there's quite a lot of traffic being ingested? I've booked a call with CheckMK later this week.

Oh yeah sorry I know - it was just where my mind went when I was thinking about monitoring for errors - monitoring event logs... security issues.. SIEM.. Is there not a product that does both? Given the data being collected would it not make sense for a unified platform/view? It's Monday and I already feel scrambled!

Thanks all so far for the swift responses - appreciated! A couple i haven't come across so will check them out One other thing I forgot to mention - I don't actually have any "central" infrastructure which makes a centralised host tricker - @Rob_D that's where I got stuck with Zabbix, wasn't sure where to host a central server - or if I could have multiple HA central servers as an alternative... Cheers

Hey all, So I know this has probably come up several times before, but hey, we're in a new age of AI now so perhaps things have changed.... Those that look after multiple sites, what are you using/how are you monitoring server and networks estates from a central dashboard? With alerting? More specifics on things to be monitored; - Hyper-V Workgroup Cluster Hosts - Physical Servers - Hyper-V VMs More than just a ping test - disk space issues, hardware errors etc. Perhaps it's more of a SIEM I'm looking for? Network wise I've got a mix of Aruba Central/Ruckus CloudPath so one would hope/assume there is an API out of both of those that can feed another system? Oh and don't forget free/cheap as chips Most of what I've thought about has come unstuck on one/some of the below; - VM based - so runs on said hardware that I want to get alerted on... - On-site - so then requires power/network etc - and then if there's a DNS/internet issue again can't alert - Cloud-based - cost - Crazy money... Also late night thought along the free/cheap lines - - an idea about building something but not sure if it would be a goer - some from of PC based appliance, that had it's own 5G connection as backup that could be placed at each site in some form of HA so no central repository more just replicated across each site... Anyway monday morning brain dump! TIA

I wasn't aware Grandstream made networking equipment - have only come across them from the telephone side. Have always favoured Yealink over Grandstream due to quality/warranty so not sure how I'd feel about Grandstream switches/wifi... If you're keen for the single manufacturer, I've heard of a few places using Unifi Talk and enjoying it. I'm not sure there's much else out there better value than Unifi on the networking front - and don't forget, the lack of any ongoing costs/subscriptions is a huge factor to consider. Cheers

Moving to Unifi - the ONLY NVR I found that was capable of being backwards compatible with the eclectic collection of cameras we had (Merit-Lilin, Samsung/whatever they were branded before and after Samsung). And exceptional value for money - both NVR and Camera wise.

That's what I was about to say - keeping a close eye on these, as the 2U Pro seems VERY good value for money. I'm hoping the range will be expanded soon; both to a slim 1U model for network cabs, and a larger capacity/full length model for server cabs. They support clean server shutdown via NUT apparently *but haven't got one yet to test as too small for my use cases currently

Yeah but it's only might so should be fine right?

PM me and can chat pricing/supplier if it helps... I'm not sure I'd want to try and use CloudPath with another vendors APs. I've also been speaking to Unifi about their Endpoint app - as that can do one-click WiFi provisioning, but currently can't deploy certificates...

R670s/T670s. Nah - for Visitors we use the Guest Portal in R1 instead, with voucher codes that are issued by IT/Reception. No SSL inspection on that network - Securly Guest DNS filtering only. Voucher codes so that it can't be used by students. Cheers

Yeah you still need to install the root that signs the NPS cert for some Androids, tis annoying. Makes sense - am in the same boat. Will easypass also hand certificate distribution? That's the pain point (still)

We've recently gone to the Ruckus CloudPath route due to this issue exactly. And still not perfect, but a smidge easier - Android is the worst, not helped by the amount of variation between manufacturer versions as well. The other route is enrol in an MDM... i can share instructions from pre-CloudPath if it helps? Again they were reasonably vague though to try to cover the majority of devices without taking into account the specific variations. Cheers

GPO details below (not sure the scheduled task deletion actually worked, but the reg keys definitely had the desired effect) I will however also make clear - this is NOT a fix - these devices DO need to replaced due to age, but we are where we are unfortunately... Computer Configuration > Preferences > Windows Settings > Registry: - New > Registry Item: ○ General: § Action: Updated § Hive: HKEY_LOCAL_MACHINE § Key path: SYSTEM\CurrentControlSet\Control\SecureBoot § Value name: AvailableUpdates § Value type: REG_DWORD § Value data: 0 (Decimal) ○ Common: § Stop processing items on this extension if an error occurs on this item: No § Run in logged-on user's security context (user policy option): N/A § Remove this item when it is no longer applied: No § Apply once and do not reapply: No § Item-level targeting: No - New > Registry Item: ○ General: § Action: Updated § Hive: HKEY_LOCAL_MACHINE § Key path: SYSTEM\CurrentControlSet\Control\SecureBoot § Value name: HighConfidenceOptOut § Value type: REG_DWORD § Value data: 1 (Decimal) ○ Common: § Stop processing items on this extension if an error occurs on this item: No § Run in logged-on user's security context (user policy option): N/A § Remove this item when it is no longer applied: No § Apply once and do not reapply: No § Item-level targeting: No Computer Configuration > Preferences > Control Panel Settings > Scheduled Tasks: - New > Scheduled Task: ○ Task: § Action: Delete § Name: Secure-Boot-Update § Nothing else configured ○ Schedule: § N/A ○ Settings: § N/A ○ Common: § Stop processing items on this extension if an error occurs on this item: No § Run in logged-on user's security context (user policy option): N/A § Remove this item when it is no longer applied: No § Apply once and do not reapply: No § Item-level targeting: No

Just in case it helps anyone else - we had this on Win 10 and 11 machines - freezing ~10 minutes after boot, whether logged in or not - it was the Secure Boot certificate updates. Specifically, trying to update them on machines that couldn't take it.

Recently gone through Procurement Services to get refurbished hardware; LOT 2 here: IT Hardware, ITAD & Associated Services The framework was quick and easy to use. Definitely easier than trying to get like for like quotes with refurbished kit - quick spec sheet, RFQ out and short turnaround - ended up awarding to BornGood and Tier1 - so far so good. Cheers