IT BS thread

Not here, we do best to fix including new profiles. Covid sent everyone home and just swapping is not that easy, especially when someone is down.

 

What brand routers does everyone prefer? I've been using Linksys for a long time. As time goes on, I'm becoming less of a fan of their firmware interface. Their interface seems to be becoming more limited on configurable options. I know options like DD-WRT exist, but if rather not just to set basic functions of the router.

 

TBH I like the Google Wifi pucks. No worries about running wire and the mesh works pretty well, the app is easy to use, and it gets regularly updated.

 

I have a microtik right now. Web interface is pretty meh. But it's very capable and solid wifi.

 

I love my NetGear Nighthawk X10, but if it was to crap out I’d replace it with one of those mesh systems.

 

I'm using the Ubiquiti Amplifi mesh system and liking it. It's more consumer-grade stuff, though, if you want to geek out with stuff you will want their commercial stuff.

I had a Nighthawk X8, but it maxed out at around 300Mbps even hard wired and tuned for speed, and Netgear was ignoring the complaints from owners.

 

Doing the same. I have a pretty low level system since it was my first mesh experience. One RBR20, two RBW30 plug-ins. To get more coverage I converted a $40 RBR40 from a router into a RBS40 satellite (instructions on /r/orbi). I'm covering the house and garage this way.

Performance is good and it's stable. My only gripe with the Orbi is it isn't very configurable (i.e. no VLANs) unless you buy their business class model or have a model you can load Voxel firmware. If I were to do it again I'd look hard at Ubiquiti, but would keep the Orbi for consideration.

Keep in mind you'll probably want to buy a system that has as many satellites/extenders you'll need up front. I know with the Orbi additional satellites are stupid expensive.

 

I’m a fan of Ubiquiti as well.

 

I'm sitting in a system categorization meeting for SolarWinds Orion and they want to categorize it as a MODERATE.

Rant was loaded and launched as soon as they suggested it.

Conversation is now leaning toward H/H/H.

 

The real question is when will it not be H/H/H?

 

If the data your network stores is at moderate or low.

Since we are chock-full of PII, PHI, and financial data...we're higher than Willie Nelson's special farm.

 

I suppose many publicly accessible networks that host generally available info could be considered medium or low. But I'd imagine most companies intranets are gonna have a bunch of sensitive info on it. I believe the affects will continue to be discovered for some time to come.

 

Once I explained that a mad-in-the-middle could be easily hidden in plain sight simply by creating a false entry in Orion that the attacker was using, the folks conducting the meeting got really quiet as the realization set in.

All done - H/H/H. Duh.

 

Right now, my main router is a WRT3200ACM. I'm using a Linksys MR8300 as an access point. Both routers have the same look and feel in the firmware. As far as WiFi, there's not many settings to change. Maybe Linksys figures since the MR8300 is a cheaper router, so it has less options to tweak.

At the moment, the MR8300 is giving me issues. Almost non-existent upload speeds, and logging into the firmware is hit or miss.

WRT3200ACM options


MR8300 options:

 

I read the Microsoft report a few weeks ago on this after hearing the details on a Security Now Podcast after it hit the news. It's scary as s*** how hard it is to find any trace of it in logs. When the only option was to power down and Nuke em, Moderate is probably not the answer.

 

Does anyone here bother with MAC filtering? I know it's not much of a security measure, but still worth managing?

 

Dear God yes. It's a NIST requirement for "deny by default." All government networks have to do it - and it ain't optional. We're audited annually and it's on the list.

Besides having to be on the DHCP whitelist to get an IP, it also has to be listed in Windows or it can't inherit all group policy. Both conditions have to be met for a system to function, either locally or through the VPN.

 

My Netgear config allows me to implement it. I choose not to because there are so few devices.

It is useful to kick my son off the network when he gets out of line. Won't do your chores? Say goodbye to your bandwidth, buddy.