Loading page
Showing posts labelled Firewall.
· 8 min read
Default-deny outbound for servers, give workstations only the network paths they need, isolate management planes, and apply the same least-privilege instinct to identity, DNS, backups, and logging.
· 7 min read
DC-as-DNS blinds the firewall, fakes compromise alerts, and turns a directory outage into “the internet is down”. Put the firewall in front: external names to Cloudflare or Google, internal AD zones forwarded to the DCs.
· 3 min read
Azure HA for Sophos is not the same as plugging two appliances into the same LAN. Use Azure Load Balancer with health probes, then align policy across nodes with Sophos Central—because you are orchestrating two independent firewalls, not one clustered brain.
· 2 min read
Stand up Sophos Firewall (SFOS) as a VM on Proxmox for proof-of-concept or lab: images, NICs, resources, and a few pitfalls before you mirror the same design in production hardware.
· 5 min read
Split Main, Guest, and IoT networks on a UDM Pro, keep IoT off your trusted LAN, and allow Chromecast and AirPlay from phones and laptops without flattening security.