u/bluecopp3r

Greetings all. Looking to build a lab to learn IGA flows from scratch that may become testing ground for an on-prem production deployment. From your experience which solution integrates well with Active Directory and has good documentation on setting up said integration.

Greetings all. I have an MX68CW and trying to better understand why they chose Allow Any Any as the defaul rule. Coming from linux-based firewall where the default was to block everything and create allow rules to explicitly allow the needed traffic, i found the Meraki approach weird. The other things that compounds this is if i am to change the default rule to Deny Any Any, its not immediately evident how to create a rule to access the internet. When i try to add a destination of Wan or 0.0.0.0/0 those don't appear to be options.

Do you change the default rule? How do you approach the rule creation. How do you specify the wan port in a rule?

I was flying my drone over my house inspecting the roof. All of a sudden the drone started misbehaving. It started drifting left so I held right and it started drifting more. I turned the drone for it to face the direction i wanted to return to and when i pushed forward it kept going backwards. Eventually it starting behaving and I landed.

Has this kinda thing happened to anyone before? What could've caused it?

Greetings all.

During footage capture at night under infrared, can the shutter slow down so much that a person is ghosted? I was reviewing footage and saw a ghostly object pass by my neighbour's car. Something actually passed because the light reflection in the car's fender disappeared as the object passed. I was barely able to follow it as it went into the road then nothing else.

Greetings all.

I have 2 situations I'd like your input on.

1. I had a recent internal audit as part of our ISO 9001 processes. The backup process was audited and a few areas for improvement were identified and corrected. On review of the corrective actions the auditor asked if there would be a need to preserve backup activity logs for an extended period to show to external auditors that backups have been taking place and not just a recent activity. I have backup activity logs in Veeam set to 90 days.

For those who are in an environment that goes through audits, is there a need to retain backup activity logs? If so what is your defined retention period and what was the deciding factor(s).

2. Having disabled accounts of former employees can pose risks by an attacker activating them and using them for lateral movement or escalating privileges. I have seen recommendations to automate the deletion of disabled accounts after a set period of time (ex. 90 days). I have also seen where admins don't delete accounts for auditing purposes.

Does removing all group membership a good enough defense for keeping disabled accounts for years? For those who don't delete accounts for auditing purposes, is this for all accounts or for specific roles or access privileges?