“The cloud is just someone else’s computer.”

It's not just EXO, even Azure is shitting the bed.

Dell product and dell is currently circling the drain.

The cloud is always there. Its the cloud. It never pisses on you and calls itself rain... Never!

did copilot became self aware from the rebranding and deleted itself out of sheer terror?

https://status.cloud.microsoft/m365/

But the cloud isn't suppose to have outages.

My employer is not using Sonicwalls solution, but a home grown proprietary solution.

But please don't take that as evidence in favor of doing it yourself - their capability in this area is atypical.

Yeah? Is that experience talking?

I appreciate the response. That makes sense, but I think I still have a lot of homework to do!

Don't use sonic walls, and also I don't have any configured, so I can't help you with any specifics other than other vendors.

Just guessing, they might be doing some kind of network level exploit detection along with the VPN. My network team has that setup on our firewall (multi-zone, including VPN), and I've been called in on more than a few security calls triggered by network EDR. If they have people you can use in that kind of a scenario, it would probably be worth it (my CISO is always trying to get customers to buy into the service BEFORE we have to get on a call rather than after).

Avoid Sonicwall

It’s probably IPsec, not ssl.

Enterprise grade firewalls should be cert, MFA or SAML. I wouldn’t expect a simple username/password in use today.

It’s not more or less secure than the same setup on an in-house firewall.

Right...but is it somehow "more secure" than just a simple SSL VPN client? Granted, I have to put in a password, so anyone who compromises that password now can setup the same, so a password-less solution is inherently "more secure" in that regard...but aside from that...?

My customer is a mid-large size environment with not a lot of tech-savvy folk who are always frustrated with additional security, so anything that would decrease the number of MFA pushes passwords they have to remember would be a win. For that matter, decreasing the number of hours spent admin-ing those things is also desireable. Currently, we're just using simple SSL VPN to access on-prem file/print services.

It’s a hosted vpn.

Where I'm trying to get is, zero-trust being a good framework, does it make sense to go with SW's proposal, or can I do it myself for less/no cost with other solutions out there? It seems like MS has an offering under "Global Secure Access" that might be bundled in with Office365 premium, so I've started focusing there...

Thank you! The whole thing feels like another "the cloud", or "AI" push, and I instantly distrust anything that leverages fear as a sales tool. From what I'm seeing, it feels like there's potential for improving the user experience, so I'm glad to hear that aligns with your perspective!

Hadn't heard of it, reading up on it I think my employer (a very large company) has already implemented a form of it effectively. For us it's taken the form of a trusted auth service for all of our internal websites/services with everything now being directly Internet facing. This means that you can access (almost) everything without a VPN from anywhere, and it removes the idea of "internal" traffic being trustworthy. It's mostly been pretty nice from a user perspective.

It also sounds like a buzzword that a lot of companies are trying to use to sell you bundles of saas products.

Much like Zero Trust it looks like a framework on providing access to privileged information based on policies. Looks to integrate zero trust with a cloud firewall and session broker.

Thanks! I think restic might have a bigger user base right? I might want to stick to what people uses the most... Not quite sure yet. But thanks for your answer, I'm going to look into it.

I have used the restic CLI for a long time. It's actually quite simple and well made

There are a few third party GUI clients but if you're looking for something more "official", you could take a look at the Kopia project. They seem very similar to restic, but have a GUI

Hmmm wonder what’s going on with all these images, anyway.

“The AI-driven growth in the data center has led to a surge in demand for memory and storage. Micron has made the difficult decision to exit the Crucial consumer business in order to improve supply and support for our larger, strategic customers in faster-growing segments,”

Once again: Thanks AI. /s

I have found this community guide to do that. As for the referrallink is: https://hetzner.cloud/?ref=zO5aeDRJtfbC