Mga IT jan ng SMB (small medium business) company pasok!

[13carl13]

pfsense kung opensource.

kerio control kung user friendly.

both you can deploy as virtual appliance or get as physical appliance.

personally, i've been using kerio control for the last 5 years, no major issues and madali imanage.

Check ko ung pricing ni kerio . Maraming salamat po sa suggestions sir. Kaya rin kaya nito mablock ung youtube app at facebook app ng smartphones?

sir try mo enable ung MITM sa pfsense. sure yan gagana ung HTTPS web filtering.
Some issues na nancouter sa MITM is, meron sites di nagaacept ng Certificate ni pfsense.
Or minsan di na maview un sites. but meron advanced features dun para whitelist mo ung mga sites.

Additional pede mo rin gamitin ung DNSBL para DNS level ng filtering

Bago lang sa pandinig ko ito. di ko pa sya naieexplore sa pfsense. Subukan ko ito sir. Marami pong salamat

 

[ToyCar]

Check ko ung pricing ni kerio . Maraming salamat po sa suggestions sir. Kaya rin kaya nito mablock ung youtube app at facebook app ng smartphones?

of course, provided they are on the same network (LAN);

 

[13carl13]

of course, provided they are on the same network (LAN);

ahh . cge sir check ko po.. tried mikrotik layer7 protocol, di sya gumagana e, maybe may kulang ako sa mga url's.

 

[ToyCar]

ahh . cge sir check ko po.. tried mikrotik layer7 protocol, di sya gumagana e, maybe may kulang ako sa mga url's.

sa content filtering, per website classification ang blocking. unlike sa traditional website/host blocking

 

[flexihopper18]

meron po ba dito nakadeploy na sa cloud ng kanilang infra?

 

[jamaitim]

Check ko ung pricing ni kerio . Maraming salamat po sa suggestions sir. Kaya rin kaya nito mablock ung youtube app at facebook app ng smartphones?




Bago lang sa pandinig ko ito. di ko pa sya naieexplore sa pfsense. Subukan ko ito sir. Marami pong salamat

MITM means Man in the Middle tol. which is kasama din sa squid tol.

- - - Updated - - -

meron po ba dito nakadeploy na sa cloud ng kanilang infra?

Meron na tol.

 

[flexihopper18]

MITM means Man in the Middle tol. which is kasama din sa squid tol.

- - - Updated - - -



Meron na tol.

pwede po ba ako makahingi ng design ng infra nyo sa cloud? Advisable paba na magdeploy ng DNS (local)?

 

[Macy08]

i use radmin in our corporate setup; but if you want free, you can use VNC.

this january, i am upgrading to manageengine remote access plus to manage our corporate lan/

Try nyo yun Guacamole. Remote Server Sya

 

[13carl13]

MITM means Man in the Middle tol. which is kasama din sa squid tol.

- - - Updated - - -

Sir jamaitim at ibang mga masters natin dito, Baka po mabigyan nyo ako ng idea ng mga usually or standard setup ng mga physical firewall sa network.

Eto po current setup namen e.

ISP > Mikrotik > Switch > workstation PC's

Si Mikrotik po ay may 5 network blocks - 1 for DHCP Server and 4 Static networks.
Gusto po namin ma-filter yung accessible websites sa DHCP Server and exempted naman po ung 4 static networks.

San po kaya ilalagay yung firewall? ISP>FIREWALL> Mikrotik or ISP>Mikrotik>Firewall.

Patulong po please. Maraming salamat

 

[ToyCar]

MITM means Man in the Middle tol. which is kasama din sa squid tol.

- - - Updated - - -

Sir jamaitim at ibang mga masters natin dito, Baka po mabigyan nyo ako ng idea ng mga usually or standard setup ng mga physical firewall sa network.

Eto po current setup namen e.

ISP > Mikrotik > Switch > workstation PC's

Si Mikrotik po ay may 5 network blocks - 1 for DHCP Server and 4 Static networks.
Gusto po namin ma-filter yung accessible websites sa DHCP Server and exempted naman po ung 4 static networks.

San po kaya ilalagay yung firewall? ISP>FIREWALL> Mikrotik or ISP>Mikrotik>Firewall.

Patulong po please. Maraming salamat

Mikrotik Switch lang ba yan or RouterOS? Kung RouterOS, may built in na content filtering yan.

Anyway, kung normal switch lang yan eto standard setup:

Firewall (3 LAN Cards required)
-> LAN (DHCP)
-> SWITCH - > WORKSTATION PC's
-> WAN (INTERNET)
-> ISP
-> LAN (GUEST NETWORK)
-> MIKROTIK

Set content filtering only on LAN (DHCP) netwokr;

 

[13carl13]

Mikrotik Switch lang ba yan or RouterOS? Kung RouterOS, may built in na content filtering yan.

Anyway, kung normal switch lang yan eto standard setup:

Firewall (3 LAN Cards required)
-> LAN (DHCP)
-> SWITCH - > WORKSTATION PC's
-> WAN (INTERNET)
-> ISP
-> LAN (GUEST NETWORK)
-> MIKROTIK

Set content filtering only on LAN (DHCP) netwokr;

RouterOS po yung gamit ko sa mikrotik sir. Gamit ko na po ung firewall nya, using layer7 protocol to block websites, kaso hindi napo sya gumagana now. I dont know what happen. Suspect ko nung dumami na ung lease at clients connected kay mikrotik mukang di na nya kinaya. Medyo madami din po kase akong Queue.

Sir toycar medyo di ko nagets yung flow hehe. Nalilito pa po kase ako kung saan ung pinaka best position ni firewall.

If ISP > Firewall > router(Mikrotik) > switch > clients
or
ISP>Router(Mikrotik)>Firewall> switch > clients.

 

[ToyCar]

RouterOS po yung gamit ko sa mikrotik sir. Gamit ko na po ung firewall nya, using layer7 protocol to block websites, kaso hindi napo sya gumagana now. I dont know what happen. Suspect ko nung dumami na ung lease at clients connected kay mikrotik mukang di na nya kinaya. Medyo madami din po kase akong Queue.

Sir toycar medyo di ko nagets yung flow hehe. Nalilito pa po kase ako kung saan ung pinaka best position ni firewall.

If ISP > Firewall > router(Mikrotik) > switch > clients
or
ISP>Router(Mikrotik)>Firewall> switch > clients.

ISP>Router(Mikrotik)>Firewall> switch > clients.

 

[13carl13]

ISP>Router(Mikrotik)>Firewall> switch > clients.

Thank you sir. Bali manggagaling parin ung DHCP Server IP at Static ip kay router tapos si firewall parang bridge lang sya na filtered?

PFsense as of now pinag eexperimentuhan ko e. gusto ko sana maging bridge lang si firewall pero kaya nya paring mag filter ng mga websites. Possible po kaya yun? Salamat po ng marami sir

 

[ToyCar]

Thank you sir. Bali manggagaling parin ung DHCP Server IP at Static ip kay router tapos si firewall parang bridge lang sya na filtered?

PFsense as of now pinag eexperimentuhan ko e. gusto ko sana maging bridge lang si firewall pero kaya nya paring mag filter ng mga websites. Possible po kaya yun? Salamat po ng marami sir

mas ok lahat kay firewall na sir even dhcp. role na lang ni router is to supply yung WAN port mo.

 

[jamaitim]

Try nyo yun Guacamole. Remote Server Sya

Ganda nito. Linux server pa.

- - - Updated - - -

pwede po ba ako makahingi ng design ng infra nyo sa cloud? Advisable paba na magdeploy ng DNS (local)?

Yes. Local DNS is for your LAN. This is suitable kung may mga internal websites ka.

 

[rommelzkie]

may sumagot naba sa problem mu?

 

[consider]

Hi mga sirs pwede pa explain nalilito lang ako. Paano ggaamitin yung ipv4 subnetting base no.of subnet and no.of host in real environment?. Nag aaral palang ako pero alam kona paano mag compute. Salamat

 

[lordolivervillanueva]

any link for a ticketing tool for corporate.?

 

[ToyCar]

any link for a ticketing tool for corporate.?

https://www.manageengine.com/products/service-desk/?pos=MEtab&cat=HD&loc=tab&prev=AB2

 

[kobebrylle]

mga kaibigan at mga ka mobilarians.

mag papatulong sana ako regarding on MyQ na app sa mga printers.

sinu po may idea neto?


sana po makatulong po kau saken ..