Knowledge Base

Find answers to common questions and learn more about our services

Clear

BGP failover basics for multi-site clients

## Overview BGP provides multi-homed internet independence—overkill for tiny SMB, gold for uptime-critical. ## Concepts ASN, prefixes, AS-PATH prepen...
networking-firewall-remote-access msp seed-library
Apr 5, 2024 Read more →

Captive portal guest Wi-Fi best practices

## Overview Guest Wi-Fi should not become **open door** to printing and file shares. ## Design VLAN **isolated** with internet-only ACL; rate limits;...
networking-firewall-remote-access msp seed-library
Apr 4, 2024 Read more →

Latency versus packet loss: triage chart

## Overview Users say “slow”—technicians must separate **RTT** vs **loss/jitter**. ## Quick reads `mtr` or vendor SD-WAN analytics; compare path over...
networking-firewall-remote-access msp seed-library
Apr 3, 2024 Read more →

NPS/RADIUS for VPN over Windows Server

## Overview Windows NPS still authenticates many legacy VPN concentrators—maintain health. ## Checklist Server certs valid; EAP types match clients;...
networking-firewall-remote-access msp seed-library
Apr 2, 2024 Read more →

Meraki vs Ubiquiti vs Fortinet: handoff notes

## Overview Each stack shines in different niches—document **why** a client landed where to reduce tribal arguments. ## Meraki Cloud-managed ease; li...
networking-firewall-remote-access msp seed-library
Apr 1, 2024 Read more →

Port scanning response on client perimeter

## Overview Internet background noise hits every public IP—know when to yawn vs escalate. ## Classify Known researcher sweeps vs **targeted** sequent...
networking-firewall-remote-access msp seed-library
Mar 31, 2024 Read more →

Network segmentation for PCI scoped systems

## Overview PCI DSS expects **CDE** isolation from corporate LAN—VLAN alone is insufficient without inspection. ## Layers Firewalls between segments;...
networking-firewall-remote-access msp seed-library
Mar 30, 2024 Read more →

IPv6 readiness: what MSPs should verify

## Overview Even if you “don’t use IPv6,” OSes often prefer it—unexpected leaks happen. ## Verify - **DNS64/NAT64** accidental. - Firewalls default *...
networking-firewall-remote-access msp seed-library
Mar 29, 2024 Read more →

VoIP firewall rules and priority markings

## Overview Real-time UDP cannot survive bulk download saturation—QoS and pinholes matter. ## Checklist SIP trunk provider IP list; RTP port ranges d...
networking-firewall-remote-access msp seed-library
Mar 28, 2024 Read more →

SSL inspection pitfalls for line-of-business apps

## Overview Decrypting TLS fixes visibility but breaks cert pinning, legacy Java apps, and some mobile APIs. ## Approach 1. **URL category** bypass f...
networking-firewall-remote-access msp seed-library
Mar 27, 2024 Read more →

Firewall change window communication template

## Overview Stakeholders tolerate downtime when expectations are crisp. ## Template blocks Reason for change, **expected** outage minutes, rollback p...
networking-firewall-remote-access msp seed-library
Mar 26, 2024 Read more →

DNS filtering deployment for schools and SMB

## Overview DNS-layer filtering blocks malware C2 quickly with light client footprint—pair with HTTPS awareness limits. ## Design - **Roaming agents*...
networking-firewall-remote-access msp seed-library
Mar 25, 2024 Read more →