Thanks Larry, I know that Home Assistant has the MQTT and Node Red path. I actually moved off of HA to hubitat about a year ago for other reasons. And I would prefer not to have to move platforms again to do this! Any tips on Hubitat would be welcome! Thanks! ... View more

So, I got a couple of MVs. But when I enroll them, i get an error saying that I lack the right licenses. When I look in my dashboard it says that I have MV-SEN licenses. But the cameras seem to want an MV license? Is there a difference? Help! ... View more

So, I made a VLAN that has a firewall rule with deny default and then assigned machines in that segment to that VLAN. Then, for good measure, I turned the port to "disabled" in the settings for the switch. Sound reasonable @PhilipDAth? ... View more

Can I simply turn set the port on the switch that this device connects with to “disabled?” Everything that this device needs to talk with is actually in the same room with it—e.g., printer. Then that room feeds into a single port on an MS switch . So, if I turn that port off, isn’t that as effective as writing firewall rules and setting up VLANs?   (I know it’s not as good as an upgrade or as an air-gap). ... View more

I understand the risk. I’m working to upgrade. Looking for practical advice to mitigate risk in the interim.   ... View more

I could air-gap it. I have done that in the past. Frankly, for maintenance purposes, I want it to show up in the Meraki interface.    There are actually several machines in that room that all run through the switch port. And none of them need internet accces, except when I want to perform some sort of maintenance without going on site.    What is the best way (short of an air gap) to lock down that port—i.e., block traffic to or from devices behind that port via a policy or VLAN?   Thanks. -Eric ... View more

It’s running XP. That’s the vuln. The question is whether it makes more sense to use the built in policy for the client called “blocked” or to write a new group policy that applies some sort of firewall rule or VLAN isolation. And if the latter, what should that group policy say. ... View more

Long story. But there are some pieces of medical diagnostic equipment that are essentially bundled with a computer. You can’t upgrade the computer without moving to a new set of drivers that don’t exist for newer operating systems. So, the whole bundle has to be swapped out—that’s tens of thousands of dollars. For now, I just want to prevent that machine from talking to the Internet and from receiving Internet traffic. ... View more

Thanks! ... View more