Things I build, break,
fix, and write about

1 January 2026
AI
VoIP settings for optimal performance on Sophos XGS

Sophos XGS Firewall: optimise VoIP settings for reliable calls. Start by mapping your NAT, public IPs, VLANs, and ports. Lock firewall rules and allow only required SIP and RTP ranges. Mark media traffic for priority and set QoS with fixed bandwidth for voice. Test registrations, capture RTP and monitor latency, jitter and packet loss.

Read more
1 January 2026
AI
Automating static IP-MAC management in Sophos firewall

I get this question a lot. An institution hands me a spreadsheet of 200 MACs and IPs and asks for a quick way to push those as static IP-MAC reservation entries into a Sophos firewall. Manual clicking is boring and error prone. There are three practical routes: convert the sheet to a Sophos-compatible XML and […]

Read more
31 December 2025
AI
Configuring inbound TLS/SSL inspection on Sophos XG

Configure inbound TLS/SSL inspection on Sophos XG and XGS. You will learn when to use the Sophos WAF or a reverse proxy. You will see where to bind certificates and how to map public IPs with DNAT. Validate with curl and packet capture, and apply fixes immediately.

Read more
31 December 2025
AI
Managing CVE-2022-48310 with Sophos Connect

Sophos Connect vulnerabilities, including CVE-2022-48310, may appear on macOS scans. Check your app version, confirm the flagged library with mdls and otool, then follow Sophos guidance or apply temporary mitigations such as disabling the client or using an approved VPN client. Re-run your scanner and record the plugin ID and timestamp.

Read more
30 December 2025
AI
Understanding user feedback on Sophos Firewall v22

Sophos Firewall v22 user experiences show Health Check and XDR are key. Back up your configuration, check disk space, and test XDR in a lab before you upgrade. Clean your rule base, enable two-factor authentication for admin accounts, and monitor logs after the upgrade.

Read more
30 December 2025
AI
Configuring firewall rules in Sophos Firewall v22

Prepare before you upgrade. Check device support and free disk space, back up configs and snapshots. Use clear rule names, narrow objects and specific service ports. Enable logging and review hit counts. Test changes with connectivity, policy and regression checks. Automate exports and rule updates via the Sophos REST API for Sophos Firewall v22 configuration.

Read more
29 December 2025
AI
Understanding sparse files in Linux environments

Sparse files let you create large logical files that consume little physical disk space until you write data. Use them for VM images, test files or temporary swap, but monitor actual usage with du and preserve holes when copying with cp --sparse=always or rsync -S.

Read more
29 December 2025
AI
Configuring privacy settings in Linux Mint for lawyers

I’ve used Linux Mint on client laptops and for sensitive files. Linux Mint security works fine if you configure it correctly. Treat the OS as a tool, not a guarantee. That means planning the disk layout, locking down networking, and choosing how and where to store legal documents. Read this as practical steps and examples […]

Read more
28 December 2025
AI
Setting up a Linux lab with CachyOS

Linux Lab Configuration: Start with hardware that fits your needs. Create install media and enable virtualization in firmware. Assign static IPs and separate traffic with VLANs. Apply strict firewall rules. Automate repeatable tasks. You must test each change from another host.

Read more
28 December 2025
Rambles
Weekly Tech Digest | 28 Dec 2025

Stay updated with the latest in tech! This digest covers AI ethics, auto industry shifts, and the impact of politics on technology, exploring today's pressing issues.

Read more