TencentOS (TLinux) and OpencloudOS

Source: https://cloud.tencent.com/developer/article/2230747

TencentOS Server 镜像版本

目前腾讯云上有3款 TencentOS Server 镜像供用户选择：

镜像版本	说明
TencentOS Server 3.1	与 CentOS 8用户态完全兼容，配套基于社区5.4 LTS 内核深度优化的 tkernel4版本。
TencentOS Server 2.4	与 CentOS 7用户态完全兼容，配套基于社区4.14 LTS 内核深度优化的 tkernel3版本。
TencentOS Server 2.4（TK4）	与 CentOS 7用户态完全兼容，配套基于社区5.4 LTS 内核深度优化的 tkernel3版本。

Reference:

https://www.tencentcloud.com/zh/document/product/213/40223

https://cloud.tencent.com/document/product/213/70717

https://www.opencloudos.org/

TencentOS (TLinux) and OpencloudOS

国产操作系统 - Antivirus

Antivirus support Kylin 麒麟 OS and Huawei EulerOS (OpenEuler):

1. TrendMicro OfficeScan
2. Bitdefender
3. Kaspersky
   

Reference:

https://www.kylinos.cn/

https://www.openeuler.org/zh/

国产操作系统 - Antivirus

Tencent Cloud Security Tool - Cloud Security Center (CSC) and Cloud Workload Protection Platform (CWPP)

The CSC and CWPP are good tool to protect cloud workload, provide threat detection, threat blocking, forensics, source tracing, and threat response and handling.

Reference:

https://www.tencentcloud.com/products/cwp

https://www.tencentcloud.com/products/csc

Tencent Cloud Security Tool - Cloud Security Center (CSC) and Cloud Workload Protection Platform (CWPP)

Cathay Pacific (CX) inflight service

My first flight is A330 which is wifi not available:

My second flight A321 neo have service:

Reference:

https://flights.cathaypacific.com/zh_HK/flying-with-us/wifi/connectivity.html

https://www.cathaypacific.com/cx/zh_HK/inspiration/cathay-stories/cathay-inflight-wifi.html

Cathay Pacific (CX) inflight service

Lenovo X240 able to install Linux but not Windows

Reason: The secure boot cause this problem

Solution: reset the secure boot settings to default and also clear all configuration.

Lenovo X240 able to install Linux but not Windows

TP-Link Tapo c200 IP Camera need to upgrade firmware and also enable auto update

Upgrade path: 

Version 1.3.5 upgrade to 1.3.9, then 1.3.11

Since TP-Link C200 no need to open firewall port and also setup DDNS or fixed IP, you only need to use the TP-Link mobile app to connect, upgrade firmware is very important to secure your IP camera. 

TP-Link Tapo c200 IP Camera need to upgrade firmware and also enable auto update

DDNS and OpenVPN setup on Sophos Firewall

Reference doc:

https://doc.sophos.com/nsg/sophos-firewall/18.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/Network/DynamicDNS/index.html

https://doc.sophos.com/nsg/sophos-firewall/18.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/Network/DynamicDNS/NetworkDynamicDNSProviderAdd/index.html

https://www.asus.com/tw/support/FAQ/1033906/

DDNS and OpenVPN setup on Sophos Firewall

A very good security feature on Fortinet Fortigate you should enable to protect your firewall against vulnerability

Virtual patching on the local-in management interface

Virtual patching is a method of mitigating vulnerability exploits by using the FortiGate's IPS engine to block known vulnerabilities. Virtual patching can be applied to traffic destined to the FortiGate by applying the FMWP (Firmware Virtual Patch) database to the local-in interface using local-in policies. Attacks geared towards GUI and SSH management access, for example, can be mitigated using the FMWP database pushed from FortiGuard, thereby virtually patching these vulnerabilities.

https://docs.fortinet.com/document/fortigate/7.4.1/administration-guide/393161/virtual-patching-on-the-local-in-management-interface

A very good security feature on Fortinet Fortigate you should enable to protect your firewall against vulnerability

Fortinet Fortigate Firewall and H3C Switch OSPF network type

In 6.x OS, Fortigate Firewall OSPF in GUI running on "broadcast" network type. You need to check your H3C OSPF is running which network type.

Network type:

broadcast: Broadcast.
non-broadcast: Non-broadcast.
point-to-point: Point-to-point.
point-to-multipoint: Point-to-multipoint.

point-to-multipoint-non-broadcast: Point-to-multipoint and non-broadcast.

If the network type is mis-match between Fortigate and H3C switches, you will see the neighbour but cannot update route in the routing table.

Fortinet Fortigate Firewall and H3C Switch OSPF network type

Tencent Cloud Direct Connect routing constrain

Limitations: 

1. Cannot accept over 100 route via BGP
   
2. Support Statics Route and BGP only

Solution:

Fortinet Fortigate to do OSPF route summarisation and then redistribute to BGP to Tencent cloud

Remark: H3C switch OSPF limitations is cannot summarise route to next hop.

Tencent Cloud Direct Connect routing constrain

Sophos Firewall failed to access web admin console after upgrade from SFOS 19.0.3 MR-3-Build517 to SFOS 19.5.3 MR-3-Build652

After the upgrade, you still able to see the login page:

And also, you able to access Internet via the firewall:

But you failed to login the firewall web console: (Return a blank page)

You able to access firewall via SSH:

Solution:

Use SSH to login, then select "7" , then "R" to reboot the firewall.

Reference:

https://community.sophos.com/sophos-xg-firewall/f/discussions/142061/help-firewall-is-reachable-from-internet-but-not-able-to-connect-to-vpn-or-internal-servers

https://support.sophos.com/support/s/article/KB-000038694?language=en_US#:~:text=Check%20the%20connectivity%20to%20Sophos%20Firewall&text=Otherwise%2C%20try%20to%20access%20the,WAN%20IP%20of%20Sophos%20Firewall.&text=Try%20to%20use%20another%20browser,on%20port%2022%20via%20putty.

Sophos Firewall failed to access web admin console after upgrade from SFOS 19.0.3 MR-3-Build517 to SFOS 19.5.3 MR-3-Build652

M365 - Exchange - This message could not be sent. You do not have the permission to send the message on behalf of the specified user.

When you using "Send As", you receive the following error message:

This message could not be sent. You do not have the permission to send the message on behalf of the specified user.

Solution:

In Office 365 and go to Exchange Admin Center(EAC) search,  click and edit the shared mailbox. Then go to mailbox delegation, add your account to the Sent As permission list. Then wait a few hours to take effect. Then you will be able to send emails as the shared mailbox. In Outlook 2016 client, click From and choose Other Email Address and type the address of the shared mailbox.

 

Reference:

https://support.microsoft.com/en-us/office/open-and-use-a-shared-mailbox-in-outlook-d94a8e9e-21f1-4240-808b-de9c9c088afd

https://answers.microsoft.com/en-us/outlook_com/forum/all/send-mail-as-a-shared-mailbox/074b9d20-16c9-4431-bb88-6ce81331844f

https://copyprogramming.com/howto/send-as-vs-full-access-shared-mailbox

M365 - Exchange - This message could not be sent. You do not have the permission to send the message on behalf of the specified user.

Install Windows 11 without internet connection (23H2)

When it request you to connect Internet, use the "Shift + F10" keyboard shortcut. (Some laptop need to press "FIN + Shift +F10")

In command prompt, enter "OOBE\BYPASSNRO"

Then, the setup wizard will re-run and you have an option to select "I don't have internet"

https://pureinfotech.com/bypass-internet-connection-install-windows-11/

Install Windows 11 without internet connection (23H2)

Lenovo T14s Gen 4 AMD Type 21f8 wifi driver

Qualcomm Wireless Driver for Windows 11 (Version 21H2 or later) - ThinkPad

https://pcsupport.lenovo.com/us/en/products/laptops-and-netbooks/thinkpad-t-series-laptops/thinkpad-t14s-gen-4-type-21f8-21f9/downloads/driver-list/component?name=Networking%3A%20Wireless%20LAN&id=E3519D23-890E-4DE1-9064-DE6E7DA2515B

Lenovo T14s Gen 4 AMD Type 21f8 wifi driver

AVITA - ESSENTIAL NE14A2IEE435 - Windows 11 fine tune

1. Reinstall the machine to Windows 11 23H2
2. Run Windows Update to apply latest patches and drivers
3. Disable shadows, animations, and visual effects
4. Disable transparency
5. Change power settings to "High performance"
6. Disable Game mode

Reference:

https://www.computerworld.com/article/3687056/how-to-speed-up-windows-11.html?page=2

AVITA - ESSENTIAL NE14A2IEE435 - Windows 11 fine tune

AVITA - ESSENTIAL 14吋 NE14A2IEE435 手提電腦 - Openbox test

- 14吋防眩螢幕提供舒適視角

- 內置SATA 固態硬碟（SSD）128GB
- Windows 11 家用版 S mode (英語系統)
- 處理器AMD Athlon™ Silver 3050e
- 記憶體4GB DDR4
- 顯示卡AMD Radeon™ Graphics
- 約1.377 kg

Pros: Very cheap (HK$ 998) form mega sale

Cons:

1. Windows 11 is (S mode), you can run applications from Microsoft Store only. Actually, you can switch it back to Windows 11 home edition by login Microsoft Store and select "Switch out of S mode" What is Windows S Mode? - Reviewed (usatoday.com)

2. The CPU and RAM are limited, the overall performance are not good running Windows 11 even under S mode

3. New machine battery is empty need to charge for a while before able to power on

4. Keyboard layout is different e.g. "@" not on number 2 key (It is UK default keyboard layout not US)

100Mbps broadband:

AVITA - ESSENTIAL 14吋 NE14A2IEE435 手提電腦 - Openbox test

FortiToken migration need to be preparation

It requires to transfer the token license to new device via support ticket, and also need to re-activate the token in user side again. Below are the details KB from Fortinet: 

https://community.fortinet.com/t5/FortiAuthenticator/Technical-Tip-Migrating-users-and-FortiTokens-to-another/ta-p/193723

By design, FortiTokens (except the hardware FortiToken-211 and FortiToken-300 series) are always linked to the serial number of the unit on which they are activated. 

The entire process boils down roughly to these steps:  

1) Migrate the licence/token in Fortinet systems (this is done via a support ticket).  

2) Delete the tokens on the old unit.  

3) Migrate any user accounts from the old unit to the new unit as appropriate. 

4) Activate the tokens on the new unit (add the hardware tokens/supply the mobile token licence activation code). 

5) Assign tokens to users again (for mobile tokens, it needs to be activated in the app again).

FortiToken migration need to be preparation

How to reformat a USB thumb drive which is format by Win32 Disk Imager?

User Windows command Diskpart

It will take several hours to finish the format.

Reference:

https://hk.unbxtech.com/2021/06/howto-format-drive-diskpart-command.html

How to reformat a USB thumb drive which is format by Win32 Disk Imager?

How to install Lubuntu from a USB drive?

To create a bootable USB thumb drive, you will need to use Win 32 Disk imager:

Reference:

https://www.fosslinux.com/46593/install-lubuntu-usb-drive.htm

https://sourceforge.net/projects/win32diskimager/

https://www.lifewire.com/try-lubuntu-16-04-windows-10-4037886

How to install Lubuntu from a USB drive?