Well, I have no intention of hitting CTO/CISO, so no goat farming for me

Don’t use sonic walls, and also I don’t have any configured, so I can’t help you with any specifics other than other vendors.

Just guessing, they might be doing some kind of network level exploit detection along with the VPN. My network team has that setup on our firewall (multi-zone, including VPN), and I’ve been called in on more than a few security calls triggered by network EDR. If they have people you can use in that kind of a scenario, it would probably be worth it (my CISO is always trying to get customers to buy into the service BEFORE we have to get on a call rather than after).

Really wish we would have gone hyper v instead of Stack HCI

The only way that works in practice is to either have a second admin who gets the order while the first is talking to their boss, or you have a non-technical person with a break glass account that can do it while the admin is in that meeting.

I’ve had to be the second admin on more than one occasion and it sucks to be the one disabling your coworker/friend when they get fired, but it’s part of the job.

Don’t tie your mental health to that of your colleagues. I know from experience how tempting it is to hang out in a bad place because you don’t want to dump your workload on your work friends, but a bad org is going to make shit decisions and make life hard for the employees whether you’re punching the clock or not.

While you may not be ready now, put the feelers out, because you may hit a point where your patience suddenly runs out and you have to start from nothing and deal with no longer being in a good headspace at work.

Considering it resume/interview practice until you find a good gig or just need to get out.

You’re welcome, and good luck to you!

Depending on the power of your device (which I cba to look up), you may be able to spin it up locally on the device for a dr test. I was lucky enough to have a company that forced the versions that could run a few VMs side by side, so that made it possible to do that sort of thing easily, and remotely!

Hyper-v will not survive when it is dragging customers away from the Azure cash cow

Pretty sure that’s why they made Azure Stack HCI, it’s hyper-v, but doesn’t work without an up to date azure subscription and charges you monthly fees to run vms on hardware you own.

It’s great, the worst of both worlds… Fucking thing doesn’t even report on disk provisioned, only utilization, so get fucked it you want to capacity plan without writing your own report script.

Snapshot verification

It’s entirely ephemeral. This service, like others I’ve used, really only gives you a screenshot to show that the system is booted, since your data is probably fine if your system boots (but that’s still not an excuse to not do restore tests - we would do file VM restores at least yearly for our clients).

Open up the datto dashboard entries for your devices and the post boot validation should be visible if it’s enabled.