There's a number 329 what a beautiful day it is It's actually nice out so I decided to do vlog earlier because I'm gonna leave the basement but it's actually about I'm late as I left the Basement studio that I record into go outside and then realized. Oh, that's right. I gotta go back inside and do a thing I could I've done it from outside before but Wasn't ready for that quite today. I didn't say everything set up but We're gonna talk about a couple things today zero trust Defining it and I realize a lot of people define it Based on the words and I don't like the term zero trust at all I understand the goal as defined by NIST and we'll talk about that But I don't it from a marketing term It's uh, it bothers me and there's so many people that I mean logically I'm not blaming people for this. It's the naming problem logically It seems like it means you should trust no one because zero trust, but it's defined a little differently. So Anyways, I'll ramble I'll ramble on about that in a moment Where I'm gonna be and when I like to bring that up here at the beginning for those wondering where you can run into me or something and uh Where is that gonna be? We'll throw that first one up here because it's only 16 days away for MSP geek con. So I'm pretty excited about that. I'm geeked about it the uh Let me speak geek on is uh, I'm gonna be speaking at it. That's not official I wasn't official before it's I guess official now. I think I believe that's been announced If not, it's been announced So that I'm excited about So 16 days, I'll be there and then I'm gonna be speaking at uh with my friend Jason Slagle over at it nation secure 2023 So me and him are me him and cyber mantley. We're all doing a talk Jason had helped put together for all this So that's that's exciting for sure And uh, but those two those two things I'm I got going on there Um, let's jump into some feedback real quick. So I think there was some feedback I like the feedback I get from people. Um To do to do all right, this one made no sense Uh, so I can't understand what they're asking Ah, this one and I see the person asked is is uh in here And I don't know. I've not really um looked at what the best recommendation is for 4g 5g I don't really You know, it's kind of a hodgepodge a lot of our clients locally here in detroit or even outside of detroit Many of them have two different internet providers. So when it comes to like backup internet, we're not always installing cellular It's not it's not that many of them I we have clients that have I believe a handful of peplink ones. Those are really popular Um, I don't have any particular preference I know one of our clients or maybe more at least one maybe more have starlink as a backup internet connection um I I had a company that had site to site like from a wisp The wisp broadcasts over to them because they were right within their range um, but You know, then their primary provider was just comcast and so I don't have any Uh particular love or preference for any one brand or whatnot But so and I don't know that there's a lot of value in reviewing them There it's kind of a niche thing and I don't know that that would get a bunch of Uh reviews and they're also very subjective to the area they're in um Depending on where you are the I was actually aggravated because my phone was so slow when I traveled somewhere My phone was just out of crawl every time I did every time every time I tried to download anything The phone was just out of crawl and I don't know, um, it works fine here in detroit And I was just trying to download some podcasts and I'm like it says they have 5g. I'm in a city I've got all the bars So it of course it may have been just that time when I'm stopped and traveling through there that there was a problem So it's it's really hard to try to review those to see what the consistent speed is over time Unless you used them But then if I used them and I bought four of them and set them up here Now you know what it works in this area where I'm at not how it will work in the area. You're at over time. So yeah Fun stuff, I think that do I have any more? um What else was there? Oh I'll see Someone want to know is The neck 8 800 and the crypto support in there So That's listed on their page what it supports. I guess I don't understand Um But if you look at the decade 80 200 they have all their crypto that they support listed on here I believe it's in all the specs Oh, where's the crypto support? That's why I didn't understand the question you were asking what it supported So hopefully this answers that person's question like Do do do do do because it's yeah, this has qat crypto in it the Specifically the chip that it has because it's got an intel atom with qat So a s and a qat especially if watch I don't understand if watch dog Is supported I don't know what that means that's the question they asked maybe that person's here and can answer what um What watch dog is Yeah, why not just log in to our pf center real quick and I'll look because we have an 8 200 of mine that I Can log into whenever I want What does it say? Because it says go to system advanced System advanced We'll go to Miscellaneous tab and we'll share this tab with everybody So this part I can share we'll scroll down And you can see what's in here. So I don't know it's there's aes qat bsd crypto dev and uh I don't know what watch dog is because it says do they have watch dog So watch dog is not in here. So I guess that would answer the question is watch dogs not supported. So Uh, have you tried running a cpg and a coat on for teleboxes? I'd like to use one box for pf sunset guard. Maybe headscale. Um, I'm probably going to do that soon We actually have some more boxes that we ordered and Should be in soon and I will do some testing with that but as far as I know they work fine on protect leboxes There's they have on the protect le sight protect lee I I don't know what google's trying to do but anyways Uh in their solutions under hypervisor They have like a partnership with xcp and g they so You know as far as I know it works perfectly fine on xcp and g I don't know of any issues with it Give me a thing about services differences, but regional i'm worried about the devices are stable perform well without overheating and the like I I mean peplink is a pretty popular brand. I don't know of any overheating problems with it I've seen some people just get the the little Verizon boxes. Um, I'm not aware of any functional I mean any of the brand name ones. I can't imagine they fail that much when you go to the least popular Cheapest you can find on amazon brands. Well, that might be a whole another thing. So Oh, you know, I see the email you sent Like reading the whole email out There's you wrote a lot And most of the mom and pop shops are never where we use these uh most of mom pop shops if they're You know somewhere in a city. They have dual internet connections from two different providers And I I always anytime there's a option to get provider uh internet Like from a you know Comcast or wide open west charter, etc. One of the coaxial ones or having a d we have a lot of clients have dsl backup I know the dsl is slow, but it's better than a sell backup in my opinion. So nonetheless um, hopefully answers the questionnaire Well service watchdog is different. That's that's the thing about this is service watchdog is service watchdog It's a service that watch dogs Let me find it real quick here and I'll pull it up If you didn't know And we only have one thing in there. I don't think I've done a video on this as a topic Service watchdog is an option in pf sense where you can have it monitor a service That you have running And tell that service to start in case it fails and then notify you on that failure So I that's service watchdog. So I don't understand what the encryption watchdog is on there that part doesn't make any sense Like asking if it's in there How reliable is neck your neck eight transfer speeds back say I have to calculate 50 of those and can reach those speeds on the website for real Uh neck eight has a very detailed testing process for how they determine the speeds They give you two performance numbers They give you they give you the iMix traffic and the iPerf version of it. So it's quite accurate Yeah, so I don't see any accuracy problems with the way neck eight does their speed test They they've got a documented process they're using Um, what's that software they're using I already forgot the name of it Um, it's the one from sisco that that does iMix traffic testing, but they've got a documented in a blog post I'll see all right So that I you could probably google it Yeah, chris's email was about, um cellular backups Oh, yeah, the second email is just asking about the qat crypto which one was available That's what their their question says doesn't have it and doesn't have watchdog as an option I don't know what watchdog as an option is under crypto But the cellular backup is is the Is what the topic or context was from chris's question For true nascale, how important is the graphics card for plex servers? The beneficial to have the fastest graphics card you can afford for the benefit of having dual graphics cards I don't know because I just don't do any transcoding. Um, I'm current. I used to use plex. I moved to mb I never use the, um Transcoding feature now one of my staff, uh, maybe they'll answer this question because they do I just don't do it I don't I don't change anything. I just download the movie from a legit source You know rip it from some proper dvd. I have and I play it. I don't Don't have a graphics card installed Or done it. I there's benefits to doing it, but that's outside of what I'm Using it for so I spent no time on it Oh, let's see Uh, zorus is not available in europe. Have you tried anything else? You can recommend dns filter Uh, dns filter works a lot different than zeros. Um I'm I we did try dns filter and it weren't wasn't particularly happy with it So I I don't know what I could recommend in the european market Uh, I I don't have an easy answer for that I installed ntop png and started uh and started shipping the data to Victorian medics and it doubled the amount of series and db Victorian metrics. I don't know. I'm not familiar with that Hmm Uh, we hadn't yeah, travis is just doubling down on we had not had good experiences with dns filter I have a few I don't want to dump on the people. I think they're nice people over there But I didn't I wasn't really big on their product I and I don't want to speak ill because when we tested it was um pushing a year ago And maybe they fixed some of the issues we had so evaluate it yourself I don't want to cast an opinion. Um, that would be unfounded on them I don't there's nothing there was just features that didn't have at the time Um, like an easy way to disable the agent, but that may have all been fixed. Um, so I don't know How soon will 10g support be on pf sense? I've already Set your monkey link. It's time to move further pf sense has 10 gig support So it's been my my 8200 has 10 gig support. So 10 gig support is definitely on Uh pf sense and has been for quite a while You know, I there's probably a few other companies out there doing stuff similar to Zoros, but I'm really It becomes a challenge because my understanding from talking into Zoros and other people is Their the laws in europe make this hard Um, so the companies like if the if the laws say hey, you can't do this or can't do that when it turns to that Um, if they have trouble complying because maybe they don't understand it I would look towards european companies that maybe have a better grasp on it But I don't I don't really know that many because the other you the other u.s. Companies may have some of the same challenges until they've kind of navigated it It's the same reason. Um, we do consulting in europe, but we don't do right now Any managed services in europe because I would have to make sure before we took any of those and I don't have There's not been a client offer big enough yet We would have to research to make sure we can comply with all the laws of that particular country And that is a different intricacy the consulting is one thing But when you want to provide service and support the laws may be different I have to make sure we are well covered on that so we're not violating any laws, especially unknowingly um with things How many simultaneous transcoded streams you need? I think that's probably the question I you would ask of if you need Any simultaneously transcoded streams whether or not you need a video card in plex or mb uh victoria metrics is like prometheus but can receive data and influx db And uh, graphite formats as well. Okay Oh, yeah, we do have 25 g in the office We'll uh We'll be support for unifyos or wire guard site to site tom is only support wire guard site to client. Yes, um Let's talk about that in a moment Because that is definitely um a challenge That we'll be talking about uh, let's pull up because I had to pull up here before I forget I just want to get this out of the way in the order I had them in for those wondering because this this is actually a pretty short answer um And it's the problem was zero trust and people having a hard time understanding it but the Zero trust does not mean trust no one and this was a debate that started with uh a tweet from network chuck who said He didn't think bpns were particularly secure and I said hold on You know I it sounds like some bs here and then he defined it better But then people were saying and the company he recommended which was twingate Is not a zero trust company because you have to trust them and I was talking about tail scale and people said Well, that's not a zero trust solution because you have to trust tail scale and I'm like Which is version of zero trust? I mean, I can say I zero trust you and that might be a definition We use but let's talk about the nist definition Of zero trust just briefly here because this is where I do like when there's publications So we can have a common language or framework by which we can say things And I just want to make people very clear on this and I thought about I don't know if it's worth doing a video But the question comes up a whole lot Because companies love zero trust as a buzzword And it makes sense from the way nist defines it But the buzzwording doesn't help people understand it and it's about where you authenticate it And also this does not mean open vpn is not part of your zero trust solution It just means letting someone inside your network becomes the No longer becomes the point of authentication and that's the biggest part about zero trust I wanted to bring this up because this is something that's just a lot of people don't take the time to Read it's a short paragraph It's about how you do this But maybe I'll do a video on this as its own topic if people are interested where I break down like what it looks like to Validate because it's kind of a trust but verify is more about zero trust So zero trust you look at the old world way of doing it You're like, oh I get inside the network and you trust me because I'm on the inside perimeter of your network I'm no longer outside Well, zero trust is more about hey, you're inside the network. That's fine But that's not the validation point the validation point is each service you access We validate who you are that's more about zero trust You're going to validate the End point to make sure ownership of the endpoint is the person you went on there And you're going to make sure the person has some type of validation to the services They want to access not giving them or granting them validation just by the mere fact of being inside the perimeter of your network so yeah, that might be a That might be a A good topic because then I can actually diagram it out like this is the user This is how we validate this user. This is you know, a zero trust situation versus the validation Just based on them being inside the network. This is actually one of the reasons like When I'm talking about a lot of these things where people like, oh, no, what are you gonna do if they get inside my network? Well, well each one of my services still has username password authentication tied to the services I don't validate based on the Location of them inside or outside the network, but for you know, reducing risk surface um Means, you know, I reduce my risk surface by requiring vpn and I'll I'll use bit warden as an easy example We host bit warden internally behind a vpn Being inside my network doesn't get you access to our bit warden. It just gets you to the login page We still validate who the person is that they're able to log in there. So there's still validation mechanisms On there and that's that's just one of those little details I think it's really important to make sure people are very clear on and understand with zero trust It's not it's not that you trust no one and when you talk about tools like tail scale Or any overlay network how they work is they You know, keep you an always on vpn But that doesn't stop your validation just because they're connected to your overlay network And those services that you have tied to that overlay network. That's not your validation point. That's just a You know getting you to the point where you start doing the validation Uh, yes, I do use ube keys with bit warden Video day and life in tom. I don't know you just watch me reading a lot. It's not exciting Reading a few meetings more reading look at a project consult with a client So there's plenty to talk about um on that I heard it referred to as deep trust this is your trust. Yes, that's probably a better I've heard that too, but if I said we're building a deep trust system People will be confused if I said we're building a zero trust system because there's a publication By nist that defines it. I agree. I don't like the whole You know, if it was deep trust architecture that would to me that would make more sense Maybe we can just petition to get it renamed but and then all the marketing people be mad. So Uh, do you remote control your client servers and connect wise control ninja or only via vpn rdp depends on the client manage clients are going to be um Connect wise controls unmanaged clients that we may have some limited visibility into might be rdp But generally speaking managed clients are uh connect wise control. They have ninja on them as well Oh, let's pull up the unify stuff Because this is the next thing I want to work on The chart doesn't make any sense yet because it's all just a bunch of yeses because I need to figure out What's going to go in here, but I am working on an updated version of all this So, can we zoom to 125 there we go We'll shrink this a little and I think yeah, everything should be on the page now So they finally fixed it and what I'm going to do when I have this spreadsheet done here These are all clickable by the way So you can this is each one of the help pages related to the vpn So as you go down to each one of these It's going to be so you can get to the help page for any one of these to explain it in their own words How it works because there's always going to be a lot of confusion because of the way they do things at unify and They also this is where I'm Got to validate this part bpn policy routing This is where their next challenge is going to be now. They've done a great job of finally Getting with the os version 3. This is a 3.2 point. Oh, I think it is or 3.0 point 0 2 0 The latest version of 3 version of their unify os the latest one that's available as of today, which is may 4th of 2023 Does have all the support now? So Well, no teleport is not their site to site teleport is their phone system So this is once again back to where we things can get confusing. So we click on the teleport and teleport is a zero configuration vpn How does it work Mobile app ios and android Why they call it that I don't know So this is also part of why I'm going to just make a chart to explain all of this so I can do a review But just explain what all their wording means because this right here Is a wording that makes it harder for people to understand what it is Now they do have in their beta a upcoming feature called magic vpn and magic vpn is going to be able to do site to sites with some sanity I'm looking forward to it because this was a cool feature if you were using The unified controller software and the earlier usg models You could just build site to site just tell them all to talk to each other and would build it for you I thought that was a beautiful thing and then that broke when everything went to these dream series ones So when you went to the dream series systems, you couldn't do all the easy site to site So you had to do it all manually, but even now what doing it manually The challenge is the policy routing is very specific and even though they finally got wire guard on here Which hey great wire guard, but no wire guard for site to site And I got to make sure I'm clear on how all the rules work for all of this as well So it's just going to be It's going to be a lot of details that I got to put together because it's it's not about if something works It's how it works and does it work well? And that's where the challenge is going to be and I'm going to add some of the other fields from this Because there's certain things that it just doesn't do so I will make sure that the Integration support for some of these, you know, like whether or not it has any of the let's encrypt certs or whether or not Like how it works some of those things are going to be Little more tedious, but I'll have to talk about them PF sense the interface itself Does not have Two FA built into it. No, but you well technically no, but you also can Because you can use something other than the pf sense Built-in auth to authorize yourself So you could use radius as the back end and then or something else And then you would then have to validate against that so it could have it But by default. No Twin gate I there's nothing about it that made me go. Wow. This is amazing. I looked at it I thought their documentation wasn't that great I also don't like the fact that they called themselves like a bpn replacement And they don't have good documentation on what transport less I looked unless I'm overlooking it They didn't have good Information on the transport layer and that bothers me when companies don't just lay it out there For example tail scale who has amazing documentation and an open source client because twin gate is fully closed source the lack of Transparency like I said, it just kind of makes me look at a company go Why aren't you being more transparent about like how you do transport security because that matters The people at tail scale are using wire guard on the back end So they didn't try to reinvent their own security or do anything different You're like, yeah, we're just using wire guard and we orchestrate wire guard connections pretty simple And I think that's great Can pf says to sso logins for microsoft? Um on the interface I don't know if you can do that. I don't I know I wouldn't want to do it Um, you might you can do it for like the vpn, but for the web interface. That seems like a dumb idea Um, that's my opinion at least I don't I've said people ask that I We actually had someone I take that back You can definitely at least because we have one client do this until they broke it Um and locked themselves out of their pf senses. They They have a go I think it was google ldap We tied the google off to their login for their pf sense because they thought it was a good idea Right up until they broke it and could get into their pf senses So yeah I don't know why I I don't have a good reason for that firewalls Like I I'm fine with like central management with certain restrictions on it, which can be good the people at Neckate are working on that for pf sense, but tying all the pf senses to An active directory authentication matter of fact, it's funny that um, I was on a talk a while ago about security And people were telling me I was dead wrong when I was talking about how bad of an idea of tying your nas to your Active directory was for managing the nas not for user authentication for file sharing But for managing the nas I said it should not be tied to your active directory And this is a few years back But people were razzling me and other security people stood up and said why are you razzling tom about that? Like this is you know, this is not a good idea and what happens is You someone gets their ad popped and then next you know, they take over the interface to all their different uh nas systems I'm like, yeah, that's why it's a bad idea. Keep your backups and everything else. So Yeah, keep it all separate only Minimal amounts of you know federate authentication where it's needed. You don't have to log into pf sense that often so Well at least you shouldn't I don't know Oh, let's see I missed any other questions on there Well, hopefully this answers some of the questions so about the the unify firewall stuff I have we just reset our our Unified dream machine pro. I want to do a factor reset and we're going to do some testing To make sure i'm clear on all the new features and how they work So I can do an updated review on it, but You know, I don't know that this will change my mind and start having me recommend these to people. Um I hate them less now. I think they've become a lot better. I just don't know why My worry is how long before they come up with a new idea that changes things or are they Decided that normal vpn is okay. That's the part that uh bother me. It's like the It's one of those weird things says they had for a while there You didn't have to adopt it to the cloud Then they had a few versions where you had to adopt it to the cloud and then he made it like it's a feature announcement Oh, you don't have to adopt it to the cloud. I'm like, why did we ever like you took that feature away? It was it was the ability you took the ability to weigh to have it locally managed And then you act like it's a big deal to put it back. So I don't like when companies kind of do that Is definitely It makes me suspicious of them. Uh, so it's trust is earned over time and a company that's been taking our ability to Locally manage things away and give it back to us That seems that seems sus to me, you know You mentioned content figures complex and pf cents. What are other options for pf sense owners? um pf blocker is the best way to do it but content filtering I got an entire video called content filtering It's all about why content filtering is complex And it's you know, it's all you pesky people want in privacy and in encrypted sites, you know It's just created such a headache for people who want to See all the traffic so we can filter it or spy on you, you know The that is that that is really the challenge that comes in is As the internet has moved towards a more encrypted back end if you will a transport layer You know, let's encrypt leading the charge here to get more and more sites encrypted This blinds your firewall to that so the challenge now is how do we filter stuff if we can't see it? And that's where everything gets complicated and just a number of websites What is the criteria by which you filter on? Categorizing the internet was easy in the days of Yahoo being the first search engine The internet's much different today and sites don't have a good compliance themselves to flag what they are Major sites are easy But it's all the littler sites that become very challenging to constantly index and keep that up that being said You now have a subscription you have to buy to buy the feeds This is also what makes it complicated as well is paying for those feeds to be updated all the time Another issue with sso and admin is you would not want to use elevator account for stuff like that Not your regular logon I mean you yeah, you want to make sure you're using Very specific accounts that even have access to it But like I said, I don't really see the benefit of having your login to pf sense tied to azure or You know google or any of those Uh, is there a way to set up wp to an enterprise pf sense with azure ad instead of local free radius? Uh I don't know what that pfs. I mean instead of the pf sense radius It's yes, you can there's ways to do it and you're probably not talking about pf sense You're on the unify wireless is my guess Or whatever wireless you're using as long as your wireless Devices your access points support it. Yes, you should be able to have them do the authentication It is a pain when you lose internet and the udm pro stops working because it doesn't have internet. Yeah Twinkie it was so easy. I could have done it blindfolded I think tail scale is easy. So I mean I ease of use Does it the questions I have I mean they've gone through security audit. So I don't know anything insecure about it It is and this was the discussion that came up It's It is not it is solution because it is a proprietary solution from a third party company You're just putting your trust in a third party company to manage your connections to be fair the whole point of a dream brand routers integrated Is the integrated cloud key and cloud management? well No, the dream of unify is having you be able to self host and manage it There was no good reason I can think of that you forced people to register with the unify cloud That that's the part that didn't make any sense uh unify You know being one of the things that makes them stand out more than anything else is the self hosted controller and That is something that other companies just don't do They avoid it. They want you to tie and lock into their cloud so they can charge what they want for things That is the big unique thing when it comes to unify is that you know, they let you self host it It's it's part of their brand and I think that's great. So Here's your self-hosting controller. You want you to host but by the way You got to tie to our cloud thing that just kind of goes against what I feel how they work. So, yeah um Is the dream wall viable nbr You know, none of the dream ones have much in there. So I don't really see I don't know how much Extra storage you can add. I've not really dug into the uh dream machine nbr So I don't or dream wall version of it I don't know how much storage you can add at least with the the other ones you can put a drive in there. So Yeah, see Categorizing it was also easy where most sites uh weren't behind a cdn You know, and that's that's a different challenge if you were to just go by the ip addresses It wouldn't work anymore that worked in the past but with content delivery networks And many of them being the same you the content delivery network looks at your sni header and goes Hey, you just requested this therefore. Let's deliver you the site you asked for but it may all be coming from a singular IP address. Yes Uh, nope. I haven't had a time to test smb3. I haven't I haven't done um Any real testing with the 7.2 synology? Do I have a video about radius? Uh, I have a pf sense video about radius management management solutions on the cloud is awesome. It's awesome till it's not The price always seems to go one way up despite computers costing less and compute time costing less your cloud will cost more tomorrow Where is cody as a dream wall?  I'll be honest like I don't get the um I don't really get the form factor.  Last I look at what's sold out Which I don't think it's actually Because of demand. I don't know but whatever they oh dream wall and stock so Get one if you want a dream wall. They were sold out the other day when I was looking at them There's just a dumb form factor They also don't make the most sense for pricing because so here's a dream wall which it's basically You know if I if I were to buy a dream machine se and a switch I think I'd have a better experience like I am I am I Yeah, this is So this does kind of an integrated 128 ssd in it. So we do have that but we don't have an extra bay to add a larger drive so What am I getting? I guess it does have a wi-fi 6 in there But for a thousand I feel like the experience would be better by buying this And a switch and a wi-fi access point. I mean am I I don't know am I wrong? I am just confused by that Uh Because well this has the poe so really I just need this plus a access point and now I've got a few less ports For 4.99. I don't know the price point isn't making me go. Wow. So Maybe I'm wrong on this. I don't know Is it okay to run docker vms on your nas or should I use an assert for that for homelab use? I mean That's the whole idea of Trinascals to be able to run Your applications right where your nas is I think there's a lot of efficiency to be grabbed out of that You may not see this in the enterprise space, but from the homelab and home users I think there's a great level of efficiency you can have by doing that. So I don't see it as a problem Yes, Cody's got one You can't add a hard drive in that can you Cody Not that I know of at least Dream walls removed from the ui store. Uh I have a vp and a pf sense my internet connection So my internet connection is always vp to use vp has dns too But I still see my own traffic status dns. She's over in top g. How do I encrypt my own traffic? Well, what do you mean? Encrypt your own traffic It depends you're talking about inside your own network You want to have an encrypted between you and your pf sense? Your dns. I I guess I have to understand the context of the question better I've had a few instances where anything I manage in the cloud is that issues no more than anything Host your own data centers. Yeah Dream walls silent Uh, that's not my big concern Just an sd card.  Uh I mean, they're getting better with the way they're engineering in its scale But obviously there's some challenges building What it's an ambitious project is what they are definitely doing Um with true nas scale, but with ambitious projects comes lots of bugs That's that's the status of that project I don't I like it. I'm using it. Uh my daily driver is a True nas scale system so It works. I'm even running some apps on here They're all up to oh look pressure rss has an update home assistant has an update Sync thing has an update net data. Everything needs an update. Let's go ahead and see if it breaks something. Let's upgrade it Doing it live Upgrade I've actually had the upgrades go quite well. It's not been much of a headache for me. So um How do you how do you documentation for your customers and share between? Your engineers In the past it was in a wiki in the future going forward. It'll be hudu hudu Any improvement with the encryption issue? No, this is A bug that was not fixed in the latest version So if you do file transfers, um, and you are using an intel atom chip, you're gonna have a slow time That's just what that's what I have figured I No one's ever answered my forum post with any more articulate of an answer So, uh, I I might reach out because I have I have some other people I might just message Directly I was hoping to get it put in the forums. I don't like messaging people directly ever I actually know who probably knows the answer and I'll just message them and then relay the answer back to everyone if I have a Concise issue. So So your isp you want encrypt? Um, then you should move the vpn from instead of on pfSense to your computer So you should vpn the traffic from your computer out, you know I'll throw out there because I've used them for a long time PA.  That's another way to do it so I would love to see a nas fender with proper automatic ha storage But if you buy more than one also Automatic kates back end by the ha storage reach node cluster runs a load I think that's what you're trying to go through with scale. I don't it's gonna be a long time for they get there. So Uh, what do you use for inventory management? Um, snipe works if you haven't heard of snipe it. It's an open source product. It's actually pretty slick Well, I'll throw them a shout out here so They they make uh, you can it's open source Hostable they have a demo They have a blog you can see all the new features and stuff like that. They have a cool website um So that's yeah check out um snipe it it Self-host of bit warden requiring 443 Uh to be open s to sell certain on my nas More or less secure to use a bit warden a cloud account for my personal family use Uh for personal family use, um I You know, I wouldn't um Self-hosting seems like overkill. So I there's bit warden is solid and secure Even if you know me and my wife use bit warden My personal bit warden. I just use in bit warden. I the business one we happen to self-host it because I can um, but my wife's uh, and me We in her shared password is just using normal bit warden for ours Like I didn't feel like spinning up a separate instance for it Uh, what do you recommend inventory? Here we go next one down True nas scale like true nas rancher proxmox and one appliance is going to take a while to mature. Yep. It's complicated Uh, how do you encrypt everything in your land? Um, I encrypt everything I care about encrypting I'm not worried about encrypted dns in my land. I just don't care enough It's it's just something that doesn't bother me. So I I don't bother encrypting my dns request I just use normal dns. So someone could if they were on my land sniff my dns request Seems unlikely scenario. Um, but yeah Uh PIE with wire guard through pf sense. Nope. I probably works. I've never tested it. Um, I'm using open vpn It's one of those ain't broke. Don't fix it. So I haven't had a reason to use wire guard Uh, we moved from wiki Uh, and eventually we'll be on who do that's going to take some time I just seen a 45 guys were cheating about making a homelab nas. Maybe you want to work with uh on that Other people liking snipe it. Yes Is there any standard rule To follow in selecting ui d and g i d insurance? Uh, I make sure it's the user you want. I don't I don't understand the question perhaps Best privacy phone with google 6a7 pro graphing os booted even disable camera. Yeah Nope, I'm not doing a guide on that Just it's so unnecessary. I don't know why I would do it Like I don't have a use case for it would be a good way I should go back. I used to say that a lot. I'm definitely going to say it again Don't have a use case for that You know, it's all those things like uh, there's There's not if there's there's a diminishing return on it And if it's gonna if I'm gonna take the time to do a video on something, uh, like I'm going to do a video on graylog Um, I got graylog all set up and finished. So I'll spend time doing next It'll provide value if I have unlimited free time. Sure. I could do all kinds of esoteric Things just for funsies, but the problem really comes down to I try to figure out which videos I can find the time to produce that are going to produce the most value for people like You know, the graylog one's taking a little bit longer than expected, but it's about done Um, one of the things I wanted to do and I I haven't updated this yet Let me log into graylog because I can actually I could just show you what I've done Um I wanted to update the extractors. So I've been writing new extractors and making sure they're all good So I can Go here Share this tab instead. Um I want to make sure because I know the popular one's going to be here But these will all be published on github so you'll be able to see and edit all the extractors I just made one for open vpn. So it parses the users In open vpn to make sure we grab the proper, uh, things we need here. So Yeah, it's this is going to be to Helpful to create nice parsed data into fields. So then when you create alerts, which by the way I now customize the alerts. So they'll let me know in a slack message when each user logs in Um, it's just little things like that. I know people have asked before about a graylog and Because You know, it was harder to well, not really harder To well, not really hard to do. I just didn't take the time to really make the video about it So this video has a lot of those details. So let me actually show you this Um Throw this tab back up there now. Um, I'm even going to put together like It says open vpn user logged in via and it gives the ip so I know when people log in It throws a message in our slack channel for this So hopefully that makes some sense Oh, let's see I have a hard time making content for something. I'm not interested and don't have the use for yeah I completely agree. If you haven't followed dbtech on youtube, he's definitely got some uh great videos and Uh, me and him chatted quite a few times This is the challenge like there's only so many hours in a day to be able to do these things and That's the problem. There's only this many hours to get things done I try to figure out what's going to create the most value See bitward if it goes down. Yeah, if bitwardens, uh, if I stop bitwarden, you still have access to all the cache passwords Bitwarden is encrypted all the way. Yep Uh gray log can use webhooks. So yes, whatever you want to use webhooks for Uh, I don't know why I would want to have Integrating pf sensor gay log and influx. I've never done it. I don't have a reason to do it So no, I don't have any tips on it. I know there's some guides out there. Um, but I don't use it So Since I don't use it. I don't have a reason to Uh Do a video on it I don't know why people use it I know people ask about it. I I don't know the big draw for it people really like pretty graphs I do know that that's you know, I I guess if you I have to report to some Less skilled manager who loves loves pretty graphs Then you probably need to spend a lot of time making pretty graphs. Good news is I don't report to someone who requires pretty graphs Uh, so what do you use gray log for? It's a syslog. Yeah Um gray log is the consolidation of all the logs from all over going Um Into one place so I can correlate any access data that I have going across all my servers 32 nodes zima board these zima boards are pretty cool if you haven't seen them Um, I think a few people have gotten them. Uh craft computing did a video about it So we're on the same page of what we're talking about. That is these here hackable single board computer. These cools. It's got the um The slot on it. So definitely makes it pretty neat uh, you don't We don't manage gray logs for customers. They're used in co-managed environments But we do not manage them for customers Uh shipping everyone's logs over to one central log server would be a bandwidth headache So it's not something for production like that Do you sync ntp for this? Uh No, just use ntp and pf sense. It's fine I'm not I'm not looking for scientific accuracy like the ntp server and pf sense works perfectly fine I've seen people. I mean if you have some Very time sensitive applications, then yes, you may want to get You know, they sell devices hardware ntp that pulls off of um any pulls off gps to pull time I I haven't run into a need for that Uh key pass xc can import and import the whole thing if you need to count email pay You know store and yeah full privacy, you know, it's interesting. There was actually a um, uh new Yeah, this is recent Oh, apparently there's more than one Uh The older one, let's see There was a recent key pass attack And I seen him bleeping computer. I just google it and there's a few other ones that come up But there's basically some targeting of key pass and some some of the newer malware variants They would look to see if you have key pass to copy it. So Thought that was interesting. It shows the popularity of key pass And targeting it by the way does not mean gaining access the database the key pass uses is encrypted So it's not a it's nothing wrong with it But the fact that they take the time to target it shows that it's getting popular Can you view multiple gray log databases from ui like multiple low key db's from one graphon? Uh You can put every you can build multiple. I guess this is I could show how this works if you go to the system indexes you can uh You create all the different indexes. So I break them all out into separate ones, but you when you're querying it You can pull them all together into one So like all my true nas ones go here all my things for screen connect here at a proxy the wiki The unify system the office pf sense each thing I have its own input to and then And I'll be explaining this in a video of how you set these up because I'll walk you through the process of this This is what takes a lot of time to set up in terms of making sure people grasp and understand it I have a flow chart to walk you through how data gets ingested How the extractors work to break the data out into different tables and how you land it in each one of these here But you could just create as many as you want use create an index set Go through and create it and then you create an input and then you can create a input that goes to a stream And the stream streams the data In there in between there's an extractor that you may or may not want to use to extract the data into some type of format So that's the whole process for gray log the gray log doesn't have as good a documentation as they could there's such an amazing product with Okay documentation their forums are really good That's actually where I pull all the information to learn how it all works is the forums the forums are better than a documentation So my video will be a walkthrough of that process of how to get it done my old video explains this as well I'm just modifying the video because there's there's not a dramatic difference But there's some differences between gray log four and five So my four video is still relevant matter of fact You can go back even a few versions of gray log. It's it's kept a very similar interface for a very long time Let's see Well, yeah, I see people talking about You can go down the stratum rat hole. You need to have very accurate timing for things. Yes for sure Hi tom, thanks for your content. Is it possible to use web hosting solutions behind cgnat? I can get cloud flare tunnels to open ports. I need Is it possible to use web hosting solutions from behind cgnat cloud flare tunnels is the answer More than anything else. Um, they're probably the easiest one to get set up If you want to host some service to make it public, but you're stuck behind cgnat That's why cloud flare tunnels are so popular. It works really well for that. I think it's a solid use case And i'm not clear on this because I just haven't tested If I think tail scale is coming out with something uh similar Tail scale This is the new So I haven't I have not tested this here, but tail scale funnel if i'm not mistaken is a way to Make something work in a similar way, which I thought was kind of cool So you're able to It says in alpha, but this is an old blog post. I believe it's in beta now So you have more I like it that there's more than one option for this I think we'll see more companies doing it. There's there's not a good Nothing is easy. It's not that these don't exist. There's not as easy of a way to do this with Out cloud flare tunnels like there's could you do this with self-hosted ways? Yes You spin up a server in linode or somewhere like that that's public and create a connection So you forward your connections from behind your cgnat to your cloud connection But cloud flare tunnels is an easier quicker way to get this done Oh, the joy of finding your exact open source question on a forum and the spear scene to post is six years old and no one ever replied Yeah, that's a challenge. Um, that's why I'm that's why this gray log video took longer as I created the documentation And I'm gonna I'm gonna have written documents documents along with my video tutorials so people can follow along either way Uh, you cannot open ports for your mail server. WHN dashboard for example um I'm not an expert on the limitations of cloud flare tunnels, so I don't know If you could host mail on or not my guess is no, I don't think that's possible. Um What is oh you want the whm dashboard out there? Yeah, I don't I don't see why you can't get the whm dashboard out there. Um, but the The mail server I don't think so And I wouldn't offer it as a hosting service by the way I mean, this is just a side project you want to open up some ports to the internet type of project Let's see. All right. All the questions are answered. Just move on to the next thing. I wanted to talk about Close all these too many tabs open. Oh, let's see This Is the next thing I'm working on how to do the video on this. Um Oh, yeah, everyone hates this one. Oh, yeah, I got it working, but I'm not telling you how Yes, that is that is the pain on the internet. Um For sure. I don't know why you'd want to do this. I've had people ask I think it can be done, but I have no interest in doing it So I have no experience doing it and no interest in doing it, but I think maybe you can do it I don't know Possibly I'm not positive of he proxy will break open vpn It's an I don't I wouldn't think it's a good idea Uh, but Synology is a great idea And I think there's we this is actually not the biggest project But this is this the most recent one that's on our table at the moment Um But we do a lot of these Synology products and I I realized when I posted this picture Um, a couple people commented on my twitter, but I've heard this before and I just got an email from a business That wants some help as well They were they aren't realizing how large you can scale Synology and how many business Businesses we sell Synologies to uh, so I'm going to do a video about it. Yeah, here's the bigger one um So here's an even larger camera project with uh, Synology Synology absolutely scales very well to good size camera systems And uh, it's a great combination with these Amcrest cameras combined with Synology So I'm going to do a breakdown of the I've done the breakdown of like the ones we use like for home users But I'll now talk about ones we may use for business And how we set them up and how we Uh do these pre-deployments because the pre-deployments are A big piece of this where we organize everything get it all ready get it all adopted set up label everything So we can set it up for the clients and just let people know that Synology is absolutely a great solution For this because their licensing is extremely reasonable because it's perpetual licensing And of course someone's going to want to know and it'll be a follow-up video of how does it compare to unify? One it's a lot more affordable and it's usually in stock so that's um, definitely a Good thing When it comes to you, you know building a scalable camera system is being able to get it. As a matter of fact to go back to the other picture um One of the other aspects That can be a challenge and let's go back over here as you may notice That this customer had some white cameras some black cameras The the colors of the cameras are dependent on which rooms are going in because some rooms are going to be dark So they wanted dark cameras some of them are going to have I guess white painted walls and they wanted white cameras and they're on the outside areas So there's some interesting aspects To doing it and not to mention with this analogy you can mix and match all the different cameras on there It makes a huge difference and I got an email someone back because they had asked me about this And I thought it was pretty neat. We actually set it up and have it working We talked about this. I think two live streams or maybe it was the last live stream. Let me log into the system and Get it ready here but um We're surveillance station You can in the different cameras You can do a time lapse recordings of the uh Unify cameras and at the same time it's also in the unify So this is in the unify and simultaneously sending data over to my synology at the same time combined with and this was the um Question was could it also do the time lapses and it does so that's actually kind of a neat They call smart laps So we can have smart laps videos going from the unify to get all this with the synology pulling in the data So i'll be talking about that as kind of a neat way to put those together Have you played with the time lapse project? Yes, I have the time lapse is really cool double mvr. Absolutely Uh, what's with the hard icon positioned exactly on top of the chat comments terrible ui implementation Not my ui implementation. So I don't know But the we'll pull this up real quick if we go to The smart laps that I have Go to the recordings Pull one of these up, but yeah, this is what the smart laps looks like. So this is a time lapse So they they works great Maybe something more interesting maybe my front yard would be more interesting. There we go Yeah, I don't know that's really interesting, but that's what the time lapse looks like Hey, look that I took the truck somewhere Uh fond memories of tom closing up his hot tub. Ah, it's just a lily. I use it in the winter It looks cool when the when everything's rise. I like how you know, we haven't had much try This is still the rainy season here in detroit Then it's night. It was raining all day that day. I don't think any of these are interesting But it works The time lapse smart laps feature and you can use it with unify um You can set you define the frame rate you want for those you can tell it exactly how many frames Whether you want it to span days weeks. I think it'll go into months So you can have something that is like a video compressed down to 30 seconds, but it may represent, you know 90 days worth of it. They they have a lot of fine-grained controls when you're setting it up It's a little confusing when they set it up. Um, but once you goof with it a minute, you can figure it out Just get a calculator ready Because they I don't know why they don't just have it in a more clear Uh way when they display it. So when you're editing the task itself um It's this is what it actually says. So it this is how it asks the questions for you to calculate and figure it out For each one minutes the smart laps recording will real time Approximately 24 hours of frame intervals are 24 seconds apart So it's just spelled out a little bit differently. I wish they had little sliders to make it easier, but well, whatever It's it's once you set it. You just kind of leave it alone. You figure it out. You set up the job You set up the retention policies. It's important to set up retention policies So you keep these for whatever range you're wanting to keep them for and uh This one goes all the way back to two seven. Maybe there's snow in this one. Hey, look snow Snow goes away snow melts snow comes back I thought I had one that was like it covered an entire week Yeah, here's one this one covers a week. There we go. So it goes faster yes Uh sonology has not only motion alerts. Um, this is what's really cool is it does detection Of objects combined with the camera. So I don't just get an alert for motion. I don't want alerts for motion I want alerts for you know person in my driveway or vehicle in my driveway or vehicle in my backyard Or or anything like that. Like it's it's much more specific and um That's why I like this analogy because they have if you're using the camera's ai detection system Then to give you that piece of information. So if we look at my um, we'll do the front one here So if we go to edit this particular camera advanced, um, and then event detection advanced Uh, human and vehicle detection is what it's doing. So it actually alerts me Not based on the cat that walks from although once in a while It thinks the cat's a person. Uh once while it misidentifies a cat So, uh ai is not ready to take over yet, but when it's not misidentifying cats It's really accurate. So I actually know uh, when there's a motion in there and it tells my phone What's the file size on the one week? Um, I don't know It's compressed quite a bit. So not very big Because it's only you know Um, see if it tells me So if we go So the one week one is a uh 1.7 gig file Yeah, so less than two gigs Uh, can it do detection for persons objects who are known unlike like frigate ai based? Um, the Advanced one can if you have one of their dva models it can make a database of people And then do it but this that's specifically with the dva model. Um, that you have to have for synology So that's not a camera function. It's a synology function. So Yes, um frigate's kind of neat because it can do that as well The problem is like frigate's a cool project, but it's nothing I would sell or support commercially yeah, the um Unify protect the same using g4 cameras to see people on cars Uh project has not misidentified my dogs yet. Uh, it's kind of hit and miss I've seen it. I've seen it misidentify things But yeah, it works Yeah, 1.3 terabytes for two weeks Make sure you're using something like h265 I'm still using h264 Because some things don't like viewing h265 So that's that's my solution for that Yeah, frigate is really cool If you got the time to configure it. Yes So people know what we're talking about Uh frigate nvr with real-time object detection for ip cameras Yeah, that's the whole um It's a rabbit hole to go down there. It's fun to play with and all that but it's everything comes down to time This is not unlimited hours in a day. So without unlimited hours. Yeah Uh, do you install any kind of grounding on poe cameras outside of home's buildings? No, no just use standard cable They're fine. They're bolted to the house. I have had no issues doing it that way Um shinobi's another one. So is zone minder. Those are other projects out there None of the open source, uh nvr tools out there. I've seen it all are like commercial ready where I would support them Yes, I have a separate vlan for all the cameras I have a video called securing your nvr and I walk through the process of that because people always get confused of The way you secure an nvr, and I'm like it's you lock down that network and maybe make an exception for your Unless you're lucky enough to have a analogy with two network ports But if you have a analogy with only one network port, no problem just Open up the one port you need for the analogy to be remotely accessed and leave the cameras So they don't the cameras don't need to get online Yeah, I all all the ai cameras. It's not just a dig at uh at all at unify, but all the ai cameras, um They get things wrong sometimes, you know, they're They're doing the best they can but when you're taking you're also not the most expensive devices in trying to Apply object recognition with limited data sets To a flat object, um, you know, it's it's the challenge with ai sometimes. It doesn't always get it right Matter of fact, let's pull up my twitter. Did they respond to me on twitter? It's this I'm wondering if they do see I See home profile So let's share this Huntress had tweeted this and we were we were laughing about it because They're like Hey, look, it's you know, I find your lack of EDR, you know star wars day Blah blah blah, but look at how many fingers fader has like ai gets a lot of when you know Ai generate images are fun, but it does not know how many fingers people have it seems to give them lots of fingers Fingers are hard Oh, man, it's um, it's a challenge for sure I actually was playing around and uh, it turns out If you want a vader hacking a computer You can have that and and it actually seems to do a pretty decent job. I'm actually impressed. I mean, he's got kind of a big helmet here But that's definitely Darth Vader hacking a computer there So definitely a good time Thank you for adding some enjoyment and entertainment. Hey, I like that's what If I my goal is to find that happy middle of entertainment education, you know, edutainment if you will so Um, I do know this because if you put in This is one of the other creations I did that I'm really happy with um We started talking about this discussion if it knows how to make red pandas So ai is like I get red pandas now. I don't think red pandas have that I don't know how many claws they have actually now. I need to now. I need to look this up to to get it the right How many claws red and uh Red pandas have a soft dense wool Have five widely separated toes and semi retractable claws. Okay. So it got it somewhere. It's just one two three four so I guess if one's like that, but Yeah, um, I have no preference on video doorbells. I don't have a video doorbell. Um, So I don't have any preferences on them I've never I'm not big. I don't know the um video doorbell thing's not really Uh, then hi am I list of wants at all? I know people are really excited about them and I get it They make sense if you have people come into your door all the time I don't so maybe it's because people don't come visit me. I I'm just like lea my answer is just leave it on the porch um And I'm fine with that and this is you know, I have a porch camera So I'm finding a porch camera and then I can just look at porch camera and You know see like there was a package on the porch or whatever or was the Somewhere I can just look for the um events that triggered on my porch. I don't look a bee or something Yep, there's someone coming to my porch So that's that's my solution is just knowing when people are coming to my porch All right. Well, I think I want to wind it down here Now that you have a video doorbell everyone knacks Ah fun stuff for sure All right Well, thank you everyone for joining. This was fun. I'm gonna go back to doing I have a few more things to finish so I gotta Uh, if I can tomorrow goals record green log video tomorrow Today finish a few more business things that I gotta do my my time sometimes gets split between business things I have to work on and uh, you know the video thing the business things take You know, I still have a business to run. So some of that takes up some time sometimes There's there's back end things that have to happen So thank you for everyone joining looking forward to more conversations and everything else and uh, see you next time And maybe if I feel real inspired doing a live show over the weekend I always say I'm gonna do it. It's kind of hit and miss if I do it You know enough people comment I do it so All right, thanks everyone


Next question is from magnetic beauty 101. What do you think of push pull and leg routines? Well, this is a perfect transition from that question, right? Because it this is what I I love this type of routine I follow this a lot like this works for me But if I have a challenge with it, it's if I'm having a hard time being really consistent with a gym If you're somebody who religiously hits the gym four times or five times a week, can you never miss a day? Then yeah, there's there's nothing wrong with a routine like this I think it's a great routine if you're getting to every muscle group two to three times a week and you're doing that consistently I think there's a lot of value in training this way As I've gotten older and and other priorities in my life with business and family It it's become harder and harder for me to Train four or five days a week really consistently to run a routine like this And so I'm back to running a more full-body type of routine and it just serves me better I know that I had a rough week just two weeks ago where I only trained once, you know And if I only trained once I wouldn't want to land on just a you know Just a leg day or just a you know chest and back day and then I missed the other body parts like at least I got a full-body routine My body did not miss getting stimulated my entire body didn't get missed stimulated that previous week Just because I was inconsistent with everything else Yeah So for you those you listening who don't aren't familiar with what this type of routine is So it's a type of a split routine where you break the body up Into body parts and you train different body parts on different days. So a push day refers to Typically chest shoulders and triceps a pole day typically refers to back and biceps And then of course leg refers to the legs now if you only work out three days that week You hit each of those body parts once one time if you do a full-body routine and you work out three times that week You've hit all the body parts three times So that increased frequency like Adam's talking about tends to make it superior to get the same kind of frequency Out of a push-pull routine a push-pull leg routine You wouldn't be able to because there's seven days in a week and so at most you hit each area Twice a week you'd have to make up the difference With volume now, I know what the studies say and the studies say if the volume is the same There's not that big of a difference. I disagree I've trained lots and lots of people. I've trained myself and more frequency Say 80% of time just not that it's I mean even nobody ever trains like a study You know for six weeks It just doesn't have real life happens And that's I mean that that to me is the real difference maker in the stuff that we talk about on the show Is that we always take into consideration like behavior and the behaviors that I've seen training tons of people for this long Is that and and myself?  Yeah, life happens and sometimes I only get to the gym once in a week and if I'm gonna do that I much rather not be in the middle of my push-pull split routine I'd much rather be doing a full body so that like I said at least everything is getting touched Otherwise you have these weeks where inconsistency might happen And then what do you do when you start over again? And everybody tends to start over either the beginning of the push-pull routine or they start over on the muscle group that they love training It's just it's it's it's behaviors. Yeah, but here's the here's the point that I want to make though Let's just say you're right. This doesn't happen in real life, but let's just pretend that it's perfect Push-pull legs versus full body. Everything's perfect. So let's compare the two Here's why I still think more frequency is better for most people you get to practice the exercises more often So even though the volume might be controlled for you might hit your legs twice a week So you're squatting twice a week, which is a very complex Exercise and a lot of the gains you get from a squat is the central nervous system adaptation the practicing of the exercise a Full body routine means you can practice squatting at least three times that week So it's that practiced element that everybody forgets That I think is extremely important and if you're super advanced that might be not as important But like I said, this is my hundred percent belief about 80 to 85 percent of everybody listening right now is Going to just get better results across the board on a full body routine Then they would on any kind of a split including a push-pull leg routine and by the way Yes, push-pull leg and those kind they can be effective I mean we have a program that follows a split called map split But for most people the full body just always works out but it's still like in progression after aesthetic Which like this is you know like there's something a little bit more advanced And so I look at it like that I look at it like an advanced technique like you're mentioning the practicing element It's a huge component. You got to really get familiar with all these exercises and a much better approach For doing that is the full body routines


Good afternoon and welcome to the CMC Market's live non-farm payrolls webinar event. My name is David Madden. Today's date is Friday, the 7th of February, 2020, and the time has just gone, 1315 GMT. And before we get into the actual webinar itself, we're going to have to go through the risk warnings. For those of you who attend our webinars and events, or even our seminars, fairly regularly, you know this is all standard practice. What you must do is keep, show the risk warnings as a part of the event. Essentially, it states whatever I cover in today's event is not should not be construed as explicit trading advice or investment advice. It's a very straightforward, just have a read through those. And then what we'll do is we'll be coming on with the webinar properly in a second. I'll take a look at what's been going on in the markets and also what to look out for with the actual report itself. And I say this all the time, and I really do mean it, if this is an interactive event, so please feel free to chip in your thoughts, your views, and your opinions, so on and so forth. So first things first, if you take a look at what's been going on in equity markets, it's been fairly quiet. I'm sorry, it's been fairly, it's been fairly negative in that today's session has been negative, first kind of negative session of this week. This here is the FTSE 100. I'll just talk about how we've seen basically a decent rebound all week, except for today. But then again, if you have, say, four straight days, again, you commit to non-farm payrolls, it wouldn't be a massive surprise to have a bit of a pullback. So we can see here, a very aggressive sell-off this day last week, the market popped higher here, it pulled back a good chunk of the ground that was given up, and now we're right back below the 50 moving average. So depending on how the number is shaped up, we could be looking at a scenario where by the market's look to continue the recent push to the upside and if we go further higher on the FTSE 100, we could be looking at heading up towards 7600, and we would be on that, could take us up towards the January highs. It's only really if you go back below the 20 moving average, this red line here, because they would begin to get a bit worried and think to ourselves, you know what, maybe the wider upward trend, maybe the more recent negative, the trend of the last two weeks is going to come back and play, and we could be looking at retesting the lows of February, sorry, the lows that we saw in January. I'll take a quick run through of something, if you begin to see the few big currency pairs, I'll talk about what we're looking at in terms of expectations of US numbers and not to mention the Canadian number as well. Canada often gets, can often get forgotten about in all this. So taking a look here is the German market, keep in mind, the German market hit an all-time high in late January, and look at what we got yesterday and look at today's highs. So it really sums up how strong sentiment is, if we're not too far away from record highs in Germany. So what we had this week was Chinese markets reopened. With that, we had the PBOC, the People's Bank of China Injecting Equity, Chinese regulators turned around and what they did was put in restrictions and short selling, while they also did was put in restrictions on fund managers offload their positions. And then a few days ago, in the last couple of days, we've had the Chinese government coming out saying they've got to cut tariffs on $75 billion worth of US goods. All this has been designed to remove the fear from the financial markets. We've seen moves higher in Asia. We've seen moves higher here in Europe and in the US. It's, unfortunately, the health crisis is getting worse. But what we're seeing in the markets is that equities, particularly say in this case, German, are not too far away from record highs. So if we press a higher from here, we're going to re-testing the highs of late January in around 13,640. I'll be covering big indices, big currency pairs. So please feel free to stick your opinions and market requests in the box. If you do drift lower on the decks, we could be looking at, in fact, worse, 13,400, or perhaps this blue line here, the fifth and moving average, which is just south of 13,300. What I'll do now is I come on to the S&P 500 and see I think it's shaping up on that front. It was only yesterday that the S&P 500 hit an all-time high, which, you know, I think is the balance. It's a bit surreal, whereby you have this deepening health crisis, yet the S&P 500 is going on hitting another all-time high. So it really tells you a lot about the sentiment. So we're pressing higher. We're currently trading, we're expecting the cash market to open around 3,336. If we press a higher from here, we could be looking at re-testing the highs of yesterday. We could be heading towards 3,360, 70, so on and so forth. Any move to the downside, we could find support in around this area here, 3,300, a lot of consolidation in that zone. And even if you drop below that, look how the 50 moving average, this blue line here, acts as support nicely this day or last week. So that metric that could act as support yet again. I'll take a look at the Nikia 225, and I'll be talking about the currency pairs. So on the Nikia 225, what we're looking at, where is it now? Similar scenario to the DAX and the S&P 500, where by the market, in this week, mostly pulled back the losses that I'd incurred. It was quite a size of a loss that I had, but they were nearly all pulled back. So if you take a look here, you know, we could see here quite decent highs. So if you look at the highs of December, the highs of January and where we were yesterday and even today, where we were just currently trading, in the case, in around 23,800. You know, if you can press on higher front here, we could be looking at heading towards 24,000. 24,100 will be there, thereabouts at January high. And if you go beyond that, we could be looking at heading, approaching 24,200. So really, if you move below that, back towards this blue line here, the 50 moving average potentially could act as support in around 23,622. And a move below that could take us back towards this yellow line here, the 1,000 moving average. It sort of coincides with the kind of 23,000 mark, maybe kind of 23,086. I've had no requests so far in relation to Marcus to look at. So if you are content to listen to me talk, I'll just keep talking. Now take a look at Eurodollar now. Eurodollar in the last few sessions has been a lovely example of a downward trend. We've had a few lower lows and a few lower highs. So the market's been moving aggressively lower or back below the 1,000 mark. You know, depending on how the numbers come in, we could obviously, by and large, if it's a strong report, we could take us back down towards the lows that were achieved in early October in at one spot zero, below 109, one spot 0,879. And you get a move to the upside, could occur resistance in around one spot 10, but we'd really need to be getting back above this, say potentially that possibly this blue line here, the 50 moving average in around kind of 111. Or even the red line here, the 20 moving average, which comes into play in at one spot 1124. Before we kind of begin to think, you know what, maybe, maybe the downward trend has then come to an end if we're looking to get back above these metrics. But while we were in below 110, it's likely we could see further losses on Eurodollar. I take a look at pound versus US dollar. For me, the area to keep an eye on for the starting dollar is one spot 29. Basically, the pound at a great job higher to the upside on the back of the conservative party winning the UK general election. But since then, it's given up a lot of those gains. So you can see here price action has been a bit has been tapering off the last few sessions. We're still above the one spot 29 metric. If we could hold the profit, we could like heading back towards this blue line, a 50 moving average in at one spot 30, 72. Notice how it recently acted as resistance and support recently. So it could be an important metric in the future. A movie on that could take us up towards one spot 32 and a movie on that could have taken us up towards one spot 32, 84. Conversely, a strong job support from the US could take us back below one spot 29. And if you go below that, we could be looking at targeting below early November in around one spot 22, one spot 27, 68. The non-front apparel numbers are coming out. Aussie dollar, I will come on that in a second. I want to now talk about dollar CAD because the Canadian jobs support are coming out as well. And the dollar has been doing very well against the Canadian dollar. Why? Because the oil market's been hammered.  All the fears that China, their demand and their economy is going to slow because of the health crisis has really put a major negative impact on the oil market. And with that we've seen major move to the upside in the dollar CAD. So we've got levels. Last, you know, last year in November 2019, we're in a strong upward trend here. If you press on higher from here, if we have a good combination, you can have a strong US dollar and a weak CAD, Canadian jobs support, which would be a double value for the dollar CAD, which could take us on part, on part of the November highs. And then beyond that, it could set us up towards one spot 33, 74. Enhance the chart there for you. One spot 33, apologies, one spot 33. 47 will be the highs of October 2019. Conversely, if there are numbers that are impressive and head back toward this red line here, the tourty moving average could take us into one spot 32, 27, or perhaps this trend line here, which comes in play in around one spot 32. Now, quickly take a look at what's going on in relation to what to expect. The country, a good number of markets, what to expect the market, the market and the market calendar can be found under news analysis, third option down. So in terms of what we're expecting, hope everyone can see this OK. In terms of the actual payroll figures itself, we're expecting 160,000 jobs to be added in January. That'll be an improvement on the 145,000 jobs that were added in December. In relation to the unemployment rate, the jobless rate is on the floor. The rate is tipped whole steady at 3.5 percent, which is a joint 50 year low on the earnings front, which I'm keeping a close eye on. U.S. earnings are supposed to increase from 2.9 percent to 3 percent. They're the U.S. numbers. I'll take a quick look at the job, Canadian job support. They're going to be out in three minutes time, people. The Canadian unemployment rate is tipped a whole steady at 5.6 percent. The employment change is expected to show us here a negative reading of 15,000. The finer details will come out when all the details are out. We'll have the breakdown of what the figure was itself and also what the actual is it full-time jobs, part-time jobs on the Canadian front. Obviously, it's preferable to have more full-time jobs, a part-time job, but then again an increase in jobs nonetheless will be well received. You know, keep in mind earlier in the week, we had decent U.S. initial job disclaims. They fell to 202,000. And then whereas on Wednesday, we had a very strong U.S. ADP number. It came in at 291,000, absolutely stellar number, a multi-year high in terms of the strength of the U.S. jobs market. But this is all looking to talk about, but there is necessarily a pretty strong strong correlation between what's going on with all those individual ports. You can have a very strong ADP U.S. job disclaims and still have a weak headline, non-famperals and vice versa. I quickly take a look at Aussie dollar because there's no individual aggressive for that. ASX 200, I'll have a look at that and hopefully in a second. I haven't looked at ASX 200, the Aussie Australian stock market for a bit, but for a couple of sessions, but the last one I've been seeing is it's been broad recovery, it's been the name of the game. It's been a strong downward trend. The American dollar is doing quite well. The Australians under pressure because it has connections to China. So you can see that that is a strong downward pressure here. Notice how we're not too far away from the lows of October. So this zone here is essentially a bit of a support zone. So we break much further than the lows that were achieved in early October. We could be like having back towards zero spot 66. Any moves to the upside in Aussie dollar, we really need to be having taking off these highs here in around in around this level here at zero spot 67. Seventy numbers are coming off very quickly moves the head up towards zero spot 68. Just want to see what's going on in terms of where the numbers are coming out. The numbers are coming out in about 10 seconds time, folks. So I really need to focus on that. I'll hop down to further questions and comments when the numbers come out. But OK, folks, I'll be quite now five seconds. Right, the numbers are out. We're starting to kind of pop right now. A very strong headline number it. What we're seeing here is two hundred and twenty five thousand jobs around it. It's a very, very perspective number. US economists have often said any if they're adding more from 200,000 jobs per month that will keep the US economy gold. It's well above the one hundred and sixty thousand jobs that we're expecting in the previous month. And it's a decent I'm sorry. It's well as it was well above the expectation of one sixty and it's a decent improvement on the one forty five. On top of that, we take a look at the earnings component in the area that I think is very important. It increased from two point nine percent to three point one percent above the three percent expectation. Taking a look at the unemployment rate, it's not ideal. It takes a slightly higher off of the 50 year low from three point five percent to three point six percent. Overall, I would suggest this is positive. I would say this is a good job to port. And this, in my view, should put upward pressure on the US dollar. If you take a look at what went on over in Canada, we can see on the Canadian front that the employment change was positive. Thirty four thousand five hundred jobs were created better than expected on top of that in relation to the Canadian unemployment rate and managed to move down from five point six percent to five point five percent. I would suggest this is fairly positive for the Canadian side of things. So we've got a fairly strong US job support. We've also got a fairly strong Canadian job support. So we might anything, dare I say it before I look at it, I might say you could see a bit of a move to the downside in dollar cash. I'll have a look now at dollar cash and see what's been going on. See what the initial reaction is. Just seem to be a bit slow there in terms of the the charts opening up. What I've seen seems to be a bit of a slow day for the server. I do apologize for that. But I would suggest that this is by a large positive number. To be fair, a marginal increase of zero point one percent rise up in the employment rate in the US. I wouldn't have thought that is anything to be, you know, overly concerned about.  It's moved slightly above if, you know, just it's just picked up slightly from a 50 or high. The strong headline figure, it's a decent number, big improvement on the on the previous most number, better than much better expected. And what I really like about this jobs, US job support is the earnings to bonus earnings increased by up to three point one percent. Essentially, when Americans are in more Georgia, when the Americans are earning more, they tend to spend more. So with that, like I said, here, we're seeing a bit of move to the downside in dollar CAD. What we're seeing on the back of that, like I said, given how positive the run between the US dollar and the Canadian dollar has been in recent sessions, I think we're probably safe. There we go. I said, I said by large, it was going to probably dollar CAD negative and a household back of it. I'll take a look at a shorter time frame. I think we could see a bit of moving the downside in dollar CAD. I think the upward trend is very much intact. I think the US jobs market is in decent shape and the US economy is probably in better shape than the Canadian economy. But I think in the near term, we could look to head back towards potentially down around this zone here, down around one spot, one spot 3260. And you can refer the moves. I take a look now at the DAX in one second. So we could be heading back towards one spot 3260 and dollar CAD or potentially one spot 3240. Like I said, folks, this is a interactive webinar. So please feel free to shout out in relation to any requests you have. I would suggest that this job is by and large positive the stock market. The US economy is in better shape. The US Federal Reserve and Central Bank of the US last year cut rates three times. It made it pretty clear that they're not particularly keen, they're quite keen rather to sit and sit in their hands. I would suggest that they're not, you know, this is a good job support, but I wouldn't have thought that this is going to have much of an influence on the jobs and on their thinking in terms of they're probably go, this is a good job support for a content with the earnings component. The labor market is robust, but I don't think it's going to be, you know, they're going to be running off hiking rates any time soon, especially in light of what's going on with the health crisis in China. I know it's going around the world, but it's predominantly in China. I would suspect that they would want to see, find out what the kind of true kind of cost of the situation have been. Yes, I would definitely come to the Australian market next. We can take a look here. So we saw obviously a joke to the upside when the numbers came out. Then we saw a better move to the downside. I thought this was the very much initial reaction to the report. You can often get that whereby there's a kind of volatility in around it. Essentially, the lows of the session or the cash trading session has been here in around on the DAX 13,473. If you can hold above that metric, I think we could see further gains being made. I think it's a fairly good job support. So I think it should be positive for stock markets. It's a kind of final balance on it's good enough to add to full of sentiment. But it's probably not so good, but all of a sudden it'll actually alter the Federal Reserve's thinking in relation to what should we be doing? Should we be looking at the hiking rates? I really don't think it was that good. I'll probably give the report overall either kind of an A minus maybe a B plus in that zone. So keep in mind, we've come a long, long way in the last few sessions because of the strength of the rebound. So even if you do look to drift a bit further lower on the DAX here, I think we could see since Ford came into play in around 13,400 or potentially in around this zone here, north of 13,200. Up to the last few days, buying on the dip has been quite a popular strategy. So I think we could potentially see more of that because this was where we appeared to be ending weak on a negative note, but overall it's been a very strong week. And like I said, on the DAX, we're not too far away from it's all time high. Now if I take a look now at what's going on with the Australian market, the ASX 200, or as you call it on a platform, the Australian 200. Any questions? We've got about seven or eight minutes left on this live webinar. Any questions you have, feel free to just shout them out. If not, I'll kind of run through some of the markets again, Eurodollar, cable, and the likes. What I find interesting about the Australian 200 was that we've had a decent rebound here, which is obviously positive, and a gap created at the upside, we would suggest that a momentum is to the upside. But we couldn't really get above this area here in around 7,053, that zone. We can see here that this area of support from the market was quite strong. Since then, we've actually kind of failed to get back above it. So are they concerned about that? I would say that overall it's recently optimistic. But if you get back above that metric and then be more confident, we can look to retest the highs that were achieved in the kind of latest January. But even still, even if you drift a bit lower from here and go, move lower from down here, we'll still take this down towards the psychologically important 7,000. And even if you go below that, this area here in around 6,960, there are about actually a support on a few occasions. And to be honest, while we hold above these lows here, the lows that were achieved on the very end of this day last week, at the very end of January, if you can hold above those levels, I think we still got room instead of a chance of retesting the January highs. This is why I like technical analysis. Notice how the highs here of December are very similar to the highs that we're seeing in mid-December. We saw consolidation in that zone in earliest January. And then we find support in that zone in around 6,900 thereabouts in early February. So I would suggest that that's probably the most important metric to look at. I can absolutely have a look at gold. Well, we've another six or seven minutes left on this webinar.  Feel free to just fire away in terms of price action. I would suggest that this update is a bit on the negative side for gold. I would think that between the headline number being a well over 2,000 decent earnings component as well, I would say that this has put a bit of pressure on the gold market. While I'm just waiting for the gold chart to load up, are there any other markets anybody else would like to talk about the France 40? Yeah, take a look at what's going on over France. So gold, I've seen a lot of volatility recently. Basically, when this day last week, when equities are at the beginning of this day last week here this Friday and then going into the early hours of Monday, China drops a very fearful of the health situation in China. Then we saw a large move to the downside after we had the update, after it could be a turnaround sentiment because of the very different interventions from the Chinese authorities. So the market is still moving to the upside. I would have thought on a daily basis today this would be slightly negative for the report for the US dollar. But while we hold above this area here, the lows that were achieved in mid-January in around 1536, while we hold above those lows, I think we could see further gains to be made. And we could look at heading up towards, back towards 1590. We could all be on that because of psychology important, psychology important, 1600 and beyond that towards the January highs. I'll take a look now. At the France, I'll take a look at the France 40, the S&P 500 and also dollar yen. Just wait now for the so dollar yen is at a very good run recently, kind of heading up towards kind of another 110 area is pushing higher. Basically, this week has been very much a risk on week. So so assets or such as the Japanese yen, which is usually deemed to be deemed to be low risk. They have had quite quite a negative run. So we're seeing all so we're seeing higher. I want the dollar yen in a second what we're seeing here on the on the France 40. We can see that this particular week we have gained most of the we've regained a lot of the ground that was lost last week were comfortably above the fifth day moving average is blue line here. While we hold above that metric and also while we hold above it's going to cycle actually born 6000. I think we could see further gains he made. And we could really head it towards kind of 6100. They're there about the highest that we saw in May, January. You know, even if you drop below 6000, the fifth day moving average actually has nice support here and resistance here. So that metric has been important recently, therefore makes it more likely it'd be important in the future. But obviously there are no guarantees. And it's only really if I'm a decent move below that we could be heading back towards potentially 5900. I would want to be really worried about the fact that the France 40, if you take off the lows of early of basically Monday of last Friday. Shall I take a look at the S&P? Should it be the S&P 500 or the Dow Jones you'd like to look at? I'll take a look. I'll start off with the S&P 500. And if we were to look at the Dow, well, I'll come on down a second. My guess is that the movement on both markers will be fairly similar. Just waiting out for the for the interest upload. So keep in mind, we've had a few days in a row of yesterday, we had a few days of roll gains. Yesterday we had a we had a record high, a record close on the S&P 500. So the sentiment is clearly very, very, very strong. It's a so, you know, a job report like this, I would say would be good enough to warrant you know, a bullet sentiment in the U.S. economy. But at the same time, I don't think it's going to be changing the Fed's attitude to hike and race anytime soon.  They cut for the third time in 2019. So it's almost as if, you know, they can cut at least until, you know, if they wanted to cut, they probably couldn't even until about June, you know, next year, because, you know, it'll be pressing, dropping in, I'd agree with this, but it wouldn't be exactly be very prudent to do several cuts in a fairly short space of time. It seems a bit odd how it just seems odd how I have no chart available on that. What I'll do is I take a look now on the Dow Jones and hopefully, and then we take a look back at the, at the S&P. I don't know, don't worry. Don't worry, and I haven't, I haven't forgotten, forgotten about that. I've forgotten about you. I'll be one of that in a second. Platinum, yep. I'll happily take a look at platinum as well. Once the charts get opened, I'll happily, I'll happily take a look at this. Yeah, like I said, folks, I think it's overall, it's a pretty good job support, but it's a pretty good job support. I think it should be, it should warrant positive sentiment for the U.S. economy, but I don't think it's, I don't think it's enough to kind of jolt the Federal Reserve and to look to hike your rates. So I don't think we're going to have any kind of interest rates hikes anytime soon from the Federal Reserve. It just seems a bit unusual that we're having such problems with it. I do apologize for this, folks, in relation to the, in relation to the charts. Don't worry, I'll take a look at a thought again. I haven't forgotten about the Dow Jones or Platinum. It's just, okay, so for some strange reason, for some strange reason we're having some kind of issues. I think it's basic to do it. The Wi-Fi in the entire building is a bit slow. It wasn't great this morning, the first thing in the morning, I noticed it's got a bit slower. And then of course, with that, we're disappeared to have issues that load in the charts. Like I was saying, I would have thought that this job support would be overall a dollar positive. The dollar has been getting decent ground versus the Japanese end in the last week or so or the last few sessions. And so with that, I do think we're going to see, we're going to see further gains on the dollar versus the Japanese end. I will look to have a look at Platinum. Folks, I am really sorry about this. I know you tune in for a live webinar to see the price action. One of my colleagues is just getting, here we go. Don't worry, the dollar end is also on the list. So Platinum, I did a video yesterday. If you ever tune into our YouTube channel and also some insights, I did a video yesterday on Palladium where I referenced Platinum. And we can see here, and I know from the top of my head, because I did it yesterday, Platinum, Palladium apologies. Platinum, what we're looking at here, hit nearly a three year high in January. It's at a pretty decent pullback. Got my support from the 50 moving average. And that comes to the play in around 954. If you could hold above that metric, I think the wider upper trend could continue. And we could be looking at retesting up towards the kind of psychologically important a thousand. And if you go beyond that, we could then be looking at retesting the highs that we saw in January. Conversely, a decent break below the 50 moving average. And also, which comes into play in around 954 could take us back towards the lows of mid January in at 945. And if you do have a decent break below this area here at 945, it could take us back to this level, the one with the moving average in at 929. Notice how they're thereabouts. It's awesome consolidation. It's awesome support to play from the metric in the past. As they always say, if the metric is important in the past, it makes it more likely it will be of importance in the future. But obviously there are kind of no, no kind of guarantees with that. I would look to do the Dow Jones and the Dollar BN and then look to wrap things up. Just be there, it's got a few minutes overboard, not to worry. So the Dow Jones, we can see here, the Dow Jones had a very impressive week this week in terms of the pullback. All the losses of last week, very much recouped. Record highs set yesterday, record close set last night in New York were a bit lower on today's session. Even if you do put a pullback, support could be found in around the kind of psychology born 29,000 mark. And even if you go below that, we could be likely heading to this zone here, 28,930 down to 28,800. This zone here, they're there about in that area. And then of course, if we're looking to push on higher from here, we could be looking at retesting the highs of yesterday. And then beyond that, we could be looking towards 29,600, 700 so on and so forth. And finally, what I'm gonna look at now before I wrap things up is the US dollar versus the Japanese yen. Once again, I do apologize for the slow broadband and in turn, the slow loading of the charts. Similar to stock markets, the dollar yen had a pretty terrible end to the month of January, moved aggressively lower, but conversely, it's like quite a good February. Dollar yen pushing to the upside. Fair enough, it's a bit lower on today's session, but then again, not a shock if you have one, two, three, four days of decent gains. If you looked at the press on higher from here, we could be like you're targeting 110. We could all be on that. We could be like you hit the target with the mid-January high of 110, spot 29. And if you go beyond that, we could be heading up towards 110, spot 67. I know we'd have to bet a ground today. I would have thought that today's report is dollar positive. So if you push on lower from here, even if you have a size of a correction, we could be like you're heading back towards this blue line here, the fifthly moving average in a 109, spot 25. I do appreciate you bearing with me today. I'd like to thank you for signing up to our webinar. It's going to be available on our YouTube channel. It's also going to be uploaded to the Insights section of our website. I'll show you that in just one second. Under the News and Analysis section, it is the second tab down, I believe. So Insights, and you can see it listed along here on this sidebar here. So for those of you who've tuned in to the live event, it's going to appear on our trading platform later on. I would like to thank you for tuning in to today's trading webinar. Please feel free to sign up for next month's webinar and have a good trading week and good luck.