* * deny — ~/home

any any deny — field notes for security engineers.

Independent troubleshooting guides, free browser-based tools, and plain-language write-ups. SSE platforms, network security, firewalls — from production experience, not marketing decks.

#srcdstserviceaction
1vendor-docsyour-problemhttpsALLOWstops one step too early
2forum-threadyour-problemhttpsALLOWlast reply 2019, "nvm fixed it"
3this-siteyour-problemanyALLOWsymptom → cause → fix
9999***DENYeverything else

what's here

live

PAC File Tester

Paste a PAC file, get a rule-by-rule trace of exactly what matches and why, plus a linter for the classic footguns. Runs entirely in your browser — your PAC file never leaves your machine.

in progress

Field Notes

Troubleshooting write-ups across SSE, networking, and firewalls — the problems with plenty of search results and no actual answers.

in the works

The Field Guide

A deep troubleshooting guide for SSE platforms, starting with Zscaler's stack: symptom → cause → fix, in the order you'd actually check things at 2 a.m.

why this site exists

If you run security infrastructure, you already know the problem: the official docs tell you how things should work, the community threads trail off years ago, and the only person who knows why authentication breaks for exactly one executive is whoever debugged it last and didn't write it down.

This site is that write-up. Independent, specific, and free of anything that reads like it was approved by a marketing department.