A member of SMT has recently purchased the Nisai Virtual Academy software and we're hitting a few snags with it. When the staff first attempted to access it, they were unable to, despite authorising the ActivX prompt. After some poking around I found out the proxy details hadn't been pulled down from IE (as they were on our test machine). So, with the Proxy manually set we should be good to go? Nope.
Firstly IE starts asking for credentials to the proxy (Smoothwall) whenever a Nisai connection is attempted - this is something it never does otherwise, and accessing other websites before and after this request, in the same session, does not result in the request for credentials. Besides, it's transparent, you don't need them. After faffing around and clearing the proxy details from the client configuration, then putting them back in, suddenly it clears it (the proxy)? Odd, but acceptable.
It is to be noted that at this point, our test rig was able to successfully connect to their 'room' and all looked fine. So I go to update the other 5 machines with the proxy details (boom, internal proxy authentication please..), remove them, add them in again, and it clears the proxy. Except, suddenly, IE is now asking for credentials to the LEA's proxy (which didn't happen on the test rig). Again, this certainly shouldn't be required.
After some back-and-forth I end up with this from their tech support:
Unfortunately, it does not look like we can get this to work as our software does not support NTLM proxies so basically unless we can completely bypass the NTLM proxies, our software will not work. I am not sure if this is possible, might be worth speaking to the LEA to see whether there is a way around this problem.
This software is aimed at the educational sector. Other schools surely use it. I cannot believe that any school would allow their students entirely unfiltered access to the internet in order to avoid NTLM issues. Even if they bypass their own proxy, they must use the LEA one, which again is NTLM. However their tech supports answer is simply "It won't work.", so I'm at a bit of a loss as to where we go from here.
Their websites (And the IP the software attempts to connect to, as provided by their tech support) have all been whitelisted.
The LEA's proxy should automatically accept traffic coming from our Smoothwall box.
Bypassing our proxy and attempting to use only the LEA one also proves no result.
Last edited by Garacesh; 6th February 2013 at 11:33 AM.
We too were asked to get this working and also use Smoothwall with NTLM. Well what can I say, after lots of testing and playing around with settings, with no real help from support it is working. Everytime a student logs in they have to set no less than 10 manual options including putting proxy information in for it to work. This is after installing the activex component as well. To sum up not the best software in my opinion.
What are these settings, if I might ask? I've yet to be able to get it to a state of consistently working. SMT - from what I can gather from a different member of staff - want the students to access this from home. So I can't see these problems happening for them. But they want a few of our staff to have some training on it first, from inside the building, which is where the problem is. It might be that if we can get it working for the training session, and if it's confirmed the kids are using it from outside, then that might just be acceptable.
I've asked Nisai for information regarding other schools that use the software so I could get in touch with their techs, but had no response to that.
Yup, set the I.P. and proxy that way. Forced client to use proxy, as you've done. At first IE was asking for credentials to get through Smoothwall, and now it does it for the LEA's filter. Which makes no sense. The LEA's filter should be completely transparent to traffic coming from our Smoothwall box. Like I say, though, this is only when you try and use the Nisai software. Regular web-browsing and such doesn't bring up these prompts. nisai.png
Like the above.. Only now it's asking for credentials to proxy.rochdale.edu.local not 10.114.192.50 (which is our Smoothwall)
Last edited by Garacesh; 8th February 2013 at 11:21 AM.