OverWorked Posted March 21, 2014 Posted March 21, 2014 @dave.81 - again, thanks. Did you have any issues with the "allow proxies for shared networks" on the chrome settings. We seem to be unable to get to the smoothwall sign in without this being checked - but there is no central way to set it (or so it seems). I've got a similar problem. The Chromebook needs a browser to auth with Ruckus and Smoothwall, but won't display the browser until it's signed in. It can't sign in because it can't auth with Smoothwall. We have BYOD set up so that browsers on devices auth with ruckus , then get forwarded to Smoothwall SSL. Chromebook will not display a browser until it's signed in so it's stuck. I can skip sign in and browse as guest, which makes it pretty useless. There must be a way round this.
psydii Posted March 21, 2014 Posted March 21, 2014 Can't you do something funky.. Like allow access to google without auth, but then require it for everything else.. Which should allow you to log into the chrome book (and this give you an audit trail), but as soon as the user wandered off to another domain they would be required to authenticate to check they had the appropriate level of filtering?
chazzy2501 Posted March 21, 2014 Posted March 21, 2014 I know that some of the older chrome books are now no longer supported, it seems they have a 3 year lifecycle. They'll still work but won't get updates..
HTCPCP Posted March 21, 2014 Posted March 21, 2014 We have about 90 chromebooks in the school now, and have just managed to get hold of the google management system which we are about to start rolling out to the chromebooks (will tell you what it's like as soon as we have the paperwork come through)... Can't really fault them too much really. We already use a google apps system through SmartAssess so all school users have accounts set up automatically. It's something you really do need a google account for though, as without it, it's just a glorified web browser. The other thing (which we are hoping the management system will fix) is having to manually tick the allow proxy box which is a touch annoying and they aren't hugely locked down. On the plus side though, they are super quick and can easily be reset if it all goes wrong!
OverWorked Posted March 21, 2014 Posted March 21, 2014 Can't you do something funky.. Like allow access to google without auth, but then require it for everything else.. Which should allow you to log into the chrome book (and this give you an audit trail), but as soon as the user wandered off to another domain they would be required to authenticate to check they had the appropriate level of filtering? I've tried that. I've allowed gstatic.com/generate_204 and clients3.google.com to bypass auth in Smoothwall, as per dave.81's suggestion. Still staring at the "Network is not available"
HTCPCP Posted March 21, 2014 Posted March 21, 2014 Thanks for sharing - esp the Smoothwall. How are you tackling printing? If you use Papercut V14 (I think you can with v13.5 too) you can set up google cloud print and then get users when on site to release the jobs through a weblink to their user details on the print server
jaminben Posted March 21, 2014 Posted March 21, 2014 We have about 90 chromebooks in the school now, and have just managed to get hold of the google management system which we are about to start rolling out to the chromebooks (will tell you what it's like as soon as we have the paperwork come through). Did you have to purchase a license for each Chromebook you want to manage with the management system?
robjduk Posted March 23, 2014 Posted March 23, 2014 Yes you have to have a licence for each Chromebook (got about 90 onsite and another 60 about to be ordered). The licences cost £19 unless someone can tell me a cheaper place to get them. Oh and you have to buy at least 5 (or is it 6?). I often try to have a few extra just incase.
Arthur Posted March 23, 2014 Posted March 23, 2014 Still staring at the "Network is not available" There are a few more domains you may need to unblock... https://support.google.com/drive/answer/2589954 1
jaminben Posted March 24, 2014 Posted March 24, 2014 Yes you have to have a licence for each Chromebook (got about 90 onsite and another 60 about to be ordered). The licences cost £19 unless someone can tell me a cheaper place to get them. Oh and you have to buy at least 5 (or is it 6?). I often try to have a few extra just incase. Thats what we were quoted but we didn't know we had to buy at least 5.... only wanted one to see what it was like.
jaminben Posted April 28, 2014 Posted April 28, 2014 We're still having issues getting ours through the Smoothwall... We can put our Google username/password and it goes off and then returns a "Network is not available" error but if we put the incorrect password in then Google returns that we entered an incorrect password. So it goes off ok but then won't allow the Chrome book to get any further than the sign-in page. We've entered the below into an authentication exception: [color=#333333]gstatic.com/generate_204[/color] [color=#444444][font=Helvetica Neue]accounts.google.com [/font][/color][color=#444444][font=Helvetica Neue]clients3.google.com [/font][/color][color=#444444][font=inherit]talk.google.com [/font][/color][color=#444444][font=inherit]drive.google.com [/font][/color][color=#444444][font=inherit]googleapis.com [/font][/color][color=#444444][font=inherit]ssl.gstatic.com [/font][/color][color=#444444][font=inherit]docs.google.com [/font][/color][color=#444444][font=inherit]drive.google.com [/font][/color][color=#444444][font=inherit]googleusercontent.com[/font][/color][color=#444444][font=inherit] [/font][/color] Anyone got any ideas?
tom_newton Posted April 28, 2014 Posted April 28, 2014 Chromebooks will let you do 802.1x authentication on a per-user basis... that may be an option with the ruckus gear. Be aware that putting stuff in auth exception does *not* mean it is automatically allowed: quite the opposite, you can find that depending on your rules these sites now get blocked because the user browsing is in "unauthenticated users". The policy test tool can prove this if needed. 1
winng Posted April 28, 2014 Posted April 28, 2014 I think Chromebooks in a school is a great idea and a way to ween people off being tied to a domain to get access to what they want/need to do, etc. I would also promote them for KS4 and KS5 students but go with tablets for KS3 where they are exploring more whereas the former need to type reports, etc. I use a Chromebook myself as it's so quick to be ready to use. 1
Arthur Posted April 28, 2014 Posted April 28, 2014 (edited) Anyone got any ideas? You may want to try the following URLs if the ones in post #35 do not work. accounts.google.com accounts.youtube.com clients1.google.com clients2.google.com clients3.google.com clients4.google.com commondatastorage.googleapis.com cros-omahaproxy.appspot.com dl.google.com dl-ssl.google.com gweb-gettingstartedguide.appspot.com m.google.com m.safebrowsing-cache.google.com omahaproxy.appspot.com pack.google.com safebrowsing.google.com safebrowsing-cache.google.com ssl.gstatic.com storage.googleapis.com tools.google.com www.googleapis.com www.gstatic.com Source: https://support.google.com/chrome/a/answer/3504942#sslinspection Edited April 28, 2014 by Arthur 1
Arthur Posted April 29, 2014 Posted April 29, 2014 (edited) @jaminben. Another site worth visiting is the Google Apps Toolbox. The "Browser Info" page will automatically check to see if any of Google's domains are blocked. Edited April 29, 2014 by Arthur 1
jaminben Posted April 30, 2014 Posted April 30, 2014 @Arthur Thanks for those... we phoned Smoothwall and got sorted in 5 mins.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now