simon_e2bn Posted January 8, 2015 Posted January 8, 2015 URGENT REMINDER: All Schools Using E2BN Protex filtering need to take Action NOW Google are about to make a major change to their search facility. This means Protex and other filtering providers must implement secure-content inspection by mid-January 2015 to continue with the same level of filtering as currently provided. Secure-content inspection requires that ALL users have an additional browser certificate installed. What to do if your Local Authority provides Protex filtering All schools and academies that use Protex must install a Protex RootCA SSL certificate on every device that accesses the Internet. The required certificate is available from http://protex.e2bn.org/certs together with installation instructions and a Frequently Asked Questions section. What to do if you use ProtexLocal If you have a ProtexLocal system on site including E2BN Direct customers, you urgently need to install a ProtexRootCA certificate on every device that connects to the Internet. The required certificate is available from http://protex.e2bn.org/certs together with installation instructions. In addtion to the above your ProtexLocal system will require a software upgrade. If you have purchased ProtexLocal straight from E2BN then we will be advising you of when you should carry out the system upgrade. If you have E2BN Direct or support from a reseller such as Equiinet then your reseller will be contacting you to arrange an upgrade of your Protex Local system. This change is very likely to happen in the next few days so please act NOW What to do if your school uses a different filtering service As this change by Google affects all filtering products, schools not using Protex (either ProtexLocal or via their Local Authority) should urgently consult with their filtering provider regarding this issue. For more information go to: http://protex.e2bn.org 1
Tesla Posted January 8, 2015 Posted January 8, 2015 Done this via GP... Instructions for the iOS aren't particularly clear/helpful.... Thanks 1
Griff Posted January 9, 2015 Posted January 9, 2015 (edited) Nice being told about a wholesale change literally 2 weeks before its going to switch Edited January 9, 2015 by Griff
Tesla Posted January 9, 2015 Posted January 9, 2015 We had an email directly from e2bn in December...i assume they contacted your LEA rather than you direct?
jmak Posted January 9, 2015 Posted January 9, 2015 I got this direct a couple of days ago - I'd already emailed the LA the same day and they told me that they were still waiting for a solution from Protex. We actually use Lightspeed now (also managed by the LA), but I haven't heard anything from them either. At this rate I'll probably ditch Lightspeed and ask for a refund and go back to Protex - at least they've offered a solution... 1
Griff Posted January 9, 2015 Posted January 9, 2015 Don't think I got anything directly to me from E2BN, I am told by my tech who works in other schools he got an email from Central Beds saying changes were happening but no info on what we needed to-do obviously until today when we received a further email from Central. Its an easy change for domain etc thats fine but we have about 100+ iPads and even with Meraki we cannot see a way to push a .crt so we are going to have to manually do these.. :\
Tesla Posted January 9, 2015 Posted January 9, 2015 Yup, we had same issue with the ipads, managed to see a way to push certificates (kinda) but don't think it supports the CRT ones. it's definitely a pain, our smaller site doesnt connect to the network, they just use a logon script to get their mapped drives, so have to go round to all of them.
Griff Posted January 9, 2015 Posted January 9, 2015 QR image for certificate for iPads easier than navigating the site
_Ben Posted January 12, 2015 Posted January 12, 2015 Hi, Are you also making the schools aware that installing this certificate onto all devices allows yourself as the ISP the ability to decrypt and inspect all SSL traffic?
Koldov Posted January 16, 2015 Posted January 16, 2015 (edited) Would like to know if anyone has solved the iPad issue? Also, how can I tell if this has actually worked? I'm sure I used to get some ?gws_rd=ssl text or something like that after Google but now I don't... Edited January 16, 2015 by Koldov
jmak Posted January 16, 2015 Posted January 16, 2015 Google has just stopped working.... You mean the internet 1
Koldov Posted January 16, 2015 Posted January 16, 2015 Seems a bit hit and miss... Sometimes I can open Google with the SSl and other times without!
matt40k Posted January 16, 2015 Posted January 16, 2015 Are you also making the schools aware that installing this certificate onto all devices allows yourself as the ISP the ability to decrypt and inspect all SSL traffic? They've only switched it on for Google, everything else they don't touch.
Tesla Posted January 16, 2015 Posted January 16, 2015 (edited) Would like to know if anyone has solved the iPad issue? Also, how can I tell if this has actually worked? I'm sure I used to get some ?gws_rd=ssl text or something like that after Google but now I don't... Go to this link to see if the certificate has worked https://protex-ssltest.e2bn.org/ you will get a screen stating "If you got straight here without a browser warning the E2BN Protex RootCA certificate is installed ok on your device." Edited January 16, 2015 by Tesla 1
Koldov Posted January 16, 2015 Posted January 16, 2015 Like this one? Or something different? Although I'm having a separate issue which maybe compounding things... http://www.edugeek.net/forums/windows-server-2012/147950-ie-11-gpo-discrepancies.html Should the 'warn if changing between secure and not secure modes' be on or off? Kol.
Tesla Posted January 16, 2015 Posted January 16, 2015 Like this one? [ATTACH=CONFIG]28517[/ATTACH] Or something different? Although I'm having a separate issue which maybe compounding things... http://www.edugeek.net/forums/windows-server-2012/147950-ie-11-gpo-discrepancies.html Should the 'warn if changing between secure and not secure modes' be on or off? Kol. I haven't seen that.. i get.. http://i.gyazo.com/14b4e924b433a80a80364ef8bfd0dcb4.png
TomHD Posted January 16, 2015 Posted January 16, 2015 I have installed the certificate on all PCs/Laptops/iPads but haven't used the test URL, will give it a go on Monday. I have noticed that IE and Chrome are fine with accessing Google but Firefox isn't, I get a browser based certificate warning when accessing O_o Anyone else noticed this?
Tesla Posted January 16, 2015 Posted January 16, 2015 Theres a seperate bit on their site about firefox....may be incompatible with gpo roll out
Koldov Posted January 23, 2015 Posted January 23, 2015 Ok, I'm just seeing if this is consequence of the certificate or not... I just dropped a machine off of the Domain to update adobe reader/flash and java, however when I came to update flash the updater gave an error about needing proxy authentication and requiring username and password with Protex being mentioned? Also accessing Google gave a certificate warning. I haven't rechecked but does this mean computers not joined to the domain cannot access this type of update, as I haven't worked on a way of doing them via MSI or whatever these crazy kids nowadays use, so usually drop them off the Domain to update... Kol.
Tesla Posted January 23, 2015 Posted January 23, 2015 Off the network is easy, you just download the file from the site, follow the prompts, but when it asks about the location of the certificate, selected trusted root certificate authority. Once you take it off the domain i assume i then doesnt pick up the certificates at logon. 1
TomHD Posted January 23, 2015 Posted January 23, 2015 For staff laptops not on the domain I just sent an email with the certificate link and instructions on how to install. Not had any complaints yet
Griff Posted January 29, 2015 Posted January 29, 2015 Anyone had an issue with Chrome from within iOS seems to ignore the fact the certificate is installed?
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now