Jump to content

Urgent Reminder - Action Required by Users of E2BN Protex Filtering

simon_e2bn
 Share

Recommended Posts

simon_e2bn

simon_e2bn

Posted
Posted

URGENT REMINDER: All Schools Using E2BN Protex filtering need to take Action NOW

 

Google are about to make a major change to their search facility. This means Protex and other filtering providers must implement secure-content inspection by mid-January 2015 to continue with the same level of filtering as currently provided. Secure-content inspection requires that ALL users have an additional browser certificate installed.

 

What to do if your Local Authority provides Protex filtering

 

All schools and academies that use Protex must install a Protex RootCA SSL certificate on every device that accesses the Internet. The required certificate is available from http://protex.e2bn.org/certs together with installation instructions and a Frequently Asked Questions section.

 

What to do if you use ProtexLocal

 

If you have a ProtexLocal system on site including E2BN Direct customers, you urgently need to install a ProtexRootCA certificate on every device that connects to the Internet. The required certificate is available from http://protex.e2bn.org/certs together with installation instructions.

 

In addtion to the above your ProtexLocal system will require a software upgrade.

 

If you have purchased ProtexLocal straight from E2BN then we will be advising you of when you should carry out the system upgrade. If you have E2BN Direct or support from a reseller such as Equiinet then your reseller will be contacting you to arrange an upgrade of your Protex Local system.

 

This change is very likely to happen in the next few days so please act NOW

 

What to do if your school uses a different filtering service

As this change by Google affects all filtering products, schools not using Protex (either ProtexLocal or via their Local Authority) should urgently consult with their filtering provider regarding this issue.

 

 

For more information go to: http://protex.e2bn.org

  • Thanks 1
Griff

Griff

Posted
Posted (edited)
Nice being told about a wholesale change literally 2 weeks before its going to switch Edited by Griff
jmak

jmak

Posted
Posted
I got this direct a couple of days ago - I'd already emailed the LA the same day and they told me that they were still waiting for a solution from Protex. We actually use Lightspeed now (also managed by the LA), but I haven't heard anything from them either. At this rate I'll probably ditch Lightspeed and ask for a refund and go back to Protex - at least they've offered a solution...
  • Thanks 1
Griff

Griff

Posted
Posted
Don't think I got anything directly to me from E2BN, I am told by my tech who works in other schools he got an email from Central Beds saying changes were happening but no info on what we needed to-do obviously until today when we received a further email from Central. Its an easy change for domain etc thats fine but we have about 100+ iPads and even with Meraki we cannot see a way to push a .crt so we are going to have to manually do these.. :\
Tesla

Tesla

Posted
Posted

Yup, we had same issue with the ipads, managed to see a way to push certificates (kinda) but don't think it supports the CRT ones.

 

it's definitely a pain, our smaller site doesnt connect to the network, they just use a logon script to get their mapped drives, so have to go round to all of them.

_Ben

_Ben

Posted
Posted

Hi,

 

Are you also making the schools aware that installing this certificate onto all devices allows yourself as the ISP the ability to decrypt and inspect all SSL traffic?

Koldov

Koldov

Posted
Posted (edited)

Would like to know if anyone has solved the iPad issue?

 

Also, how can I tell if this has actually worked?

 

I'm sure I used to get some ?gws_rd=ssl text or something like that after Google but now I don't...

Edited by Koldov
matt40k

matt40k

Posted
Posted
Are you also making the schools aware that installing this certificate onto all devices allows yourself as the ISP the ability to decrypt and inspect all SSL traffic?

 

They've only switched it on for Google, everything else they don't touch.

Tesla

Tesla

Posted
Posted (edited)
Would like to know if anyone has solved the iPad issue?

 

Also, how can I tell if this has actually worked?

 

I'm sure I used to get some ?gws_rd=ssl text or something like that after Google but now I don't...

 

Go to this link to see if the certificate has worked

 

https://protex-ssltest.e2bn.org/

 

you will get a screen stating "If you got straight here without a browser warning the E2BN Protex RootCA certificate is installed ok on your device."

Edited by Tesla
  • Thanks 1
TomHD

TomHD

Posted
Posted
I have installed the certificate on all PCs/Laptops/iPads but haven't used the test URL, will give it a go on Monday. I have noticed that IE and Chrome are fine with accessing Google but Firefox isn't, I get a browser based certificate warning when accessing O_o Anyone else noticed this?
Koldov

Koldov

Posted
Posted

Ok, I'm just seeing if this is consequence of the certificate or not...

 

I just dropped a machine off of the Domain to update adobe reader/flash and java, however when I came to update flash the updater gave an error about needing proxy authentication and requiring username and password with Protex being mentioned? Also accessing Google gave a certificate warning.

 

I haven't rechecked but does this mean computers not joined to the domain cannot access this type of update, as I haven't worked on a way of doing them via MSI or whatever these crazy kids nowadays use, so usually drop them off the Domain to update...

 

Kol.

Tesla

Tesla

Posted
Posted

Off the network is easy, you just download the file from the site, follow the prompts, but when it asks about the location of the certificate, selected trusted root certificate authority.

 

Once you take it off the domain i assume i then doesnt pick up the certificates at logon.

  • Thanks 1
TomHD

TomHD

Posted
Posted
For staff laptops not on the domain I just sent an email with the certificate link and instructions on how to install. Not had any complaints yet :)

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share
Go to topic listing


×
×
  • Create New...