Lightspeed and SWGfL Question

[snagrat]

We are installing Lightspeed as our new filtering device but currently have RM SafetyNet through SWGfL.

 

The overall goal would be to disable SafetyNet but I can't do that until the Lightspeed is up and running.

 

What is the correct process? If I plug in Lightspeed as it should be (sat between network and router) will clients still be able to access the Internet using the SWGfL proxy servers or does Lightspeed block that?

 

Can I configure Lightspeed to use an upstream proxy so the clients do not need a proxy set (but would be required somewhere for the connection to work)

[Edu-IT]

You will need to disable the RM SafetyNet before the Lightspeed will work. Lightspeed will not work with an upstream proxy, it requires a straight out connection to the internet.

 

You need to set up Lightspeed then arrange for your ISP to remove the RM SafetyNet if they enforce traffic through this, else, you can just update your clients to the Lightspeed.

 

The clients don't necessarily need a Proxy setting to use the Lightspeed. It can work transparently. However, I would go down the Proxy route as then you can filter Google etc. You will need to setup SSL certificates to perform MITM.

[snagrat]

So when you say Lightspeed setup - does that include installing it between the router and internal network? Or just set it up with the management plugged in?

[Edu-IT]

Set it up with the management connected so you can do all the policy stuff. I wouldn't go live with it during school hours, do the actual connecting up out of hours so you can test it beforehand and make sure all the policies apply correctly for your user types. To do that you will need to connect it to the router, between the internal network, hence the suggestion to do it out of hours.

 

You can always fallback to the SafetyNet if it doesn't behave as expected.

Edited January 9, 2015 by Edu-IT

[snagrat]

OK thanks.

 

I'll get it setup and then agree a date for SafetyNet to be disabled.

[Edu-IT]

Are you able to get out to the internet without SafetyNet, or does all traffic have to pass through the SafetyNet?

 

If so, you will probably find that your headteacher needs to sign a disclaimer for the ISP.

[snagrat]

All traffic must pass through SafetyNet. I understand the HT will need to authorise it.

[Edu-IT]

OK so when you are ready to test, be sure that the ISP are still on hand to reverse any changes they make, if it fails. Else you'll be without internet.

[snagrat]

Ok thanks for the help