New Web Filter and Firewall for School

[Jehanzeb]

Just to add although Smoothwall isn't bad I find the support a bit lousy. I am struggling to find why the client certificate under global proxy settings asks for a password during installation. No one seems to know and when I asked SW I had a reply suggesting 'nobody had dealt with it in that detail'.i am pretty frustrated and annoyed at the moment as I cannot setup iPad filteration for our mobile students I.e. Kids who take their ipads outside of our network. We clearly mentioned and expected the solution we needed should support global proxy for our students without the need of username and password.

 

Although we have just implemented this solution, if we don't get what we need I'll start looking somewhere else.

 

P.S. We were to trial Lightspeed but didn't get anything so chose Smoothwall in the end.

 

Regards

 

J.

Edited September 12, 2015 by Jehanzeb

[markwilfan]

Sounds like an "ipad thing" asking for the password

[Jehanzeb]

Sounds like an "ipad thing" asking for the password

 

Hi Mark, it's not an iPad dependent, the issue started while installing it on a windows laptop, then on MacBook and then iPad - none able to install. I'll encourage you to try to check it. Web proxy -> global proxy -> settings. Try download and install client.cert. it'll ask for password that has no reference anywhere

[markwilfan]

Ours defo doesn't. Have you tried recreating the smoothwall ca?

[Jehanzeb]

Such a shame Smoothwall support has come to this. It was great back in the day...

 

We have a proper MDM solution that enforces the proxy settings either back to your network or our cloud. Happy to give you a quick web demo if you like?

 

Richard

 

Hi Richard, we use Meraki and it works well. We need a solution that purely works with Apple devices as we're a Mac house. There is option under meraki profile enforcement for global proxy and that's as easy as that. In Meraki we push certificate for our wifi and RM education and all works perfectly, why doesn't filteration works the same way, it's anyone's guess.

 

By the way what solution do you have?

 

Regards

 

J.

[Jehanzeb]

Ours defo doesn't. Have you tried recreating the smoothwall ca?

 

Hi Mark, as I mentioned we've just installed it few weeks ago (first week back to school) so I am still learning. How do you re-create ca? I did try removing cert option and after restart I re applied cert option but it didn't rectify the issue.

 

Also are you on AD or OD?

 

Regards

 

J.

Edited September 12, 2015 by Jehanzeb

[markwilfan]

We're using AD . Will have a look tomorrow

[Jehanzeb]

We're using AD . Will have a look tomorrow

 

Thanks.

Regards

J.

[RichCowell]

Is this Cyberoam, @RichCowell ??

 

It is indeed! Thanks

 

I'm looking forward to seeing the updated version...

[Blue_Cookeh]

I'm starting to sound like a bloomin' salesmen with this!

 

I spent months looking for a replacement for E2BN filering/Forefront TMG/Dansguardian filtering and couldn't really find anything that was a) reasonably priced b) worked properly c) had every feature we needed.

 

Eventually I managed to convince Sophos we didn't need their bundled setup support and got the price down enough to justify it, and I'm so glad we did! It's always worked, it just sits there chugging along, any feature I've needed it's always had and the community support on it is extensive, before you even talk to Sophos. Loving it here.

[Net-Ctrl]

Hi @gshaw,

 

Apologies for the delayed response, although it seems @rpmoore was much more on the ball than I, and has covered all your points off

 

If you, or anyone else would like to trial iboss, or have a one-on-one iboss demo, please send me a PM and we will arrange this for you. As Richard has said, we have access to lots of boxes that are currently waiting to be trialled.

 

Thanks,

 

Josh

[DGardiner]

Sounds like an "ipad thing" asking for the password

 

http://www.smoothwall.com/media/159166/SecureGlobalProxy-install.pdf

 

Note: The client-side certificate downloaded from Secure Global Proxy has a blank password.

 

 

 

 

The client-side certificate is downloadable from the Smoothwall System. It has a blank password, and is in PKCS#12 format which is supported by the majority of browsers.

However, iOS operating systems do require a password on the certificate, which you must configure separately. For more information, see Uploading the Client-Side Certificate on page 12.

Edited September 16, 2015 by DGardiner

[Opendium_Steve]

The client-side certificate is downloadable from the Smoothwall System. It has a blank password, and is in PKCS#12 format which is supported by the majority of browsers.

However, iOS operating systems do require a password on the certificate, which you must configure separately. For more information, see Uploading the Client-Side Certificate on page 12.

 

Seems surprising - we've never needed to set passwords on our certificates. Maybe it's because Smoothwall are using a PKCS#12 certificate - we use PEM format...

[psydii]

I'm starting to sound like a bloomin' salesmen with this!

 

I spent months looking for a replacement for E2BN filering/Forefront TMG/Dansguardian filtering and couldn't really find anything that was a) reasonably priced b) worked properly c) had every feature we needed.

 

Do you still have a list of the products you looked at?