Smoothwall New Setup - Advice Needed

[superaz300]

Good Evening People.

 

I am new to Smoothwall, so I decided to setup the Advanced Firewall UTM at home, which I do have a licence for. I've managed to get the Internet setup and is working, but I am really stuck on the SSL HTTPS side and AD integration.

 

When a AD client goes onto the internet, its fine until they visit a website like Facebook, then it displays a certificate error and then the Smoothwall block page. I have created a Smoothwall group on the smoothwall system itself, and pointed it to Domain Admins, and then I have allowed Domain Admins to access everything, but I still get a block page.

 

What I need to know is.

 

1. How do I create an SSL certificate so I can deploy it with GPO to stop the certificate errors.

2. How do I fix my AD Authentication so its actually talking properly to AD, I know it isn't because on the block page where it says User, this is replaced by an IP address instead of a Username.

 

All help, guides is appreciated. I do have access to the Smoothwall Support Knowledge library so if there is something I have missed on there, please let me know.

 

Cheers

James

[Ausy]

1. You have to export the certificate. Guardian - Under HTTP Inspection -Settings. Export the certificate. Create a GPO. Computer Configuration - Policies - Windows Settings - Security Settings - Public Key Policies - Trusted Root Certification Authorities. Import the certificate. Place the GPO at the top level with the default domain policy.

 

2. Services - Directories. Add new directory, choose Active Directory and follow the wizard. You must map Active Directory groups to the Smoothwall groups. Use the help menu for more details.

[jezi55]

I have deployed smoothwall at my school over the last few weeks and Ausy's advice is spot on. I am still trying to iron out the issues at my site now so I hope your deployment goes well

[superaz300]

A big thank you to Ausy! It turns out I was installing the certificate as a user instead of the computer, as soon as I did this by GPO the certificate error has gone away. Also, I now have Smoothwall authenticating against AD.

 

Much appreciated!

 

Thanks again,

James