Smoothwall firewall rule for Impero

[steven_layton_sl]

I am try to get my Chromebooks to be visible on Impero. The Impero server is on a different VLAN to the Chromebooks.

It has worked before, and has just stopped working, but I can't work out why. I am currently out of support with Impero, but hope to return next year.

Below are the rules that I have in Smoothwall, which I know are a mess, but they did work before! The only thing I have changed (after it stopped working), was to group all of the rules together.

 

Does anyone have a best practice template rule I could use, modifying it with my own IPs?

 

Edited May 16, 2017 by steven_layton_sl

[Mic_Impero]

Hi Steven,

 

Do the Chromebooks connect but the thumbnails aren't visible, or do they not connect at all?

 

Mic @ Impero

[steven_layton_sl]

Hi @Mic_Impero

Thank you for reply.

I believe that the Chromebooks can communicate with the Impero server as when I logged on to one the Impero icon on the Chromebook is coloured, rather than grey out, but my user didn't appear in console.

 

However, Impero console does show some stations as 'online', but I do not believe that these are currently logged on. When you go to the thumbnail view they aren't connecting.

 

 

[Mic_Impero]

Hi Steven,

 

Looks like a couple of things going on here. Chromebooks will only connect to the server when the user is logged on as the application and extension run in the browser (the only way to run on a Chrome OS device).

If the browser is open and the Chromebook is being used but you're then seeing a black thumbnail it may be because the ports are not available between the console and the chromebook; the connection runs to the server, but the thumbnail runs directly from the chromebook to the console so you may need more ports opening across your vlans.

 

I'll email you over a diagram of the traffic flow and port numbers you need.

 

Mic

[steven_layton_sl]

Hi

So, I have tidied up my rule and it is now set up as the following.

 

 

 

All of the Chromebooks that are in use (dozens) have a Impero icon that is active (coloured), but so far only two are showing as visable thumbnails. My own account which show up in staff, does not. But I feel I am getting somewhere. Any idea why only some are showing as thumbnails?

 

[Mic_Impero]

Hi Steven,

 

Please could you let me know if you're using Ruckus for wifi (or otherwise what it is), and what version of Chrome OS you're running on the ones which won't connect (and whether it's the same as the ones which do connect)?

 

Thanks

Mic

 

Hi

So, I have tidied up my rule and it is now set up as the following.

 

[ATTACH=CONFIG]43259[/ATTACH]

 

[ATTACH=CONFIG]43260[/ATTACH]

 

All of the Chromebooks that are in use (dozens) have a Impero icon that is active (coloured), but so far only two are showing as visable thumbnails. My own account which show up in staff, does not. But I feel I am getting somewhere. Any idea why only some are showing as thumbnails?

 

[ATTACH=CONFIG]43261[/ATTACH]

[steven_layton_sl]

Hi @Mic_Impero, we use Meraki for our Wi-Fi. It is difficult to work out if there is a consistent version of Chrome that is not working as we block the Chrome:Settings address from students, so as a student we can't look at the version number. I'll look into changing this for a short period.

 

I contacted the local authority and we compared my Firewall settings to that of your documentation and it my settings look correct.

 

Oddly my Chromebook, which is running 5.0.3029.112, would not display my thumbnail yesterday, but is doing so today, and I know the version of Chrome has not changed.