[sims] Another SIMS/firewall thread....

[Koldov]

Hi,

 

So once again trying to get the Windows Firewall on... I have looked through a few other threads and not seen my exact question answered as I have the GPO configured with all the correct ports and exceptions etc....

 

Gave up last time due to the frustration, but now hoping things would be better and choosing the impending Windows 10 roll-out, to clear away some of the legacy bad practises (such as the Capita engineer who installed our SIMS saying that it would be much easier if we kept the firewall off), turns out he was right, but I'd like to try and do things properly.

 

However, seeing all the Windows 10 (and how to fudge it) workaround threads it seems we are forever cursed with trying to make square pegs fit in round holes...

 

So in the new screenshot, I can see the GPO has made the necessary changes to the firewall to allow the program through (it worked and installed the SOLUS agent and SIMS).

 

Unfortunately, on the next reboot it asks for permission to allow it through the public network! Do I need to explicitly deny this somehow? Do I just suppress it? I don't really want to prohibit notifications.

 

Can anyone please tell me why?! Has SOLUS tried to communicate on a public network and triggered the notification?

 

I don't want to ignore it (or have to do it manually on each computer) as I'm hoping to release this GPO in to the wild this half-term and I'm hoping not to have every teacher and admin/office staff member banging on my door the first day back.

 

Also can anyone tell me why there are 2 entries for everything (even on the same profile)? I presume SOLUS has added its own locally? So why then am I adding them all again via GPO?

 

[SpaceInvader83]

Sounds more likely that the network connection for whatever reason has changed to Public on the machine, the firewall rules will only apply to domain.

[TwistedHelixis]

As above. I have 1 server that after every reboot thinks it s on a public network. restart the network awareness service after a min and it should pickup the correct domain