Web Filter that can authenticate against AAD

[snagrat]

In the process of setting up Azure AD and Intune. Due to open a new school later this year and am looking at solution so we can have zero servers.

 

Just looking for a filtering product that can authenticate against Azure AD.

@SchoolsBroadband - Can inline Netsweeper do this?

 

Also interested if Smoothwall is able to do this.

[free780]

I asked Smoothwall and say not currently. I guess you could use a capture page or SAML. How do people using chrome books do it?

[houlta]

Hmm I can't see how this is going to be possible as azure AD isn't structured the same as local AD. Unless+until Microsoft provide something in the way of cloud based app? It'd cost more than having a local AD though

A 100% cloud based setup would be a disaster waiting to happen imho. Might work for a primary school perhaps? Whats the logic behind the idea?

[houlta]

The only way I can see of doing this is with something like this by the way- https://jumpcloud.com/education-highered-directory-service-pricing/ then passing it through cloud smoothwall or something like exa's surfprotect quantum for example.

Depending on the amount of users and sort of logging you're going to expect though, again I can't see how this is cost effective or even as secure as doing all this locally let alone as fast and reliable.

I can think of a scenario where this would be advantageous but it would involve having a distributed mobile workforce.

[Arthur]

How do people using chrome books do it?

When my school had a Smoothwall webfilter I setup Connect for Chromebooks which uses G Suite as a directory service.

[free780]

I guess smoothwall need to write a method of using azuread as the directory source. The way you could do it now is point your on prem radius to AzureAD via a 3rd party. This presumes 1:1 devices as 802.1x auth doesn't work on shared devices.

[snagrat]

I know others such as Lightspeed can easily authenticate against Google, so I can’t see AzureAD being much different just that no one has done it yet.

[Mr.Ben]

I'm looking around at the minute. Netsweeper and iBoss have both confirmed that they support AzureAD

[Securly_Marc]

Hi @snagrat - Securly are able to do this.

 

Feel free to contact sales if you want to take a look

[snagrat]

I'm looking around at the minute. Netsweeper and iBoss have both confirmed that they support AzureAD

 

That’s sounds promising.

 

Let’s see if @Netsweeper can contribute

[mukz]

That’s sounds promising.

 

Let’s see if @Netsweeper can contribute

 

They definitely can do it! Netsweeper confirmed it at the LGFL conference.

[Netsweeper]

That’s sounds promising.

 

Let’s see if @Netsweeper can contribute

Hi snagrat,

 

Yes, we do support this. Have a look at our docs for Azure here:

 

https://helpdesk.netsweeper.com/docs/6.2/#t=Directory_Sync_Docs%2FAzure_Directory_Sync%2FAzure_Directory_Sync.htm

 

There are a few options we can discuss depending on your current setup. It sounds like you are a customer of Schools Broadband, I would recommend speaking to them and we can work together on your requirements.

[SchoolsBroadband]

Hi @snagrat

 

Netsweeper can definitley do this as it was launched in a recent software update.

 

@RobMason will know if we are on a build that supports it. I think we are but I'm on holiday at the moment so will check with Rob tomorrow when I'm back.

 

Thanks

 

Dave

 

In the process of setting up Azure AD and Intune. Due to open a new school later this year and am looking at solution so we can have zero servers.

 

Just looking for a filtering product that can authenticate against Azure AD.

@SchoolsBroadband - Can inline Netsweeper do this?

 

Also interested if Smoothwall is able to do this.

[RobMason]

In the process of setting up Azure AD and Intune. Due to open a new school later this year and am looking at solution so we can have zero servers.

 

Just looking for a filtering product that can authenticate against Azure AD.

@SchoolsBroadband - Can inline Netsweeper do this?

 

Also interested if Smoothwall is able to do this.

Just to confirm, our release of Netsweeper can support Azure AD. If you need a hand setting it up just give us a call.

 

Thanks,

[Opendium_Steve]

I know others such as Lightspeed can easily authenticate against Google, so I can’t see AzureAD being much different just that no one has done it yet.

Can't comment on AzureAD, but beware that I don't believe Google's directory service can be used as a RADIUS backend to authenticate 802.1x wifi.

[ibpalle]

Can't comment on AzureAD, but beware that I don't believe Google's directory service can be used as a RADIUS backend to authenticate 802.1x wifi.

 

Not without an expensive addon. Last I looked at this there was a RADIUS extension service to Google from a third party but it was not free by any means....

[ITGURU]

Is there a contact on here that could me with some details and costings on Netsweeper solution?

TIA.

[SchoolsBroadband]

@ITGURU we can. I'll send you a PM

[chaplic]

Zscaler can do it, is very good, would imagine pricey.

[Securly_Chris]

Hi snagrat,

 

Securly Filter natively supports Azure / Microsoft 365 as your identity provider. No need for 3rd party connectors or on-premise domain services, just sign-in with your Microsoft credentials and away you go!

 

As has been mentioned Azure is different to traditional AD but you can still use policy based filtering, they've just switched from OUs to groups instead.

 

Happy to demo how that would work in pure azure environment. Drop me or one of the team a PM.

 

- Chris