FMS - ACCESS EDUCATION LINKS - HCSS (budget) - LGfL filtering issue?

[Koldov]

My business manager has asked me to look into a problem with the finance software the Borough has asked them to use.

 

Unfortunately I don't really deal with the software packages here so I don't really know where to start troubleshooting...

 

As far as I know they use HCSS to do the finance/budget calculations and then use a software 'companion' from ACCESS to pull that information down and import it into FMS.

 

Unfortunately when he tries to use the ACCESS EDUCATION companion software it tries to open a website/portal and fails (there is a pop-up saying waiting for credentials, but he is already signed in on another tab - have also tried ).

 

I have run an IP report on his PC to rule out filtering and allowed the url specified on their support page (although there is an IP and port number that I need to check with Atomwide is allowed through the firewall). Also, I think there seems to be some reference on that page to that url being a .json configuration file that may be blocked somehow through an SRP.

 

Does anyone else use this configuration for their Finance Deptartment?

[dcwhitworth]

We had firewall issues with this software. It required having https strict mode disabled. The company have a PDF detailing the issues I think, so worth contacting their support.

[dcwhitworth]

Here's the contents of the PDF -

 

Program: Web Companion

Connection type: TCP

Address: http://companion.hcss-web.co.uk

IP Address: 162.13.175.251:80

Smooth wall filtering – This is web filtering. Most schools will have this installed on the server. There is a mode on the software called HTTP Strict mode. This, by default is enabled and has been known to cause a lot of issues.

This is option can be found under “Web Proxy>>Web Proxy>>Settings” (Advanced>>Web filter options).

At the time of writing it is not possible to disable ‘strict mode’ using the web interface (a known bug), and hence you will need to raise a support case with Smoothwall support to get this option disabled”.

Squid Proxy – This is more than likely to be separate from the actual web server. If possible please add the command line “ignore_expect_100”.

Proxy Settings – You can bypass the proxy settings in internet explorer. Select the settings option. Then select internet options and then connections. Untick the use proxy settings. This will usually allow access to the web companion and can be changed back once the import/export has been completed.

Config File - The config file for the web companion can be edited with the following details:

This allows the proxy address access if the web companion is failing to start.

Anti-Virus – Please check if the anti-virus program is not allowing the web companion to run. It may have been blocked or the anit virus may see the program as a threat and stop it from connecting to the internet.

Account Control – In Microsoft Windows 7 and Windows 8 type UAC into the search bar. Ensure that it is set to ‘never notify’.

Administration Privileges – Please ensure that you are running the program with administrator privileges. You can either check you are logged on as an administrator or right click on the program and select run as administrator.

LA Network – If you are supported by your LA or your network traffic is directed through your local authority please establish with them that the web companion has not been blocked and has been added to any exceptions lists.

FMS Users – If the web companion crashes when you log into the FMS section of the web companion the most likely cause is that the following line is missing from the SIMS.INI (C:\Windows)

Finance Directory= C: \Program Files (x86)\SIMS\FMSSQL should be under SIMSSetupsDirectory=C: \SIMS\Setups

If none of the above is successful please download the fiddler program.

http://www.telerik.com/fiddler

This is a free web debugging proxy that will show where the web companion is been blocked.

Helpdesk – 0844 249 0997

Monday to Friday 8:30 to 5:30

[Koldov]

Wow! All that in a piece of software for the 'education' sector - "Access Education (formerly HCSS Education) offers industry leading software, designed by experts, that provides efficiency and engagement across your whole educational establishment giving you the freedom to provide outstanding education"

 

Bypass the proxy, bypass the filtering, bypass the anti-virus, turn off UAC, run the program as admin, use Java, add exceptions, use a third party program to find the error....

 

We don't have Smoothwall so it would be dealt with by LGfL if it is a firewall issue.

 

When was this? Is that recent?

 

I think that may be refering to the older HCSS companion...?

 

We have been told by the Borough to download and use a newer companion software from ACCESS EDUCATION UK (which used to be HCSS).

 

[url=]https://www.theaccessgroup.com/education/[/url]

[dcwhitworth]

Yes it was for an older version which we no longer use. Glad to be rid of it to be honest. Far too many companies seem to churn out software where they think it is acceptable to turn off security features rather than they write the software properly.

[FishCustard]

Yes it was for an older version which we no longer use. Glad to be rid of it to be honest. Far too many companies seem to churn out software where they think it is acceptable to turn off security features rather than they write the software properly.

 

Yep. I used to do some contract software development, and the amount of "we assume the user is a local admin with UAC off" nonsense around...

[supportman]

I thought HCSS was all online now?

[matt40k]

...But FMS isn't

[Koldov]

Looking through the event logs I am seeing a TLS error....?

 

 

Googling hard as we speak, but if anyone has any suggestions or knows what this means please shout!!!

 

Getting a lot of pressure from the Business Manager and Bursar to sort this out now, as budgets can't be finalised....

[Koldov]

UPDATE: Seems this is part of the design of the software...

 

The companion has to be installed on the machine that is hosting SIMS/FMS!

 

So now I have to let my Business Manager on to the server....