Using Smoothwall Offprem

[JATSO]

Hi All,

 

We have been issued some Chromebook's for remote learning but the sticking point is filtering.

We have our own onsite smoothwall but how do i get our Chromebook's to point to the our smoothwall when thge pipuil connects it to their home wifi?

 

Does anyone know how to do it?

I have been directed to this article: https://kb.smoothwall.com/hc/en-us/articles/360004033739-Syncing-G-Suite-from-the-On-premise-Appliance

 

but unable to find the first part about setting up the service in GSuite's console.

 

Thanks

[JATSO]

Looks like I have to perform these steps all to do with creating a json file first, anyone on here done this and would like to help out?

 

 

1 - Configure & Authorize Service Account.

In your Google API (Cloud Platform) console:

 

Create a service account, see the Google help topic, Create a service account:

Make sure you enable the Admin SDK API for the service account.

Make sure that you take a copy of these:

Client ID

JSON key

When creating your service account, DO NOT perform the optional task of assigning a role to the account. Leave this blank.

In your Google Admin console:

 

Amend your advanced security settings to add API client access for your service account, see the Google help topic, OAuth: Managing API client.

Client Name: Type the Client ID for your Google service account.

One or More API Scopes: "https://www.googleapis.com/auth/admin.directory.group.readonly,https://www.googleapis.com/auth/admin.directory.orgunit.readonly,https://www.googleapis.com/auth/admin.directory.user.readonly"

Block multiple sign-in access for your users, see the Google help topic, Multiple sign-in access:

User & Browser Settings:

User experience:

Multiple sign-in access: "Block multiple sign-in access for users in this organization."

[TechMonkey]

What about the Smoothwall Connect for Chromebook extension? Or has that been discontinued?

https://kb.smoothwall.com/hc/en-us/articles/360002134924-Installing-the-Connect-Filter-Extension-on-Chromebooks-Using-G-Suite

 

Not used it in anger but I'm sure we got it working easily when we looked into it

 

EDIT: Looks to be a setup PDF too - https://help.smoothwall.net/FilterFirewall/Content/Resources/PDFs/ConnectforChromebooksSetupGuide.pdf

Edited November 18, 2020 by TechMonkey

[JATSO]

What about the Smoothwall Connect for Chromebook extension? Or has that been discontinued?

https://kb.smoothwall.com/hc/en-us/articles/360002134924-Installing-the-Connect-Filter-Extension-on-Chromebooks-Using-G-Suite

 

Not used it in anger but I'm sure we got it working easily when we looked into it

 

EDIT: Looks to be a setup PDF too - https://help.smoothwall.net/FilterFirewall/Content/Resources/PDFs/ConnectforChromebooksSetupGuide.pdf

 

I have followed the first one and applied it to Devices\Chromebooks in our Google console, don't think its working though as i can connect to you tube and pupils can't when onsite.

 

I will try the other guide. Thanks

Edited November 18, 2020 by JATSO

[5tu]

I would contact your Smoothwall account manager and ask to be setup on the cloud filter.

[JATSO]

I am hoping now that smoothwall has done their bit,

 

Does anyone know what I need to do in the Google console to force the chromebooks to use the ipaddress&port that I have been given?

 

So this is what I had to do on the google side to get the json file and key:

 

So there are 2 parts to this, the first being enabling API access for the Admin SDK and the second is creating a GCP project to generate the service account. Now to enable API access for the Admin SDK, it looks like the documentation that you are following is a bit out of date, so to enable access please.

1. From the Admin console Home page(admin.google.com),

2. Click the menu in the top right and then Security and then API controls.

3. Under App access control, click Manage Google Services.

4. Click on "Google Workspace Admin" and then "change access"

5. Select "Unrestricted" and then change.

 

1. Go to https://console.cloud.google.com/

2. Click on the project picker in the top right and make sure it says "Select from school.sch.uk"

3. Click new project and name it "Smoothwall" for example

4. When the project finishes being created use the project picker again to access the new project

5. Click on the menu in the left and then APIs & Services > OAuth consent screen

6. Select User Type, Internal and then "create"

7. Fill out App information and the Developer contact information, This information would only be used if you were making a public app so you can use your email address and "Smoothwall" for the App name

8. Hit "Save and continue" and you don't need to fill out the scopes page so hit "Save and continue" again and then "Back to Dashboard"

9. Click credentials from the menu on the left

10. Click "Create Credentials">"Service account" on the top of the page

11. Name the service account then click "create"

12. Click "Select a role" and set Project>Owner then hit "Continue" and "Done"

13. Click on the service account you just created and then "Add key> Create New Key"

14. Select JSON and then "create", The JSON key will be downloaded and you can provide that to Smoothwall

 

 

Thanks

Edited November 25, 2020 by JATSO

[Primus]

Contact Smoothwall support as @gybe78 and get cloud filter setup, it's free and really good.