Impero Edpro

[timbo343]

Does anyone run Impero Edpro? We have a Smoothwall and it would appear that something on the Smoothwall is blocking the live screens when they are being viewed remotely.

 

Impero Support seems to be non-existent at the moment.

 

We do not push out the Default Gateway via DHCP so all traffic is going through the proxy and then we whitelist all the traffic that we want to ignore. I'm struggling to find out what it is that we need to allow for the connection to be initiated. Once the Default Gateway is added a connection is initiated and then those using EdPro can see what is on the kids screens.

 

As soon as the default gateway is removed, the connection is lost.

 

All ports have been allowed on the firewall but this is not a firewall issue, it's a proxy issue.

 

Does anyone know what is needed for the live view to actually work? I have followed this guide https://support.imperosoftware.com/support/solutions/articles/44001820392-extended-edpro-url-ip-port-whitelisting but i'm not sure which part is needed for the live screens.

[Impero_support]

Hi, Thank you for your post, please feel free to PM me your contact details and I will arrange for a member of the support team to make contact with you.

 

Many thanks

 

Phil

[timbo343]

Thanks for the reply Phil, but i have already raised a case with the support team who have been unable to help and escalated the issue.

 

Surely i'm not the only one that runs a School network where the client domain machines do not have a default gateway?

 

After talking to the support guys at Smoothwall, we may have addressed the issue with the application or the services that the application uses to communicate with the Edpro.

 

I have performed a wireshark test on a machine and seen that the xirsys.com ip address shows ONLY when a default gateway is listed on the machine, otherwise the xirsys.com ip address does not show.

 

Would this mean the impero application that is on the Client machines does not work through proxy servers?

 

As stated, we do not push out a default gateway which prevents devices plugged in and unauthenticated access to the internet being granted, we instead push everything through a proxy meaning we can get away with students needing a default gateway.

[Steve21]

Surely i'm not the only one that runs a School network where the client domain machines do not have a default gateway?

 

[sNIP]

 

As stated, we do not push out a default gateway which prevents devices plugged in and unauthenticated access to the internet being granted, we instead push everything through a proxy meaning we can get away with students needing a default gateway.

 

Any reason you don't use your core switch/firewall as the DG? Rather than the ISP router etc? Then just use a default route to push that out to the Firewall/ISP router etc. Only things that should affect with the second hop would be things that are trying to bypass it either way, as anything going via proxy etc would act in that manner anyway

 

Steve