Securly - Is it all that?

[TheRobins]

Afternoon all,

 

I am in the middle of looking at our broadband renewal. Whilst I have done much research on the filtering systems recommended Securely doesn't seem to have much coverage on here.

 

Is any one using this in a live environment, and pro's and con's so far with the system in use?

 

Thanks,

[BKGarry]

Paging @localzuk

[mwnci]

We've rolled it out across our MAT of 28 schools a few months ago. It has certainly been a positive move from our previous platform (Sophos XG firewalls).

The filtering itself has worked very well as you would expect. The big benefits for us have been around the fact that it is independent of our network so all devices are filtered, regardless of location. Secondly, it is so much easier to look at the logs, spot trends and identify potential issues compared to other platforms that I have used.

 

As things stand, the move to Securly has been a positive one.

[TheRobins]

We've rolled it out across our MAT of 28 schools a few months ago. It has certainly been a positive move from our previous platform (Sophos XG firewalls).

The filtering itself has worked very well as you would expect. The big benefits for us have been around the fact that it is independent of our network so all devices are filtered, regardless of location. Secondly, it is so much easier to look at the logs, spot trends and identify potential issues compared to other platforms that I have used.

 

As things stand, the move to Securly has been a positive one.

 

Thanks for the above, it seems to be quite intuitive but not heard many people using it. Thank you for the feedback, very positive to hear of a largescale rollout that has worked well.

[paulkerton]

We are currently evaluating both Securly and Lightspeed's cloud platform for filtering as and when our broadband contract comes up.

We're definitely moving away from on-prem.

[dsmith8]

We've just transitioned a few of our schools over to Securly as it's been really smooth user based login does it's job and the fact it works anywhere with the Smart PAC is great.

[rogerdnixon]

We have used it for many years and it just works. Rolled out across our MAT now. Easy to deploy.

[Securly_Marc]

Hi All,

 

Thanks to those for the positive feedback!

@TheRobins - If you want to speak to any of our schools, let me know and I can put you in touch with a few of them who have similar requirements to what you're looking for - If you're attending the schools and academies show this week per chance, we also have Greenwood Academies talking about how they successfully deployed Securly to their 20k students and the benefits they have seen - it's at 10.30am on Wednesday the 28th.

 

There's not a lot of forums on here asking about problems they've run in to with Securly, or difficulty they've had setting it up and reaching out for help - but we see that as a good thing

 

If you want to run through anything, just give me a shout!

 

Cheers,

 

Marc

[Lightspeed_SE]

I noticed someone already mentioned Lightspeed, but if you were interested in looking at us in more detail, feel free to send me a PM and we can get a quick demo or an eval set up for you Edited April 26, 2021 by elsiegee40
Lightspeed now Sponsors the Windows 10 forum. Sponsor badge to follow

[TheRobins]

Hi Mark, I am not attending but sure it was yourself that gave me a demo, anyway it seems very impressive.

 

Hopefully decision soon...

[Securly_Marc]

Sounds good.

 

Here if you need us!

[BlueSkies]

Hi All,

 

If you're attending the schools and academies show this week per chance, we also have Greenwood Academies talking about how they successfully deployed Securly to their 20k students and the benefits they have seen - it's at 10.30am on Wednesday the 28th

Cheers,

Marc

 

Hi there, I have just visited the Schools and Academies Show website - but can't see the session you mentioned in the Agenda ... could you point me to it please?!

 

Thanks

[Securly_Marc]

Hi @BlueSkies.

 

Yep of course - you can register using this link: https://saashowonline.app.swapcard.com/event/the-schools-and-academies-show-and-edtech-update/planning/UGxhbm5pbmdfNDIzMTYw

 

Thanks,

 

Marc

[localzuk]

Paging @localzuk

My experience with Securly is that a) it works well but b) it is pretty inflexible.

 

The safeguarding stuff in it is great, receiving notifications of worrying searches is very useful especially in these trying times.

 

But, there are some aspects that I feel are missing. Eg. Regex rules.

Reporting is a little bit limited too. I had an issue where I needed the details of Youtube videos a child had viewed. The site limits this to a certain number it'll list for you, after which I had to go to support and they sent me a spreadsheet - which obviously didn't then have the previews/titles etc...

 

Another area I'd like to see better filtering for is importing URLs - at the moment I have to whitelist each individual video manually - there's no way to import a list of URLs. I tried sending a list to support a long while ago and nothing ever happened with it.

[TechMonkey]

Sorry to go off topic but how does a cloud filtering system ensure all devices get passed through it? So if someone brings in a device and manages to get on to Wi-Fi or network with out putting the cloud system as the proxy, do they get unfiltered access?

[localzuk]

Sorry to go off topic but how does a cloud filtering system ensure all devices get passed through it? So if someone brings in a device and manages to get on to Wi-Fi or network with out putting the cloud system as the proxy, do they get unfiltered access?

So, with Chromebooks, it is an enforced extension for them via Google Workspace. It can't be uninstalled.

[TechMonkey]

So, with Chromebooks, it is an enforced extension for them via Google Workspace. It can't be uninstalled.

 

So fine for devices we control and can enforce, but anything else it can't be guaranteed?

[localzuk]

So fine for devices we control and can enforce, but anything else it can't be guaranteed?

Yes, if it isn't your device, you have no power over it. Which is what I'd expect.

[TechMonkey]

Yes, if it isn't your device, you have no power over it. Which is what I'd expect.

 

Me too, but at least with onsite you control the gateway so can force all traffic through a filtering box. Interesting. Many thanks.

[rogerdnixon]

There are three filtering tools - extension for ChromeOS, SmartPAC for other managed devices - both give on and offsite filtering. Onsite you also have DNS based filtering - so you point your DNS to Securly. You still need a firewall of some description, reroute other DNS and use your firewall to block VPNs etc if you have unmanaged devices.

 

So all devices are filtered onsite - managed or unmanaged. They also have settings for guests that mean they don't need the SSL cert installed.

[TechMonkey]

There are three filtering tools - extension for ChromeOS, SmartPAC for other managed devices - both give on and offsite filtering. Onsite you also have DNS based filtering - so you point your DNS to Securly. You still need a firewall of some description, reroute other DNS and use your firewall to block VPNs etc if you have unmanaged devices.

 

So all devices are filtered onsite - managed or unmanaged. They also have settings for guests that mean they don't need the SSL cert installed.

 

So with the DNS based filtering you can guarantee someone will go through the filtering, even if a user sets their own DNS servers?

[rogerdnixon]

Yes - that's a fairly basic firewall function - just block outbound port 53 or better still redirect all DNS to Securly DNS - so it does not matter what DNS settings they use it all goes to whatever is set on your gateway - in this case Securly DNS. We tend to use either Unifi USGs or ClearOS VMs - but you could you PFSence or whatever you like - they all do this sort of stuff.

[TechMonkey]

Yes - that's a fairly basic firewall function - just block outbound port 53 or better still redirect all DNS to Securly DNS - so it does not matter what DNS settings they use it all goes to whatever is set on your gateway - in this case Securly DNS. We tend to use either Unifi USGs or ClearOS VMs - but you could you PFSence or whatever you like - they all do this sort of stuff.

 

Good point. We block all DNS bar ones we have nominated to stop ransomware and other malware phoning home.

 

I guess it is just a change in mindset, as with most cloud systems. It just feels wrong to not have a filter on the main line, with it 'out there' it feels less secure and more easily bypassed.

[rogerdnixon]

We have have used at one secondary for years and its never been an issue. Expanded across the rest of the trust and its is one of those things that just works. From an IT point of view you set it up and forget almost. Might be different to what you are use to - but it does work well, and having moved schools from Smoothwall, Netsweeper and others - its a breath of fresh air and stuff just works.

[TechMonkey]

Is that Securly or another?