netsweeper / sbb / chrome agent

[SirAlan]

Hi all

 

Any advice please.

 

We are an SBB customer and netsweeper are unable to offer direct support.

 

We have PCs and AD all setup so users logging in receive the correct netsweeper policy on their windows devices as the netsweeper agent is installed.

 

We also require the same users to be able to login to chromebooks. Ideally chromebooks are setup with the following OUs: Users>Staff & Users>Students. This way the JSON file for netsweeper can be set at user lever and the appropriate filter applied.

 

With this setup it seemed to cause an issue with staff using a PC as the agent on the pc was showing the staff policy and the chrome browser was also pulling the JSON and showing the access is denied page and applying the default policy for netsweeper which was set to student.

 

The setup seemed to be working until the beginning of June.

 

SBB have not yet been able to provide a solution other than removing the JSON from google admin which then leaves us with filtering issues on chromebooks. Netsweeper were able to provide some information to me and indicated it should work along with the following information;

 

The WAgent 4.51.53.53 for Chromebooks was released in the past few days to fix a Manifest V3 issue that impacted whatismyfilteredip_reported_ip on Chromebooks.Also, due to Google enhancing security, you need to use https for server connections, for example -d https://wagentchrome.schoolsbroadband.net in the Google admin configuration JSON.

The https being added to the JSON does not work for us and the URL SBB provided that works on chromebooks is -d chromewagent.schoolsbroadband.net which also differs from netwsweeper as they have it the other way around wagentchrome

 

Any advice would be greatly appreciated or if I have not made it clear and need to provide more info please let me know.

 

TIA!

[PaddyNewman]

Perhaps I'm confused, but you say PC agent and Chrome... Do you push the chrome agent to pc versions of chrome? If so I'd probably not do that and stop that extension being pushed to windows pcs, wagent is enough.

[whartomt01]

We had the same issue.

Ask schools bb to make the agent work only on chrome os. I think since the latest update it’s defaulted back to all OS. It should show ‘Wrong OS’ message or something similar when on windows. Or remove the windows agent and stick with the chrome extension (but it doesn’t perform too great on windows).

They should be able to turn it off straight away for you.

 

 

There was an issue with the new chrome agent not detecting users even though the json was correct. Sam at schools bb was great. Multiple remote sessions and then going back to netsweeper and other at schools bb. All issues sorted last week for us.

[SirAlan]

Hi, the pc agent is pushed through GPO to cover windows machines and all browsers. The chrome agent is installed through Google admin for those using Chromebooks.

 

How can we get them to work together

[whartomt01]

Just ask schools bb to set the chrome agent to only work on chrome OS. You don’t need to change anything else

[SirAlan]

Just ask schools bb to set the chrome agent to only work on chrome OS. You don’t need to change anything else

Great, love simple solutions, will request Monday. Thank you

[PaddyNewman]

Yeah that is an option. I would imagine that you should only roll out the chrome agent to chrome devices and the MSI to windows devices.

[whartomt01]

It’s an extension. You send out to users not devices. So you have no choice

[PaddyNewman]

I'm either confused, or mistaken.

 

Pc should have MSI.

Chromebooks have extension.

 

Don't mix, no problem.

[whartomt01]

I'm either confused, or mistaken.

 

Pc should have MSI.

Chromebooks have extension.

 

Don't mix, no problem.

 

You can’t deploy an extension to a Chromebook. Only a user. So if you sign into chrome on a windows device you get that extension too. Unless I’m blind anyway which is quite possible

[PaddyNewman]

I've never used chrome in Windows with a school account so quite likely entirely my fault, but the OS filter in Netsweeper will block it from Windows Chrome.

I've had very little dealings with Google and it's admin, but would assume it would only target managed devices hence the need for those licences.