Smoothwall - Student Usernames

[Aldmi]

We recently had a Smoothwall firewall installed, replacing our previous Fortinet device. One of the engineers set it up to replicate our previous configuration, including alerting myself and the safeguarding lead whenever a student attempts to access restricted content (e.g., pornography).

The issue we're facing is that these alerts only provide the IP address of the device. To identify the student, I currently have to:

 

1. Check the onsite DHCP server.
   
2. Block the device.
   
3. Wait for a student to report that their internet isn’t working.
   

This process is time-consuming and inefficient.

I’ve heard that Smoothwall can be configured to require students to log in using their Active Directory accounts, which would make identifying individuals much easier. However, I haven’t been able to find any guidance in the help section about setting this up.

Does anyone know if this is possible and, if so, how to configure Smoothwall to require AD logins for personal devices? Any advice would be much appreciated!

[DWilson1997]

We recently had a Smoothwall firewall installed, replacing our previous Fortinet device. One of the engineers set it up to replicate our previous configuration, including alerting myself and the safeguarding lead whenever a student attempts to access restricted content (e.g., pornography).

The issue we're facing is that these alerts only provide the IP address of the device. To identify the student, I currently have to:

 

1. Check the onsite DHCP server.
   
2. Block the device.
   
3. Wait for a student to report that their internet isn’t working.
   

This process is time-consuming and inefficient.

I’ve heard that Smoothwall can be configured to require students to log in using their Active Directory accounts, which would make identifying individuals much easier. However, I haven’t been able to find any guidance in the help section about setting this up.

Does anyone know if this is possible and, if so, how to configure Smoothwall to require AD logins for personal devices? Any advice would be much appreciated!

 

It sounds that user authentication is not setup - take a look at this

 

Smoothwall Filter & Firewall: Authentication Methods – Help Centre

 

I am not sure what the best thing to use is for local AD now, as we use the cloud filter module - but IDEX is probably what you are going to want

[3s-gtech]

The normal setup is to install the Smoothwall iDex client on a DC, then enable iDex on the Smoothwall. That should then show the AD user on the Smoothwall logs instead of just the IP.

 

Should. It doesn't always work, but it's okay (you can cross-check easily enough against other logs to that IP).

[tom_newton]

Idex is a good idea - it's likely very similar to how the forti used to work

[Aldmi]

It seems like something has been partially set up, as Smoothwall is connected to Active Directory and is filtering based on the groups students belong to.

 

[tom_newton]

I would suggest to put in a support ticket (feel free to put the number here so I can track it).