sister_annex

RAID 1 is mirroring yes (I always look at the 1 as a mirror) I take it from your description that there were already existing partitions in place? Have you tried deleting any existing partitions and installing from there?

Well, although we haven't been told yet that it has been fixed we can now access these sites...

Yeah we have raised a call too... hopefully it's a quick fix

Adding to the Default shouldn't be an answer tbh... Yes, to get around it atm we have added some of them to the default rule as it's stopping our finance dept from accessing accounts, however, as they were working last week (and AFAIK we haven't changed any settings) I am unsure as to what the cause is.

Can people who use NS please try some of these sites for me, please? http://www.gov.uk http://www.hsbc.co.uk http://www.barclays.co.uk personal.natwest.com We can't access any of these sites due to a Certificate error - I just wanted to see if anyone else was experiencing the same or if it was just us. Cheers

@SchoolsBroadband why was the decision made for such a sync time? 5pm (or 5am) each day is useless for us - there are days when we have new users showing up at all times and I cant sort out their internet access until the following day. This means I then have to contact support to run a sync which in itself can take hours if doing it by email. According to the NS documentation (https://helpdesk.netsweeper.com/docs/5.3/#t=Directory_Sync_Docs%2FDirectory_Sync_Configuration%2FDirectory_Synchronization_Configuration.htm%23Change_Directory_Syncbc-32&rhtocid=_2_8_1_4_4), the Sync interval can be set as low as 10 minutes, now whilst I appreciate that 10-minute syncs for the many schools you have on the system would increase overhead, once an hour or every 2 shouldn't be so bad should it? Just my 2p

Which projector do you use for this?

Have you got Exchange Online Protection on your O365 tenant?

Atm, we can only add/edit shared lists and local lists (originally we could create them but not edit - spoke to SBB (Sean IIRC) and he sorted it) - that is about it when it comes to that. Creating/editing reports as standard. We also have access to the URL tools to help us trace requests and the 'request Log Files' function which allows us to see the requests that are coming through... The ache in the nuts atm is the constant requesting for Domain Syncs as it doesn't sync AD groups automatically (which apparently will be fixed in v6) also, 1 thing to note is a filter user must be at least a member of domain users as well as the filtering group that is assigned. oh and FYI, SBB are currently running version 5.3 - they are (apparently) going to be upgrading to V6.x during the summer holidays.

are you sending through a smart host?

We asked, and got access...

@witch does this not open up issues in terms of Safeguarding (and subsequently GDPR) with access to files that may contain confidential data?

We have 9 physical servers in our cluster and none are backed up. A recovery IMO takes almost as long as a full rebuild in most cases - a couple of hours with an OS install disk/USB and configuration steps that have been documented are just as good, and it's always good to start from scratch unless there is anything specific on the machine that needs recovering.

Our supply accounts don't have access to our shares (relevant work is passed on USB pens) - the account has access to the internet and the standard office apps (and some other bits of software) but not much else.

The SBB logs only track the public facing IP of our site so no way of tracking IP - Basically as soon as the request leaves site (based on the config mentioned above) there is absolutely no way of finding out who sent the request (or at least not to my knowledge from the logs anyway)

This is not what we were led to believe. From what I gather the username/password box should pop up if there is no NTLM source. The http://authportal/authportal/whoami.asp works, just no other website on the actual internet The problem with putting them all on their own, non-authenticated filter is that there is no ability to audit the traffic. This in itself is a safeguarding/prevent issue.

Our's don't even get that far... we can log in to our wifi, but the authportal constantly asks for auth and gets no further (yes we have got everything set up etc)

Can you post a screenshot of the following pages: http://authportal/authportal/whoami.asp and http://authportal/authportal/install.asp (scrub out the identifying stuff)

I'm also guessing with this there is no auditing of what user has accessed certain sites whilst using them. Thankfully we don't use Chromebooks, however, our BYOD is currently non-existent because of this reason, that is until we can find a viable solution to user internet tracking on these devices.

This is ours (with identifiers removed and will need renaming to a .pac file) - they can be more complex, but this works great for us - we host it on the same IIS server as the Authportal but using a different host header i.e. http://pac/proxy.pac & http://wpad.domain.local/wpad.dat there are extra steps needed to get wpad working (registry settings in DNS etc) however, if you're pushing your settings via GPP a pac file will be fine and Both Chrome and IE will use the same settings We have had no issues with this at all School.txt

You're welcome to have a copy of our PAC file if that helps?

hmmm we use a Pac/WPAD - I assume your switches are on the 172 range? (when we excluded IP Addresses previously we just used 192.168.* - or in your case 172.*)

No, we don't... Suppose it's worth asking what you are trying to achieve?

We used this

Did you have to do anything special? Rain dance, Sacrifice to the Gods?