synaesthesia

And another shining example as to why all windows updates with exception to zero day security patches should have a decent cooling off period (2 weeks imo) before being installed, automatically or otherwise. Instant installation in the name of any supposed requirements is absolutely insane, unfortunately. We should be able to rely on them being fully tested before hitting shelves, but at the same time we know testing often never begins until hitting the general populace

For us it was so intermittent it took nearly 6 months back and forth with Sophos and seems to have resolved itself. Clients would present exactly as you described, and a reboot or browser restart often resolved it. The best reason we could find for this happening was a delay in resolving the certificate chain possibly down to local network conditions; the only thing that changed since it stopped happening was a full WiFi network replacement. Wonder if, even if not relating to AV, a network delay might also be involved? I do know it never happened on any wired device. Was a strange one for sure, Sophos kept going round in circles after seeing logs, packet traces and thinking it may have been smoothwall or Impero. I hate intermittent issues we can't reproduce!

Is it definitely smoothwall cert showing up as the error? Had very similar but it was Sophos interfering despite having none of its HTTPS stuff enabled.

Sure - see In a nutshell, where mobile data is available should a device not be able to reach a website (in our case due to filtering) it will use other methods to get to that site, effectively loading it via mobile data even though wifi is available. How this is reported on filtering systems is yet to be seen - the current assumption would appear to be it shows as blocked, but in reality the user is browsing those sites apparently still connected via WiFi. My understanding may be flawed however and there's been precious little information other than this and a couple of news articles. It may be that we just "suck it up" but in my black and white mind I can't see how this could be usable.

Currently you might have to lock it down so it's only certain devices, which some might deem unfair. You can't offer BYOD to anyone using iPhones or iPads with mobile connectivity and remain KCSIE compliant. For this purpose we're looking at removing it entirely from 6th form.

Gemini is the last place to go to for anything Google related - it's knowledge of it's own systems is so poor that I would prefer to figure it out myself or come here. It's honestly awful!

Google place here, and I'm far from alone in say we wish we weren't Each has their foibles but being Google in a Windows environment can absolutely do one. It'd work quite well if we were chromebooked out across the board but nope. FIrmly of the opinion that either is a great option *when executed properly and with forethought*

That's not a bad shout actually. Google and 365 can both run entirely in the same browser profile or even browser window without ever conflicting, but then again I'd imagine they have a few more resources at hand to achieve this then most MIS providers

No worries, thanks John Working with multiple Google tenants on one browser all day rather ingrained that ability in the mind, so assumed it would/should be fine elsewhere but I learned the hard way

Does anyone know if, without incognito/separate browsers, it's possible to use multiple Bromcoms on the same browser? Just found out the hard way that having your main school and a virtual school open at the same time isn't something you should do, session cookies or something mean you can do *nasty* things on the wrong school! Horrible bug unless it's just a feature that needs turning on! (Had our main school window open to add a consent form, wanted to make sure I had it correct for the virtual school so moved it to one side, did the same change on the virtual - lo and behold, we now have duplicates on the main school!) I'm erring on the side of a feature before I say lazy coding!

Random question as we're not affected - what exactly is "Legacy SSO" in reference to please? We're only in our 2nd year so it may be that we've never seen any other type of SSO.

It's open source - what it can and cannot do is out in the open for the world to see. Usually that means it's twice as secure and a million times better than anything chock full of ads or cloud reliant. It does not need any privacy statements, it doesn't need anything at all - no more than you would for using Wordpad, or Notepad, or writing on a post-it note.

Not sure sorry

Thank you Alastair, appreciated The bromcom community forum was one place I'd not checked this morning!

According to the information sent out to some but very clearly not made public, it isn't related to Entra but specific to Bromcom. Not a huge breach for confidentiality purposes (no real PII for example) but user email addresses for staff & students, what SSO platform they use (MS or Google) and associated account, and PIN numbers in some cases (but apparently they're useless on their own)