synaesthesia

And another shining example as to why all windows updates with exception to zero day security patches should have a decent cooling off period (2 weeks imo) before being installed, automatically or otherwise. Instant installation in the name of any supposed requirements is absolutely insane, unfortunately. We should be able to rely on them being fully tested before hitting shelves, but at the same time we know testing often never begins until hitting the general populace

For us it was so intermittent it took nearly 6 months back and forth with Sophos and seems to have resolved itself. Clients would present exactly as you described, and a reboot or browser restart often resolved it. The best reason we could find for this happening was a delay in resolving the certificate chain possibly down to local network conditions; the only thing that changed since it stopped happening was a full WiFi network replacement. Wonder if, even if not relating to AV, a network delay might also be involved? I do know it never happened on any wired device. Was a strange one for sure, Sophos kept going round in circles after seeing logs, packet traces and thinking it may have been smoothwall or Impero. I hate intermittent issues we can't reproduce!

Is it definitely smoothwall cert showing up as the error? Had very similar but it was Sophos interfering despite having none of its HTTPS stuff enabled.

Sure - see In a nutshell, where mobile data is available should a device not be able to reach a website (in our case due to filtering) it will use other methods to get to that site, effectively loading it via mobile data even though wifi is available. How this is reported on filtering systems is yet to be seen - the current assumption would appear to be it shows as blocked, but in reality the user is browsing those sites apparently still connected via WiFi. My understanding may be flawed however and there's been precious little information other than this and a couple of news articles. It may be that we just "suck it up" but in my black and white mind I can't see how this could be usable.

Currently you might have to lock it down so it's only certain devices, which some might deem unfair. You can't offer BYOD to anyone using iPhones or iPads with mobile connectivity and remain KCSIE compliant. For this purpose we're looking at removing it entirely from 6th form.

Gemini is the last place to go to for anything Google related - it's knowledge of it's own systems is so poor that I would prefer to figure it out myself or come here. It's honestly awful!

Google place here, and I'm far from alone in say we wish we weren't Each has their foibles but being Google in a Windows environment can absolutely do one. It'd work quite well if we were chromebooked out across the board but nope. FIrmly of the opinion that either is a great option *when executed properly and with forethought*

That's not a bad shout actually. Google and 365 can both run entirely in the same browser profile or even browser window without ever conflicting, but then again I'd imagine they have a few more resources at hand to achieve this then most MIS providers

No worries, thanks John Working with multiple Google tenants on one browser all day rather ingrained that ability in the mind, so assumed it would/should be fine elsewhere but I learned the hard way

Does anyone know if, without incognito/separate browsers, it's possible to use multiple Bromcoms on the same browser? Just found out the hard way that having your main school and a virtual school open at the same time isn't something you should do, session cookies or something mean you can do *nasty* things on the wrong school! Horrible bug unless it's just a feature that needs turning on! (Had our main school window open to add a consent form, wanted to make sure I had it correct for the virtual school so moved it to one side, did the same change on the virtual - lo and behold, we now have duplicates on the main school!) I'm erring on the side of a feature before I say lazy coding!

Random question as we're not affected - what exactly is "Legacy SSO" in reference to please? We're only in our 2nd year so it may be that we've never seen any other type of SSO.

It's open source - what it can and cannot do is out in the open for the world to see. Usually that means it's twice as secure and a million times better than anything chock full of ads or cloud reliant. It does not need any privacy statements, it doesn't need anything at all - no more than you would for using Wordpad, or Notepad, or writing on a post-it note.

Not sure sorry

Thank you Alastair, appreciated The bromcom community forum was one place I'd not checked this morning!

According to the information sent out to some but very clearly not made public, it isn't related to Entra but specific to Bromcom. Not a huge breach for confidentiality purposes (no real PII for example) but user email addresses for staff & students, what SSO platform they use (MS or Google) and associated account, and PIN numbers in some cases (but apparently they're useless on their own)

Has anyone else had word of a Bromcom SSO breach culminating but starting around a month ago? Had comms around the trust regarding this but can't see anything here, ANME or anywhere else!

A little reprieve, support for cnMaestro Cloud to continue throughout October whilst they hunt for buyers. https://www.cambiumnetworks.com/wp-content/uploads/Cambium-Networks-Company-Statement-Sep-23-2026-Update.pdf

Indeed, it would still seem very sensible to ensure you're migrated before the 1st. Best case scenario, you've a system which still connects to an anchor account and you can onboard/remove devices. Worst case, you can't and we're in the same situation.

Heads up if anyone is migrating bit by bit, having some APs on local and some on cloud really causes roaming between them to be a pain. Clients hang on to the "old" AP as long as they possibly can before finally giving up and connecting to new as opposed to be entirely seamless.

Discussion including cambium (now airspan) employees on their forum say that there are no plans to support enterprise WiFi as part of cnmAestro going over and migration to on prem is still current advise. However it does rather look like the anchorless version might not be coming... Hopefully I'm wrong there.

Yeah, I'm still in two minds. Our supplier told us earlier today to give it until next week (prior to this announcement) before going on-prem. As it stands, I'm leaning towards still going on prem next week; still compliant as far as centralised management goes, and if cloud stays then we can still onboard - not really losing much. Need more information really, it's a pain when there's a split purchase especially as part of it just happens to manage the bits we need. Would be nice if the DfE would say something regarding the CtC aspect of it for ours!

Just read this, so from what I understand although they aren't supporting enterprise WiFi they are keeping cnmAestro running as+is. That's good news at least, for continuity purposes.

Keeping a close eye on this - as it stands it appears as if there's no choice but to remove newer IOS devices from BYOD and guest networks until there's a workaround/solution.

Trilan have always been fantastic for me, used in 2 schools now Also a positive experience with SCG (Southern Communication Group/Southern Telecoms)

SignInApp now has Paxton integration. Quite costly though at around £1300 but that includes the MIS integration and a few more bits.