dapaulio

I 2nd this. Denied and move on. Too many phishing emails come from “trusted” addresses and la addresses.

sorry to ressurect this thread. cloud filter synced with on prem smoothwall. how long does it take to sync a policy change made on smoothwall. and is there a way if shortening the sync time for the logs. i understand i can get the logs directly off the client but this has proven to be difficult at times with gaining access. and with logs 30-60 mins behind live events its difficult to put in a solution then to wait for the next sync. Someone mentioned smoothwall.cloud logs are better. i dont seem to be registered for it on the site in question. advice welcome

No but I’m sure I had to poke holes on the windows server firewall for comms between mf server and mf devices. For test purposes if you disable the server firewall does it stabile the connection

Have you tried whitelisting their Cdn also I am finding the following Cdn

Normally I would suggest fibre over/underground would be better practice and future proof the building for expansion but the cost far outweighs the value add. if you only getting data to a couple workstations and phones I did a similar project installed a switch cab as an edge cab in a suitable area of the building where a fibre could be laid to in future but uplink with a point to point using unifi nano. I cabled all my endpoints back to this cab. This was near enough a decade ago and just in the last year the building ict requirement expanded large enough to warrant the fibre to be installed. The fibre just replaced the nano uplink on the switch.

Thank you all for your comments and I am very much in support with keeping smoothwall within all of our schools. Please keep them coming as at the moment I am kicking back against our accounts teams who are no doubted just trying to find a cheaper solution

There have been some chatter about alternatives to smoothwall and umbrella has been pitched, but before the last month I never heard of them nor googling reviews there is little to nothing out therein terms of reviews. What is everyone else thoughts and opinions.

I have nothing positive to say about this company. We moved to them from having internal kitchen staff. We found out They provide a service (term put loosely) expect the school to provide the hardware to run the cashless system and train their staff to use the tills and they even expected us to buy a printer for them as well so they could print their menus and labels. Meanwhile quality of food looked great during the start of the service (I called this the honeymoon period) but as time progressed the quality, the care and presentation deteriorated. They were out come the end of contract.

Anything like that use Cdn planet. Add it to your tool box [emoji2]

So are you trying to add search terms to safeguard lists that you want notifying of? I’m not sure smoothwall has this capability as the list definitions are updated centrally. You can block search terms by adding them to a category with the block action and expanding advanced but this won’t be reported and notified. (Unless smoothwall bods can correct me) However if you have the likes of netsupport etc you can add keywords to their safeguards lists.

You wouldn’t but thought that be obvious. I was referring to the Cdn *.nyt.com it uses

Have you whitelisted these Also what authentication type you using. Idex, ntlm, etc Idex should be ok but ntlm you will need to stick all the sites above in authentication exception as well as web filter whitelist

Does it connect to the cambium portal on a special port? Have you checked firewall logs

Following… interested if anyone using meraki also

We just had all Ricoh installed couple weeks ago and one thing I asked the engineer was to lock the embed mf. It could be that they using copy thru the copier gui without going thru the papercut app. I think you have to disable the home button to prevent from what I recall Call to Ricoh sure will resolve this for you

I have school sites that are all setup practically the same and fear any electrical storm as I never know what to expect. Just sat watching the phone waiting for anyone of my customers to ring me with help The difference in symptoms could amount to anything. Length of line, overground, underground, proper electrical grounding to the cabinet that the acu sits in. They are all voltages over a copper line so anything that heavily discharges a voltages around other voltages carrying lines are going to get disrupted. Aside from this The batteries already maybe damaged or extremely susceptible to electrical interference. Like I said a voltage regulator close to the acu May stabilise the voltage to it

Paxton has a card designer (you need the pro license applied) that you can print templates. Do it one of two ways create a 2sided template or create 2 x 1 sided templates. Pre print with the info and then print the id when you need. Personally I have avoided printing info on the back as that info regularly changes. Eg we have safeguard lead info on the back of the id card. Year down the line we had to reprint as in that time safeguard lead changed twice. So now I encourage only having the id printed.

Hmm I agree it’s a localised issue to a degree but I would have thought Paxton could advise better as I am sure they will see things like this regularly and advise accordingly Thunderstorms can cause alsorts of wierd problems and don’t think there is a sure fire way of ever resolving it. So it is matter of minimising risk Thunderstorms can cause electrical fluctuations which can knock power supply out and damage batteries and ultimately the hardware. This is why we have ups and voltage regulators as a first line of defence with server and switching gear. You could try an ip66 rated voltage regulator which will cleanse the voltage and act as a protector of the acu and act as a sacrificial device from the effects a thunderstorm can cause. This is where I would have thought Paxton would be able to better advise what is compatible with your setup.

We had something similar less than a year ago. I not certain but think A server update knocked it out for us and I changed the settings from ldap to ldaps. Assume you checked firewall rule for forwarding rule for ldap/ldaps.

I have set a group policy that deploys a schedule task if it detect fusion 360 is installed present which is installed to select machines thru sccm software deployment. The task will call a script placed also by group policy in the install root which runs Streamer.exe from the meta folder within the install root. This goes out and installs the latest version of fusion 360. Task is set to run at startup We have smoothwall and I had to set the repository it downloads from as an authtication exception site

I have PM you

Another option is use classroom management which will serve many positive purpose to your working day and the teacher day. software the likes of abtutor, netsupport, impero, etc to run a shutdown on a schedule. Also these software will allow remote support, inventry, classroom management, safeguarding and the list continues

I agree with the group policy approach. Create a task schedule running the command. Shutdown.exe -s -t 0 You can pin this to a security group that has a list of computers in. Will make it easy to add and remove which computers get shutdown.

I’ll offer my two cents also. Smoothwall is a great product but Smoothwall are a shadow of their once self in terms of support and they really need to get their act together to return to the days they once were before it’s too late. With most of the schools I support using on prem smoothwall and for the last 20years of my career mostly using smoothwall I am increasingly finding it difficult lately to defend smoothwall to strategic colleagues when renewals come about.

With iPads we played with different ways to go through a smoothwall and yes one was ad with domain joined apples which worked but very complicated and found the apples regularly had problems in this config. How ever that may have been down to lack of knowledge we all collective had with apple and ad The other more simplistic method was a https redirect on all managed devices. The only caveat is the users had to login manually The iPads had the smoothwall certificate sent out to them to allow inspections. They were joined to dedicated vlan which formed a location in smoothwall that forced authentication thru. You still need an ad present which wasn’t a problem as it was a hybrid school mainly windows so we needed ad anyway. Not sure whether this fits your scope.