tom_newton

Updates do roll out incrementally so we don't accidentally break everyone on the same day! Might take a week - or ask your csm to bump you up the queue

We don't aim for complex environments - but the firewall is solid, and if it serves your needs it will serve you well! Many thousands of schools around the world have it at the edge.

System update - look out for M39

There's updates out today that do this for Leeds, Maiden and Newport

Interesting point... Dns servers are good because they're multicast, so unlikely to just become unreachable. It's false positives over false negatives really

It's likely they are doing selective MITM - only inspecting sites where it's "interesting" to MiTM (eg sites where you might post/get search terms, and herefore have useful alerting data). This can improve performance in web filtering, but of course doesnt make things much easier as a device with no cert soon wanders into difficulty on one of the "interesting" domains.

My preference is always Quad9s - I know they are decent folk, and it blackholes malware. A+.

I would not expect that to happen again - but if you never touch the publish button on cf no policy will push

Youve not got some folks without a cert using cloud filter have you? OR maybe there's an AV or something interfering? Be good to show that cert the user gets when it fails

I would concur with Joel - if you add cloud filter (no cost), alerts route through our email infrastructue. Alternatively a different SMTP provider like mailgun or Joel's suggestion might work out

Cloudflare Tunnel · Cloudflare Docs <-- depending what you were using Dnydns services for, this might be an answer

I just bubbled to the top of the Steam Machine waiting list. Better start thinking of some games then!

The posters here have given some good pointers. Agent based systems are only suitable for fully managed devices. Anyone telling you otherwise is leading you down the garden path. Smoothwall has agent based and proxy options. If you hear people saying proxies are dead technology, they're also poorly informed: outside of in-browser extensions and DNS filters, the vast majority of filtering (including windows, IOS, android agents) depends on a proxy somewhere. A proxy box at the edge of your network might be slightly less common than it was 5 years ago, but the technology just moved Happy to talk you through everything I know: reach out to your Smoothwall CSM and ask them to set up a call with me or one of the Technical Account Maangers.

Working on it - apple appears to have made life very difficult for all filter vendors with this. Are you using block-by-drop, or a redirect to a blockpage?

Can you give some concrete examples - with AI tools blocked, gemini searchers are too: 20260928-1012-40.4282808.mp4