tom_newton

I'll take a look as soon as I can, I have raised it with the relevant team.

It depends if you need both - if just one directory can provide the info needed, then one directory is ideal

I get it Tim. Looking at the ticket people have put internal notes on it, but not actually responded, which is no good to you. My suggestion is to keep updating the ticket with your findings (as it helps to have all the data in one spot), but I have brought it to the attention of management that the ticket wasnt handled particularly well. I would also suggest err on the side of "ring and make it a P1" if you feel its a P1. As for a diagnosis - theres not been any changes on our side AFAIK, so im still a bit stumped as to why your 2 directories have suddenly started fighting.

Can you give me your ticket number so I can look into why it was missed?

Let me escalate this again, I'll make sure we get to the bottom of it. Tom

Group mapping should be identical regardless of network. If it's blocking stuff on network, be sure it's not an on prem block!

Indeed - much of the recommendation hinges on "what do you already have that might do a job"

We're not corporate-first but we would do it if you need us. I'd be happy to chat with you and would point you in various non-smoothwall directions on the basis of why you dont like your current solution! Tom

Yeah, I doubt its a network issue - almost certainly a group mapping issue. Hopefully with support's help you'll get to the bottom of it!

Our head of second line had a look - he suggests "none of the users gws domain groups are mapped to filter groups" - maybe some folks are logging in as X one day and Z the other?

Yeah, you are definitely a different issue. Yesterday's bug was we put out a new release that... accidentally discovered some misconfigured customers! So we revert, we fix them, and then we roll again. You, however, are a different kettle of fish - a situation that probably comes as no surprise

Anyone got a robo mower? I despise mowing my poxy, patchy, small lawn.

Oddly I think we do have an issue, and will likely roll back yesterday's release

Let support know if you need a hand. Nothing obviously on fire here.

What sort of issues?

If the traffic is being full proxied somewhere, then DNS could be going somewhere non-meraki... or if DoH is set in browser?

I think I remember your case - an odd one, certainly. The things that take time/bandwidth are: Downloading the rule lists (which are usually patched, unless the client has been offline a long time, so tiny), this happens 1x per day usually, although there was a recent update in the middle of the day to solve an urgent issue. Downloading the policy - this happens once-per-publish. These arent patched, or compressed. We will add compression ASAP. Also we have plans to make them more targetted, and so smaller. These things both take time to ingest, too, but usually under a second for each.

We've seen this at a few sites, and we are working on ways to minimise the bandwidth usage

Aye, you're my favourite, but don't tell everyone 😁

Maiden30 is released today to first customers (Next week to all) - if you are on Leeds, there's a good opportunity to get up to the latest main release, as this is where all updates come first (Leeds84 will be along in late July with the same fix). If you have any trouble with upgrading to Maiden - we can help.

I always liked Mailgun's free tier - Message from Mailgun - I think it needs a credit card just to discourage account farmers. Definitely don't run your own - it's a PITA, and a security issue. Additionally you will be sending from an IP with no reputation and your deliverability will be terrible.

You've got 2 email addresses, cheese. One had access (the initialism domain), the other didn't. I've straightened it out, you should see filter now

Nope, it's included. Ping your customer success manager and they'll get it sorted. I'm sure I know who you are mind, so I'll prod them too!

Yes, all policy changes sync