tom_newton

The root cause (a fun incompatibility between the cert we generate, and what Sophos likes) has been identified, and a fix is in the works. Matt, we should be able to hotfix your system this week

Our cloud based reporting system is getting a lot of work - if you are not using it, pm me and I will get you access

AFAIK you can disable users from installing extensions - as yours will be force installed

Lots of Smoothwall staff are now chromebook users - I might end up with my next machine being a cb.

Our first supposition for what is triggering the bug (key length) made no difference. Drawing board will be returned to.

That should be sufficient - we had to work with Microsoft to get that loophole closed!

We will look into offering more to Suffolk schools - let me dig in

I was inspired to do 100 press ups per day [not all at once!] during April for cancer research UK. I definitely feel better for it though my elbows and shoulders hurt sometimes.

We are investigating wether something we present as a cert is triggering a little bugette in Sophos. More info when we get it.

Android is a notoriously tricky customer. You could try our beta android client - it does all the filtering on-device and avoids many of the issues of network based filtering - drop me an email with your details if you are interested.

TLS1.3 I believe is challenging to support when doing MiTM (it's easy enough to support on the upstream leg, which we do).

Happy to enable cloud based reports for you if you would like - and yeah, we always log everything!

Tim - you are welcome to update on this, glad you are making progress

Some excellent advice from other Smoothwall users on here. Nothing to add really.

Depends - in some cases we pull the logs back down to on-premise hourly. The newer method is to push everything into the cloud and report on it there. We can do either for you, but I am not sure how you are set up right now.

We are investigating some reports of this

Firewall rules tend to add to load, but web filtering not as much

Fling me an email you'll get set up. As our first Beta tester (Tim) says - this time we havent gone down the custom browser route (yet - I suspect there will be one at some point, or an extension if chrome supports)

Greetings EduGeeks! Smoothwall is delighted to announce that we are the official new sponsor of the EduGeek Internet Related Filtering/Firewall Forum. Many of you know Smoothwall well, but for those who aren’t familiar, we’ve been providing bespoke digital safeguarding solutions for 20+ years. Smoothwall recently became part of Qoria, a family of child digital safety technology providers, and together we support over 22 million children worldwide in more than 27,000 schools. Our solutions work to help UK schools, colleges and MATs to overcome a number of challenges. Whether it's spotting students at potential risk, keeping track of their wellbeing over time or protecting them online through 100% real-time, dynamic content filtering, we’re constantly working to ensure that children can thrive in their digital lives. To learn more, request a demo, or simply share your thoughts, please reach out to us - it’s valuable insights from people like you that enable us to perfect our solutions and ensure they continue to meet the needs of today’s IT professionals. You’ll already find a few of my Smoothwall colleagues on here like Matt (@matt_shakespeare), Rob (@rob_f) and Tim (@ibpalle), among others. Anything else you’d like to know? Just ask - we’re happy to help!

Fair - I'll hunt you down an ETA

You could probably get better value combining smoothwall filter and monitor, then you would not need netsupport. The S15 will give you excellent headroom to grow, particularly as in time some parts of the filter work are offloaded to on-device, and the reporting into the cloud. If you want to chat it through I am happy to set up a google meet next week when I return from our Perth office.

Right now I think the only option is a support ticket - we are in the process of upgrading that functionality. I

If the long-lived CA is the one pushed to your clients, a new CA signed by that will do fine.

Be sure you have UDP/443 blocked - often this is other protocols like QUIC bypassing the filter

Sure - email is usually better than PM - it's in my sig!