tom_newton

Definitely shouldn't be doing that - put in a ticket, and send me the number so I can track it - - - Updated - - - PS. There's even more power coming down the line for Cloud Filter on windows. Watch this space...

Drop me a PM or email if you want me to hunt out your customer success manager (our old account management team was changed to focus on customer success - exactly this sort of thing - a few years ago)

Crown point ibis is about a 20 min walk from our office, and is really close to the royal armouries

Does feel like something upstream is bothering you - who's issuing the dodgy cert?

https://kb.smoothwall.com/hc/en-us/articles/4404006049810-Installing-Cloud-Filter-for-iOS should be all you need, but if you still can't get it going, raise a ticket with support and ping me the ID and I will get you the help you need!

Smoothwall does have a number of languages in the dynamic content filter

Drop me a line if you want to know about what Smoothwall offer. You should definitely look for something that installs an agent on devices, and ensure it picks up more than web searches.

Yeah, it does - no need for a device at all. Monitor supports Win, Mac, Chrome, and iPads

Thanks Joel - unfortunately if this is Mosyle free, that's also restricted in being able to install our app properly (it won't let you configure an app - despite mosyle telling me it will)

One thing I would suggest is try and avoid keywords - they result in a LOT of false positives. Most schools are finding the most effective route is a pro-active monitoring product (that's the terminology from the SIC KCSIE guidelines, some call it moderated, or managed). This allows DSLs to focus on their work, and not be bombarded with a load of junk alerts. I am horribly biased, but I would of course recommend Smoothwall Monitor - we have decades of experience in this area, which we are happy to share

Can you share what the reports look like - my original comment was based on the fact that if we arent decrypting traffic from the TVs, i'd be interested to see what of note netsweeper had seen. May be some false positives in their rules

Have you got a network dump? Could it be these searches are being misidentified? I find it unlikely you're MiTM'ing the TVs, so misidentification of the traffic likely

Happens to the best of us my friend

Just lurking and commenting so I am subscribed to this thread

As @tech-man said, if they're off the same outdoor unit they may cause issues. I dunno about being turned to make heat, but certainly there's only a set amount of heat the outdoor unit can dissipate, so if you have a hot day and the staff members have the AC cranked up, you might find that the air con in the server room struggles

It's not a category you want with their IPs, it's a location - categories are for places you go, location is where you come from. In this case, source IPs of your tellies in that location, everything/that location/always/everyone - Allow, and a similar policy for Do Not Inspect, and you are good to go

That's awesome - and on top of that you have proved that you can do it for external google account holders too (could be nice for guests?)

If you do I will transpose it into a kb article and buy you a beer next time I see you

This is good common sense - allowed search terms is a dangerous game, imagine your search term allow policy for "cabbage" is for whatever reason (policy order, limit of the filter as above) above a block rule - students can then just at "cabbage" to an illicit search term "bypass web filter cabbage" and get allowed through!

Brew society John. Quality coffee. Tbh, I usually get off the bus, and walk past the office just to get their coffee.

If it's taking you 7 mins to walk from the station you're getting a coffee on the way

We have dug deep into this and found a few issues - nothing to do per se with 66, or any cloud side release, but more of a confluence of a number of things. 67 is being added to, and will be re-released. All customers with open issues are being tracked, with the aim of making sure there's no wrinkles before month 9.

Definitely agree wrt splitting the networks. Guest, BYO and regular LAN might be a good 3-way split - as BYO can often auth with RADIUS as our friend above recommends, whilst guests often don't. Wether you try and MiTM on those networks is not something I - or anyone else on here can say yay or nay to. It's a conversation between you and your DSLs, and needs to start with "who is using these networks"

Can folks chuck me some ticket IDs? Shouldn't see any changes in 66!

Inflation I guess Shows it's been a while since I went by that mode. Still, slightly faster than walking and much more fun.