tom_newton

Quite possible - appreciate your discretion!

It's our fork of firefox - so it does all the filtering in-browser and doesnt need any certs or network fun. Apple are legally required to behave with 3rd party browsers - and Firefox (like everything else on IOS) is backed by the same underlying browser engine. Feel free to drop me an email - [email protected] - and we can chat

I'll take it up with our engineers again!

Apple are increasingly tight on what they will let us do. One option is to use our version or the Firefox browser - which takes away all MiTM headaches on ipads

Yeah, any change of time would require a bit of hackery, which we don't recommend. What's the driver for a different time?

Oooh, interested to know who it is - I had our team check to see if we alert on the specific thing you mention (we don't). I'd probably suggest that you consider if it's worth alerting on alcohol sites at all? Maybe just reporting on those.

Knowing that there's probably only Smoothwall that looks at the URLs for images in a google search - I suspect this is us? I have asked the team to check if indeed we're picking up a site like this. We have a choice of alerting on the sites google pulls images from, and suffer potential FPs (you can see how this might be really important if it was radicalisation material, rather than a bottle!), or not at all. Of course that means if a domain contains a preponderance of material about X, then in this situation, we classify all images as potentially X. I'm sure there's some runes we can use to prevent those being blocked/reported on if that's what you'd prefer.

Looks like you and I joined around the same time Vik - something around 16.5 years ago. Made some good friends, and even found some new colleagues on here. Super place. I know the forum is highly appreciated around Smoothwall/Qoria

That's correct, yes. I would suggest the realtime log viewer should show any requests - limit it down by the chromebook's IP. We might get lucky and find a domain (remember you can't no-MiTM a URL, only a domain) that we are willing to let through unMitM'd. If you need a hand with that - fling in a support ticket, anc send me the ID so I can track it.

So the issue here is that before you sign in, the Chromebook doesn't have your policy, so doesn't have a MITM cert. At this point, if it needs to go to any site to sign in, you can't MITM it. Sadly this generally means not MITM'ing google.com - of course not something we want to do. You MIGHT find that there's some other domains we can unMiTM here to fix. The only fixes are to either sign in on Fifi network A, which is basically google open and nothing else, and then bounce to network B by policy. That's awful. The better solution is to put these chromebooks on an unfiltered network, with the Smoothwall filter agent on there. This is my preferred option. It filters the chromebook regardless of the network its on.

With chromebooks our agent based filter works really well - have a quick chat with your CSM and let's get it enabled

Some good advice there - also be sure to use ranges of IPs, and network masks to represent more than one IP on a line

Drop me a line with your details - I have a few ideas to help you solve the problem

I'm away this week, but I shall point a colleague at it!

You are probably thinking of the old browser solution we have from Future Digital days. Lightspeed uses Apples FILTERING APIs only - this is not appropriate monitoring, and wouldn't catch a student typing in a forum like this for example.

Yeah, separating art from artist is tricky at the best of times. Easier to do when the artist is no longer around to continue beclowning themselves mind. Dilbert has certainly not been as good as it always was. Good to see this guy being hit where it hurts by the newspapers.

Looks like one of the unions has accepted an offer - so we might be alright for BETT after all!

One option is of course to move to the in-browser filter extension. I will make sure we have some good intel on how to maintain MiTM in edge though.

Would love to chat about the issues you have with the portal - anything we can do to improve would be greatly appreciated. Would be interested to get to the bottom of your issues - drop me an email ([email protected]) so we can arrange a time.

Almost certainly blocked (as this means the Smoothie picked up the category) - if you have your policy to block porn, for example, then any porn alerts will also be blocked. The only deviation from this is in one edge case, there are some self harm URLs that go to sites which are positive/helpful. We don't block those, but we do alert.

Folks if you want to do as @TechBeard did and switch back earlier - we are of course extremely open to flexibility.

This feature is available in our new cloud UI (which also lets you comment on URL blocks)

If there's anything bugging you in the "con" column of Smoothwall feel free to reach out for a chat. [email protected]

Cheeky bump of this post to ensure max exposure... had a few interesting candidates already!

This should be resolved for everyone - sorry I got dragged in another direction last week (See also my job post advertising for a PM...!) - if you are still suffering ping me your support ticket IDs