tom_newton

We're kicking a few ideas around for shared ipads - but there's nothing "great" we can come up with - log in until the next lesson-change (having previously been given those) may be one option.

We're moving to per-user - BYOD has meant per-device is not only hard to count, but expensive for our users. Support is something we're continually trying to price more fairly - it's a tricky one as not all customers use it to the same extent.

@OB1 probably knows this

We've managed to get Smoothwall on AWS, but it's a real hassle. You could definitely go down the linux+dansguardian route though?

I'd say switch/network troubleshooting is rarely to taxing - as others have said, a CCNA will give you a good foundation in networking, but not, of course how to configure an HP switch. With a simple network, though, you won't need to pay much attention there. Filtering/firewall wise, I am biased, so I won't make product recommendations, but you should be sure to get some advice on setup before you choose, and think carefully about what you actually want out of these devices - what are the LEA offering now? What will you want to keep the same? What's missing? These sort of questions will help shape your new network and ensure you start from a good base.

Try forcing chrome's user-agent to look like thew 32bit version?

Depending on the auth methods you choose, I have seen a number of the types off issue reported here - agents on ADs are particularly unreliable. For transparent proxying there's often a "timeout" issue with in-line authentication as someone mentioned with sophos. For such non-domain devices I would recommend 802.1x and integration with your wireless controller it is extremely accurate and reliable. For domain machines, something like a kerberized proxy logon is most reliable and effective in my experience.

I've mostly done this the other way to turn franking machines and faxes into extensions of a voip system, but I can't see why you'd have too much trouble in reverse, with this being an effective extension on your existing PBX. It does look like such a device might be slightly harder to come by than the other way round though.

http://training.apple.com/pdf/wp_integrating_active_directory_mav.pdf <- any help? Sounds like the macs aren't properly part of the AD domain. Are they able to SSO anywhere else?

You could just use a remote proxy, yes. Connect for chromebooks is particularly for integrating the logon, so the chromeook signin determines your filter level

Since there's already at least one vendor here.. I'll chip in - a Smoothwall firewall can do all of that (as can the other suggestions), but also leaves your options open for filtering later on. Drop me a line with any questions.

The wife's got one, with an image she took (despite my insistence that it was probably too dark) at dusk in the masai mara. No issues with getting it on there.

This week - PM me your details and you will be at the top of the list!

Update 85 should reflect this - update83 revoked some certificates a little early, and caused a few sites to break. I am surprised Microsoft are behind the curve on this one.

Yes.. my fault. There were only 3 when I left (2 had been appropriated that morning, sufficient for "toucan play at that game" gags) so I asked Chris to set me up with a toucan ring.

Skype's tricky - it is essentially p2p vpn, so using skype and blocking vpn makes for a difficult combination. Blocking of apps is possible - though many of them use aws backends, so you might find MDM a help there. Happy to have a chat - my DDI is in my sig as always, and I will be at BETT Wed/Thu (my other product-y colleagues will be there when i'm not, and there's always someone tech about)

Yes, it did - we intend to give the frontend some improvements during 2015 as well.

Give me a call, or pm me, I'd really like to get to know about the issues you have had

You are thinking of a different product - we have never had ad import from csv

You *should* be able to if the meraki can do radius accounting to the Smoothwall, and give us a username.

The licence will be invalid, so you will need to wipe the box before you sell it - however if somebody else wanted to reinstall smoothwall on it they could, in theory buy a licence for it. It will happily handle any of the open source firewall s/w including pfsense, you could even use it to run windows, or vmware.

What firewall do you have in place? most firewalls/UTMs support IPSec just fine, even cheap'n'cheerful stuff.

My sunday delivery yesterday was with yodel - driver rang because he couldn't find our house (TomTom not up-to-date yet!), so I thought the service was pretty good, despite Yodel's crappy rep.

I've been a prime member for almost as long as it has been an option. Didn't use the streaming immediately, but do now, since we got rid of sky, we now use a combination of amazon & nowTV. Free sunday delivery is good too - ordered a DVD friday evening, had it sunday morning.

It's under content modifications, but you will need to get support to turn on advanced mode for you, as most content mods are well hidden (for good reason!)