tom_newton

My colleague told me he thought pandas were crap. I told him I didn't think it was quite so black and white* * actual smoothwall office conversation

I wonder, is there any integration set up that might use the office manager's email as creds? The time thing is hard to fathom, as we're UTC at the moment, so it's not a UTC vs BST thing...

I'm told this issue should be resolved in 34 - caught us a little by surprise after ~80% of customers on 33 we found a few wlth this issue in the last week or so.

Ah, I see there is a vlan bug in 33, I wasn't sure if that was the case, so hopefully a revert will sort it. I'll do a bit of digging when I speak to the product manager for on prem this afternoon

Sorry to hear that - updates do occasionally go awry, although maiden is our most used version, and has been pretty smooth, it's no fun at all when you get caught by something like that. Can you let me know your ticket so I can follow the progress?

Did you ever submit a ticket for this? Have you got it resolved?

One of those things where you are at the mercy of the vendor now - as the evidence has been overwritten. Good luck, and keep us posted!

Also sounds like the type of defacement is too... adult.. for your students. TBH, I would still think a more local issue likely - particularly as it seemed localised, and went away fast. @itskdog makes an excellent point - is there another adult in the area who might have done this as a prank?

Any chance it was something local to that teacher's device?

Doesnt look like that site supports ECH, but you should definitely put in some defences against that if you can, as others might.

The site supports QUIC, HTTP3 - so likely these are the culprits

So as I parse this, you have successfully set up a new VLAN, that's getting out to the internet, folks are getting dhcp, peachy. But no filtering. Presumably you have transparent filter in mind? In which case the issue has to be that there's no transparent filter policy (web proxy/auth/manage policies) for that _interface_ and IP range

Mildly off-topic, but I will happily follow back edugeek folks on bsky if they make themselves known

I've moved all my twittery stuff over, left my old account on X so nobody can squat on it!

Bluesky seems to be a place X folks are migrating to

I've only done the first book of Sanderson's massive series. Need to get back to that. Currently reading RJ Barker's Wyrdwood series - can highly recommend.

I take it you arent using the cloud reporting options then? This is a big change from what on-prem used to offer

Yeah, it sets everything - the only PITA is you need to tell it where you are, and this is not super easy. Because of that I have a travel watch which is (a) cheaper, (b) sets time off twisty twisty

My watch had to have 2 particular features - no winding or battery, and set from radio signal. Hence, Milano solar from Junghans. I do often think I should just get a cheap watch, from the market...

We are, I am just waiting for the relevant team to tell me when it will happen!

You're always gonna have a harder time dealing with BYO without an on premise device, more so as ECH and so forth become more prevalent. Much as I dont like to say it, the reason this thread exists is because securly are usually pretty reliable. Every vendor can have a bad day when the cloud they rely on has a wobble.

Should be fairly permissive as to what we accept... I'd say fire in a support ticket as, it sounds like you;ve done everything right so far. Have you got the auth set to "core auth" on the web filter that you're using? Only further diag I would do is a bit of packet capture on the smoothie to see if the usernames are in the packet, and maybe a bit of snooping in the logs to see if theres anything super obvious. Techmonkey has a point up there that will become germane if we get to the stage of usernames but no groups.. but we are a step behind that.

Ah, maybe that is a unicorn - decent free MDM. I'll follow the support ticket.

Have you got intune with the Microsoft license?

Ooh, I don't think any of the free MDM let you actually configure apps