ibpalle

With obvious bias, Smoothwall will be worth a look. Not just for firewall and webfiltering but the add-ons for monitoring could also be interesting in this context to consolidate services a bit.

Disclaimer, obvious bias is obvious: Smoothwall offers a few products that should be interesting - if you are using Smoothwall webfilter already, those would be a good fit. If not, they still would be a good fit

We do have an easy way to allow and block without having to go to the policies. The Guardian - Quick links - Quick block and allow will let you do that. Granularity is a must in most educational requirements for filtering so that has to be an option but setting up the filter for a simple blanket block for all and the use the quick allow/block is an options as well.

At times, Google captchas goes a little insane when multiple requests are coming in from a single IP - it normally settles down after a short time. We have tried getting more information about this but Google is understandably not too forthcoming with the details of their Captcha checking.

What error does Chrome sho you - just name cannot be resolved or is it a proxy message about not being able to resolve the name?

If upload to another machine on the users local network is unaffected then issue could be router or isp rate limiting I suppose. You could try setting up a VPN and uploaded through that to see if that makes any difference in speed. Lastly - all upload or just to a single site the user is using?

Proxy exception for the VoIP server is a good idea but I doubt it will have any effect on VoIP traffic since that only applies to HTTP(S). I'd probably try to setup a rule in bandwidth management to restrict web traffic overall to 90% if the total capacity, leaving 10% wiggle room for other types of traffic when user web browsing is at peak. Percentages can of course be adjusted to suit context. Thats in addition to a high priority rule for the VoIP server. Is VoIP traffic only coming and going to the server - clients are not communicating directly?

Hi again The realtime display does have some delay - it's a web interface after all. Iy you would like to see a more precise listing, try on the command line using the command 'iftop' iftop -i ethA will show traffic on the designated interface. You can see interface names using the 'ip addr' command.

Hi Green_Goblin The bandwidth prioritisation on Smoothwall - can you see traffic being recognised and put in the right class on the monitoring tab in diagnostics? Just to confirm it's actually prioritising the traffic. Unfortunately Smoothwall can only prioritise traffic going through it, once it leaves and heads to the internet, it's out of it's hands With the issue showing up even at low bandwidth usage, it does sound like a congestion issue along the path....

Disclaimer: Obvious bias is obvious! Take a look at the new cloud offerings as well as classroom manager from Smoothwall. Getting a bundle deal is advantageous and we do have some improvements in the reporting area coming up in the near future - cloud reporting specifically will be a lot faster and simpler. It may pay to stay with Smoothwall with these added services. In addition, get your account manager at Smoothwall to sign you up for a reporting webinar. A 1 hour session going through reporting features beyond safeguarding may help a lot as well.

Ahh, DNS.....

I didn't think that would be the issue but worth a try. Thanks for getting back.

Matshep Instructions on resetting the root password are in the link I sent you.

Resetting root password does require a reboot - instructions here: https://kb.smoothwall.com/hc/en-us/articles/360002032730 By default the standard is just 'smoothwall' so hopefully the pw was changed, just lost in time somewhere I also do not think the issue is on the Smoothwall given your description but better to try the one thing that may interfere.

Hi Matshep One thing to test out to see if the issue could be with Smoothwall and the way it handles Wifi clients is when it happens on the iPhone or Pro, login to the command line of Smoothwall and try this command: # iptables -F mac1x And then test your iPhone/Pro again. If this works, contact Smoothwall support and we can see if we can make this flush permanent.

I assume the iPhone devices are on WIFI - is the Surface Pro also on Wifi and does the problem only happen when using Wifi? Are you using RADIUS on Smoothwall for BYOD logins? Does this ever happen with other devices?

A long time ago I went over to help a friend who had issues putting RJ-45 cabling in his flat. He had the right tools and had done everything right except one thing. He had stripped the isolation of the wires before inserting wires into the RJ-45 plug and clamping them. Gave new meaning to the term "crosstalk" )

Yes that is the one. What version of their firmware are you running?

We have had multiple cases of framed-ip not being sent when using Unify - it may have been addressed in their updates as we have sent this information to them multiple times. When using NPS often setup Wifi to send auth to NPS and accounting to SW - if NPS need accounting as well, we forward accounting to NPS from SW as setting up NPS to forward accounting is tricky to configure - or at least, I could not figure out how to do it the few times I had to deal with an NPS server.

Smoothwall does not support using hostnames as auth objects - usernames has to be used here I'm afraid.

What test is failing in the basic connectivity? You can see individual tests by expanding the basic connectivity item. Just for reference - the connectivity monitoring that can be enabled on any interface that has a gateway configured on it, works by trying a DNS lookup on Google servers via the gateway. If the DNS lookup fails, the connectivity test fails and the interface is marked as not available for external traffic (but only if there are more than one with a gateway). If there is an interface with a gateway that is no longer used for external traffic, either remove the gateway (ideally) or disable the connectivity check.

That does make a lot of sense. Generally the OpenVPN deployment is limited to maybe 10s of users so automation like you describe hasn't been a priority. I'll dig a bit and see if I can find out if the OpenVPN application we license as any such features.

Hi lbradley We haven't created any process for that but I can see it would be useful. The setup process itself is relatively painless on the client side but does require a few steps. Any configuration changes (part from changing SW certificate) can actually be edited into the existing config with no need to a re-import or re-install.

It may be possible to use non standard port on your RDS? Depends on your users and if they are capable of using links with port number is them.

If the Smoothwall is behind another NAT device like the draytek, the private IP you need will be the external IP configured on the Smoothwall. Basically your network is in NAT behind the Smoothwall. The Smoothwall is in NAT behind the draytek. Smoothwall port forwards to your Mosyle IP. Draytek port forwards to Smoothwall. EDIT: Disregard all I just said. While correct, it's not relevant. You are wanting outgoing traffic to be allowed. The router should not block anything outgoing. Please contact support as there are a few additional questions that needs resolving before we can answer adequately.