whoopus

We installed mobile guardian on our V3 smoothwall server and the v1.2.0 mobile guardian client on our laptops. When we try to browse on the laptops, we receive the block page. The reason is "Your username is not allowed to web browse" and the category is "Banned User". We have tried several users, all who work on direct proxy connections. We see the computer on the mobile guardian status page: Hostname Version Last log upload Last policy update MARK-GL0KFIPDB1 1.2.0 Sun Aug 28 21:01 2011 Sat Aug 27 20:28 2011 Please help. We have spent several days working with support to no avail. I have 950 laptops arriving with mobile guardian on the image and I need to get this resolved ASAP. Tom, can you help? Thanks, Mark McCurry Pine Lake Preparatory

Thank you, thank you, thank you!!! This one has really been killing me. I saw your post when you made it, but then got distracted with other issues and forgot about the fix. I then rolled out 210 student laptops and it has been a complete nightmare for the past three weeks. Changing to persistent connections and transparent proxy fixed the gmail attachment issue (not sure which one actually did it), but we still fought with the "this page cannot be displayed" errors. I stumbled across your post again today, gave it a try and haven't had a problem yet!!! I am pushing it out to all users this weekend. Many thanks! Mark

I have only one negative that maybe you guys can help me with. That negative is an apperant incompatibility with Internet Explorer in some areas. We are currently evaluating Network Guardian on our server hardware (an HP DL360 G3 with dual xeon 2.8s, dual nics and 4 gb memory.) Last year we used the "lite" version of Surf Control built into our Firewall. It was so bad we had to use monthly "shock and awe" campaigns by scanning the logs for a few violators to scare the kids into thinking that we were watching them all of the time. Not very effective... Basic browsing with Internet Explorer (we have tried v7 and v8) works fine. The user authenticates and they get the pages they should and are blocked at the pages they shouldn't. But we get a username/password prompt when we try to attach a file to a gmail message. The IP address is that of the Smoothwall server, but no matter what username and password we use, we can't get through. The browser locks up. If we cancel the logon prompt, the attachment simply fails, but the browser doesn't lock up. What is weird is if we log into gmail with https, we have no problems....I guess because we have https intercept turned off. There obviously are workarounds (tell SW to not authenticate/cache on visits to gmail.com or have gmail force https), but I really don't like workarounds. Also, if a page is blocked, and I try to allow the site for 30 minutes, I get to the SW login where I enter the admin username and password. After I submit my admin logon credentials, I then get a 400 error page that says "This error (HTTP 400 Bad Request) means that Internet Explorer was able to connect to the web server, but the webpage could not be found because of a problem with the address." Several calls to SW support has them blaming Microsoft, which may be true. Firefox doesn't present with these problems, but I cannot force all of my users to switch to firefox. Am I the only one having these issues? This is a real shame, because other than these problems, this system and it's reporting is great! BTW, I am using Network Guardian 2008 with the latest updates installed and I am authenticating against AD (windows 2003 server) using Kerberos. Thanks for any help or further insight. Mark