colly72

You could add Aerohive and Meru into the mix too!!

In a roundabout way, I think you're actually part agreeing with what I say (please feel free to correct me!), in that you're arguing that price is not the only consideration but that the product is technically strong too. I would argue that a vendors financial strength and size is equally relevant and although it's never a guarantee that something like this can't happen, it's important when considering the likelihood of the sh*t hitting the fan. Cambium might have been born from Motorola but they've been independent for years. It comes down to risk/vendor management. What's right for one School or institution, might not be right for another. And that's OK, as long as you've been through the process......

We looked at them when renewing our WIfi in Spring but discounted them as we were worried about this sort of thing happening. We ended up renewing our Cisco Meraki network. Much more expensive but looks to have avoided a headache further down the line. It's a timely reminder that, even when budgets are stretched, there's more than just the bottom line to consider, when considering critical IT infrastructure in Schools. Hopefully someone will come in and take them on, so their kit can remain under support.

We got an email about this in the middle of May, so were able to disable the redirects until the end of this term but it will automatically start redirecting in September, which is extremely annoying, as we're moving to iSAMS next Easter, so we're going to end up in some hybrid half-arsed solution for 6 months. It's just another example of the botch that is SIMS Next Gen, that reinforces our decision to move away from it.

From a subject access point of view, you can't provide what you don't have. Better that way than keeping data that you shouldn't.

I'd take a good look at Veracross. They are relatively new to the UK market but seem to be gaining good traction and are developing at some pace.

They’re very active in the uk independent sector now and we’ve carried out a lot of work to establish whether they are a good fit for us.

Thanks. It was one recommended by Veracross, who we're actively considering as a replacement for SIMS

Anyone using or considered Atlantis? https://www.atlantis.education/

We use Virtue Techs backup solution, which backups to their data centre, then creates an additional copy, which is completely invisible to Veeam, so is a true air-gapped solution.

Do you have Veracross at your School?

We're still looking very closely at it, together with iSAMS. It's full of potential but there are still some gaps, particularly with Exams. That said, the reporting, admissions and parent portal side look very strong.

We're using NPS Server with certificate based EAP-TLS (we're currently using Meraki). Happy to try and help if you can give specifics.

I totally agree, it's the best way to mitigate the risk if you don't need it.

It doesn't stop the portal being exposed but it provides all the usual Entra MFA/Conditional Access protections (which most of us rely on for dozens of other apps and services).

Actually, I think it might be possible to block login after a set number of failed attempts for a period of time, in Administration -> Admin and User Settings: I've not tested this.......

I don't think that's possible. AFAIK the only way to mitigate it if you expose the VPN portal to the WAN, is by using third party feeds, which either monitor or block the traffic. Or, just implement MFA in some form (we use Entra ID which you can restrict further with Conditional Access) and then monitor the logs.

That's definitely the way to go if you don't need it, or Entra authentication. For me, the benefits of Entra MFA to our staff and students (which include captive portal SSO), make it worthwhile and I'm looking to reduce the noise when v22 goes GA.

We experience brute force attacks on our VPN portal, although we don't get latency issues. We had MFA with rotating PIN code but we've recently moved to Entra ID MFA, which has the added benefit of all the conditional access policies that go along with it for extra protection. The downside is that it requires exposing the VPN portal to the WAN. If the brute force attacks are still a concern, it's possible to maintain a list of IP addresses using third party threat feeds and block traffic that way, although that's obviously a bit of a moving target as the IP addresses do change. V22 is adding a more granular logging, so that it's possible to reduce noise from these types of brute force attacks.

We've had the same resistance/feedback from teachers. I explain to them about how it benefits them and the School to shut down their laptop each evening after the school day. If they still choose not to, then that's on them and I will bombard them with reboot prompts until they get it. Teachers are creatures of habit but they need to come on the cyber security journey with the rest of us.

We reported this issue 5 days ago. They have acknowledged the bug but still have no idea what's causing it, so in the meantime, we've had to block the Blur extension so that students can actually use their Chromebooks. So, we have a product that we can't use and they have no timeline as to when we will be able to use it.

I had a shocking experience with You Fibre and wouldn't touch them but it just goes to show how personal experiences vary so much....

Our Vodafone FTTP has been pretty faultless over the last 12 months or so, with the exception of one outage that lasted almost 2 days. Miles ahead in terms of reliability compared to our previous Virgin Fibre and Sky FTTP service.

I think we may have narrowed it down to the Senso Blur extension.....

Is anyone having issues with Senso stopping browsing working on the latest ChromeOS version on a Chromebook? v141.0.7390.115 seems fine but v141.0.7390.134 seems to have real problems accessing websites, with timeout errors, or sites just hanging.