colly72

From what I've read, if you keep your MX records pointed to on-premise (in our case our UTM public IP), then this should work? All emails will be routed to the UTM smtp proxy, then relayed onto O365. Outbound should go via the UTM too, I think?

Hi all, I'm looking into setting our Exchange 2016 on-premise server to work with O365 hybrid. Currently, our mx records point to our Sophos UTM, which is a SMTP proxy, that relays to our Exchange Server. I still want to have all email routed via our Sophos UTM, whether cloud O365 mailboxes or on premise, to take advantage of all scanning/filtering etc. I've read some threads about not being able to have anything between the Exchange Server and O365, as this will interupt mail flow (https://community.sophos.com/products/unified-threat-management/f/mail-protection-smtp-pop3-antispam-and-antivirus/102375/on-prem-exchange-migration-to-office-365-questions/398384#398384) but then other threads saying it works. Should I keep my MX records pointed to the UTM, or to O365? Any help or advice greatly appreciated.

Is it not possible just to add in the users from the Create Cloud Application in the Azure Portal?

I'm just in the early planning stages for this. I've set up Azure AD for SSO in the Adobe Creative Cloud Enterprise App settings and have validated our domain in the Adobe Admin portal. I thought that it would then allow students to login automatically with their domain credentials but I'm guessing from your comments that it doesn't work properly? I followed these documents: https://helpx.adobe.com/uk/enterprise/kb/configure-microsoft-azure-with-adobe-sso.html https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/adobe-creative-cloud-tutorial

The only issue we had with timetables and Firefly is that our Junior School timetable was slightly different in it's timings for periods, compared to Senior School, which resulted in Firefly not showing it correctly. I believe that we've introduced the multiple timetable SIMS feature, which has resolved the problem as far as I'm aware.

I've looked at Meet, which seems great as you don't need to be a Gsuite user to use it (which would be great for external callers) but it doesn't work on a mobile unless you are a user (unless I've missed something)......

We're neither, although looking into Google for Chromebooks at the moment. It's my understanding Skype for Business is being phased out and moved into Teams but as far as I know, if we are on premise for Exchange, the meetings side won't work for us anyway?

Netsupport DNA. Remote control, plus great safeguarding tools.

Hi all, I've been set a task to look into video conferencing systems for when our Governors meet, as well as other potential uses. On the software side, I've looked at MS Teams but this requires Exchange in the cloud and we are on premise. Also looked at Google Hangouts but I'm not sure this is exactly what we are looking for either. Both systems require users to have MS or Google accounts, so for external people, I don't think they would work. I'm currently looking at solutions like Goto Meeting or Zoom, as they seem to be very easy and provide most of what we need. Any others I should be looking at? On the hardware side, we want something professional that will provide good quality audio and video, without breaking the bank. The Logitech Rally system looks good but quite expensive - does anyone have any recommendations? Thanks in advance for any help or advice.

I'm a bit late to the party on this but we're currently looking at Sophos Phish Threat and also Knowbe4 (https://www.knowbe4.com/)

We use a Sophos UTM here, which we've found to be really good over the last few years Sophos are currently pushing their XG firewall but the feature set is still not completely up to where the UTM is which is why we've held off migrating until now, although the gap is narrowing. Having said that, it does offer some features that UTM does not, such as security heartbeat which integrates with the endpoint product. Just compare the two if you do look at Sophos. We've found that as an integrated product, it helps protect our published services, web filtering, on-premise email etc, all under one pane of glass.

GDPR doesn't say that you can't use USB sticks, encrypted or not. It's about demonstrating that you've taken reasonable steps to ensure that personal information is kept secure. You can put all the tech measures in place, such as banning memory sticks, encryption etc etc but at the end of the day, a lot of it comes down to human behaviour and what is and isn't acceptable. This is where policies come in, to back up the technical measures that have been established. If you ban USB sticks, cloud services can be used, or email to email it to a personal device. It's all about staff responsibility and behaviour, so policies, training, awareness etc are key to demonstrating that you've taken reasonable steps.

Hi all, We're currently revisiting the whole minefield of staff using their personal phone to access school email etc - we have Exchange 2016 on premise, although we do use Azure AD Connect to sync our users to O365. We've looked at various ways of controlling the device and protecting data whilst balancing the user needs and providing them with the tools they need to do their job as efficiently as possible. We've looked at things like only allowing OWA on phones but that's not a fix all solution. Also started looking at Activesync Mobile policies in Exchange but I wondered if we could use O365 MDM with on premise Exchange, or if we should also look at full MS Itune too. Would be grateful for anyone's input or experience on this. Thanks

Yeah , so they click on the Firefly shortuct, then they choose staff/student login (in our case), which then directs them to login via O365. They do have to enter their username sometimes (which is their full upn name, normally the same as their email address) but no password is required from a domain-joined PC. If they've previously logged on using the same machine, it does remember the username, which they just have to click on.

Azure Ad Connect is really simple, we did it ourselves. We still have an on-premise Exchange server, so we're not using O365 for email yet. All we do is sync our AD accounts with Azure, to provide SSO.

I think with locally hosted Firefly, you can do AD SSO but with Cloud, as we've gone for, I don't think it's an option. We don't used Office 365 for anything else other than this, so we just used Azure AD Connect to sync our AD users but we currently don't use any other aspect of Office 365. We also had Moodle, which was used sporadically across different departments. We've kept it running until Christmas and told staff that they need to manually migrate any resources they wish to keep, or they will disappear in the new year. To be fair, I think many were happy to start with a clean slate, so I don't think much will get moved over into Firefly.

Hi, We launched it at the beginning of September and I've got to say that it's been an immediate success. We have some tech-shy teachers here but even they have found it straightforward to use. Our Firefly trainer was really good and he did some really useful workshops and sessions for our teaching staff, which helped a lot. We used a day our INSET for this. Our students have pretty much universally loved it and they already rely on it for their homework/tasks. I think they find it so useful to be able to see all their homework on their phone or tablet. There's an initial setup/activation for student process, which we did through lessons but this is quite straightforward and we didn't have any problems although we used Office 365 for SSO sign-in, which made it easy for the students as they didn't have another password to remember. We've not yet launched it for parents, although our Head is chomping at the bit to do so. We currently aim to do this in January but to be honest we could do it earlier if it wasn't for us wanting to manage the process to the smallest detail. We've had some white elephants in the past, in terms of teaching & learning tech initiatives but I'm pretty confident that this one wont be. Early stages but I already feel it's part of our culture.

My preference would be to VLAN. If you already have a layer 3 core switch, then it's well worth doing for future proofing your network, from a performance, security and organisational point of view. For the time investment now, you can set your network up for years to come.

Anyone using Airtame devices, to wirelessly display from a laptop/ipad etc? We are looking for a solution for a conference room, to display from any device, to a large wall-mounted TV. The Airtame seems to strike a good balance between cost and functionality and is cheaper than alternatives like Barco, WePresent etc. Has anyone done a similar thing?

+1 for Netsupport Notify. Cheap but really good

Definitely sounds like a cached mode issue. Try removing the data files and/or profile in Outlook, then recreate.

We use Sophos UTM, really happy with it although looking to upgrade to XG in the next few months. Palo Alto also have very good reputation....

That too (likely Office 365)

Yeah, in the Cloud. Saves me managing another vm.

I don't think there is anything in GDPR that dictates that USB sticks must be encrypted but without encryption or other controls you risk a breach, so best practice would be to either enforce encryption, or block them altogether.