steveg

Thanks. I'll log a call with Senso, it's been working fine for a couple of years but decided to just stop this week. It does do some web filtering but i'm not sure how exactly.

Might have solved it, well at least found the issue. Have removed Senso off 2 computers and so far both are working fine.

We have a really odd internet issue affect at the moment only 1 type of computer (which happens to be our class whiteboard computers) Intranet and browsing of sites which we have set not to inspect on smoothwall work fine. If the website is to be inspected but allowed, it just tries for ages and never loads, youtube for example. If I pull the network cable after 10 minutes some elements of the site have loaded, like it was taking a really long time but it's definitely not actually loading. It's not every single one of these computers but most (10 out of 15 roughly at the moment) 1 user reports it has happened for them all week, most just today. I re-imaged a spare identical computer and it seemed to work fine, took it to the classroom and it worked fine for an hour this afternoon, now presents the same issue. The computer from their room I took back to my desk then started working ok. I have checked switches and moved to different ones - the computers affected are also spread all over the school. Have re-started the smoothwall box, on live monitoring I can't see it blocking anything from the affected computers. They use a transparent proxy, smoothwall is in bridging mode. I tried a usb network adaptor in one computer, still has the same issues. Starting to run out of ideas!

What is the room going to be used to teach? Sounds like a whole bunch of expensive technology is going to be put in there but not sure of the plan that justifies the need / ties it all together? Just one workstation for some uses would only allow teaching for 2 or 3 children at a time? Would everyone in the room be doing different things at the same time? What does the room have in at the moment? How is it currently used?

Do you get pricing direct from them?

Just fire anyone that does it. No warnings.

Is there an easy way to find out the email address for the login for the portal? We had cloud filter setup in 2020 and haven't used it for a while, a password reset request on all the email addresses we would have used doesn't seem to work!

Seem to have got cloud filter working reliably on our Chromebooks now. It knows who they are, gets the correct groups and blocks them getting on things as we would expect. The only thing it doesn't seem to do is notify us if they do go on something they shouldn't. We have alerts setup on the local smoothwall to email us, should this also work for the cloud filter? For example if I use testfiltering.com I will get an instant notification for radicailisation on a windows pc going through the smoothwall, if i try it on a chromebook with cloud filter I get nothing. Thanks

I had this working perfectly following the instructions on a test chromebook, started deploying our first set this week and it doesn't do it anymore! Not sure if I've changed a setting or if something else has changed.

Not sure if you ever solved this, but having spent most of my Sunday morning trying to get it to work - the attributes are case sensitive, Azure uses lower case, so department would work but Department wont. The google docs use a capital letter but this is incorrect, in other documentation for attribute mapping they show it as lower case.

Do you just sync onsite AD to 365 and to Google, or do you also sync 365 to google as well to provision accounts, and the on site AD to google just moves things around?

We've actually taken all our tablets out of our reception class and given them non touch screen laptops with external mice. Their main focus is getting the children to learn how to use a mouse, in the hope that as they progress through the school teaching ICT may be a little easier!

We went from a traditional dual bulb large venue projector to an Epson laser unit. Epson has been so much brighter and better image quality would never install anything else now. It's over a year old and image still looks as good and bright was when we installed it.

We sync our google users and groups from 365. Is there an easy way to automatically move users in certain groups to a different organisation unit? Essentially I want our pupil accounts to always go into our pupil OU to get the correct settings applied.

Ok thanks, think I've seen the smoothwall one before and will just work through all the other settings. With them going in to school so much it would be useful if Google offered a couple of default lock down options, like primary and secondary that schools could then just tweak!

Thanks, will do. We're a primary school so children aren't quite as determined to bypass things, but will still tighten them down. Don't suppose there is a list of recommended settings for Chromebooks in schools somewhere is there?

Thanks, that makes sense. Are there ever any issues with the cloud filter not installing? Just worried that the default is more relaxed filtering until the cloud filter is installed.

Does this not require the certificate to be deployed to the Chromebook then? How do I get around the issues of filtering/ ssl issues affecting the login process? Do I create a proxy just for the Chromebooks which has much more relaxed filtering, with the cloud filter then kicking in to provide the filtering once logged in, or is there a better way of doing this?

Sorry, this might turn into a bit of a long post! Looking at the best way to filter our Chromebooks. They are all being used on-site with no immediate plans to let them go off-site. (Primary School) I looked at getting the chromebooks to authenticate automatically to an 802.1x wifi, which I successfully did with my test account, this sent the account info to the smoothwall and filtering worked as expected. The few issues with this are: Wifi for when not logged on needs to be less filtered (ssl certificate not available at this point?) to allow the authentication part to take place (google and we redirect to 365/azure). I can achieve this by pushing out a wifi network with a proxy with less filtering, but how can I guarantee it doesn't connect to this wifi network still when someone is logged in? I can only push the Wifi settings out to an organisational unit? Is there a simple way to move users in a group (group synced from Azure ad) into an organisation unit automatically? Am I better off using connect for chromebooks? Have had a quick go at installing this and it didn't work too well, although I've just noticed the guide I downloaded from their site is dated 2016 so maybe things have changed a little? Will this work without requiring the user to authenticate again once they have logged into the Chromebook? If it's relevant our smoothwall appliance is setup in bridged mode with a transparent proxy.

We use smoothwall with the iPads connected to the wifi with radius auth so we know who each iPad belongs to - most are now 1:1, this means we can use the default browser. Where they aren't 1:1 we create accounts for the devices, staff have to then keep a record of who is using the devices and when (this isn't very popular!)

There are codes that can be entered on the door page if code is enabled (code tab), and pins can be entered on the user page under to token tab, not sure if this is what you mean? Maybe look in the events for the door just after it is opened with the PIN.

Does it already do scheduled nightly backups? Can you just use the most recent one of those?

That's the KB article I used. I noticed from what bknaggs posted above that I'd put User rather than UserID, I've corrected that and just waiting for the profile to re-apply now (seems to take much longer in Intune than it ever did with Airwatch?) to see if that resolves the error. Thanks

Currently migrating all our iPads to intune, as part of the new deployment I want to deploy the smoothwall browser. I have created an app config, which is applying as when I open the browser it tried to open the correct homepage, however not much else seems to be working. config is: Configuration key Value type Configuration value SmoothwallSerialNumber String 123412341234 - (Actual serial number entered) User String {{username}} UniqueDeviceID String {{serialnumber}} HomePageURL String http://ourintranetsite/ When I open the browser, it gives the error Invalid Smoothwall Configuration. The MDM configuration for the device is invalid. Are the variables for username and serial correct? The iPads are signed in using the company portal app, so intune knows the user details associated with the iPad.

Thanks for all the input, it looks like 3cx is the way to go then. What do people pay for / not pay for with 3cx? Are there any models of Yealink phones that are better than others? We currently run 2 types of phones - some for office staff and more basic ones around the rest of the school. Do their DECT phones work well? Do you have multiple ip base stations around the site and they roam happily between them? Have tried wifi voip phones before with very limited success.