Jump to content

ssouth

Members
 View Profile  See their activity

  • Posts

    185

  • Joined

 Content Type 

Everything posted by ssouth

  1. ssouth
    After running a recent security audit on AD, it highlighted that the Smoothwall object in AD still supports all insecure encryption types. This is shown in the msDS-SupportedEncryptionTypes attribute. I'm guessing that this is a legacy thing needed to support older devices? By default the setting was on DES_CBC_CRC, DES_CBC_MD5, RC4-HMAC, AES128-CTS-HMAC-SHA1-96, AES256-CTS-HMAC-SHA1-96 and I've changed it to a default value that supports RC4_HMAC_MD5 On Microsoft's website it says the following regards DES encryption - DES encryption uses a 56-bit key to encrypt the content and is now considered to be highly insecure. Hence, accounts that can use DES to authenticate to services are at significantly greater risk of having that account’s logon sequence decrypted and the account compromised. What are people's thoughts? Thanks in advance
  2. ssouth
    Thanks - I have emailed you. Regards
  3. ssouth
    Hi Thanks for that. I'd be very interested to see what your smoothwall access and firewall rules are relating to your chromebooks. I'd be very grateful if you could PM a couple of screenshots. It seem to me that for whatever reason the VLAN chromebook \ Secet Knock traffic is being just not being processed the same way that standard LAN \ other VLAN traffic is. A simple test of that is pings to the smoothwall when a lot of student chromebooks are connected - >250ms from the student chromebooks | <1ms from everywhere else. Thanks in advance
  4. ssouth
    Hi - tried the secret knock on and off - not a massive difference though possibly worse with the secret knock on. Not looked at channeling them through a proxy - never had to, and never had an issue when we used the connect for chromebooks app. An option though - thanks
  5. ssouth
    Hi - Yes - all ip addresses relating to the Chromebooks - all looks good there.
  6. ssouth
    Hi - yes it is already on the max value.
  7. ssouth
    We are fine with anything up to 250+ its when we get above that, that the fun starts.
  8. ssouth
    Hi No we don't clear profiles. We have our smoothwall support through NYES, but I'm quite happy for you to get involved. This morning Resource Usage on Smoothwall box has gone above 14! - why would that be? To me everything seems to point to the cloud filter - but very happy for someone to find some other issue. Regards
  9. ssouth
    Hi - I don't have \ allowed SSH access to the device, so can't run Top. Its an S9 Appliance - Intel® Xeon® E-2276G CPU @ 3.80GHz (GenuineIntel) Cores 6 (hyperthreaded to 12) Speed 3801.000 MHz 32GB Ram
  10. ssouth
    Hi - Yes, configured the secret knock method and the VLAN method as shown on their support website. Neither method seemed to make any difference sadly.
  11. ssouth
    According to our ISP all is good, thought I may need them to dig a little deeper. 500Mbit up and down with a dedicated fibre line to premises. I think the issue is more to do with the Smoothwall box and how that is maxing out - we have an S9 box.
  12. ssouth
    Cloud filter is also a total nighmare for us - I've just put a post on edugeek. If anyone can get this working properly, that would be great. For us it just "falls over" once we have a few hundred students using their own chromebooks.
  13. ssouth
    500Mbit on a 1Gbit bearer
  14. ssouth
    Hello Are they any schools out there who run a large 1 to 1 chromebook deployment and use the Smoothwall Cloud Filter on a separate VLAN? A few years ago we decided to use the cloud filter and the internet speed for the whole school just ground to a halt. We went back to the Connect for Chromebooks app method and all was fine. Over the summer we decided to try the Cloud filter again and the same thing is happening. When we get 500+ chromebooks on, the resource usage on the smoothwall box rises above 10. A simple ping to the IP address of the smoothwall box goes from <1ms to 100ms plus and also timing out. We are at a loss what to try, other than scrapping using the cloud filter again. Any advice or shared experiences would be happily recieved. Thanks in advance.
  15. ssouth
    After Easter this suddenly started working, so I suspect a Smoothwall update has sorted this. I don't recall changing anything.
  16. ssouth
    Worked absolutely fine for me. but as mentioned shutdown the VM's and ensure you have good backups just in case.
  17. ssouth
    Hello Hoping someone out there has the same setup and can shed some light on why we can't get Radius to play ball. Basically I have followed all the guides \ recommendations to keep it simple - 1. APs and Ruckus Controller are set in Smoothwall as Authorised Radius clients 2. Access control rules seup in Smoothwall for required groups. 3. Smoothwall Access rules on Ports - 1812 / 1813 4. AAA Server setup in Ruckus pointing to Smoothwall IP with Shared Secret 5. VLAN \ DHCP all setup fine - though I've even tried on on standard VLAN 1 I can connect with a Laptop to the SSID and the Laptop will get the required IP address, DNS, Gateway etc - so its certainly communicating in some way with smoothwall. What I don't get is a user prompt or any Internet access - its like Smoothwall isn't passing through the AD authentication through? My BYOD all works fine, so I know the general network setup is all fine. Any help would be very much appreciated. Thanks
  18. ssouth
    We've recently bought some 1930, 1960 and 6100 models and the UI is different on all of them.
  19. ssouth
    Very good for the price, no complaints from me other than they run a bit hot - not sure why they haven't put a couple of decent fans in it. Strangely enough I really like the UI and find setting up VLANS, general config etc really simple - and I'm no switch wizard.
  20. ssouth
    Re: Google Text to Speech Blocked On the school's chromebooks we are trying to get the "Text to Speech" feature working. It looks like it has been blocked due to HTTP Inspection. We are assuming this as we connected a Chromebook to our Visitor \ Guest wifi and the feature worked fine. Does anyone know what I need to allow through the smoothwall to get this working? I already have a "Do not Inspect" rule on various google services - Google Meet, Drive etc Thanks in advance
  21. ssouth
    Sounds like the weak point is the power supplies, which is a shame. I find the latest Aruba GUI a bit confusing, it took me ages to work out VLANS. Thanks for the feedback
  22. ssouth
    How do you find the setup \ software \ VLAN setup etc
  23. ssouth
    Re: Ubiquity switches - Thoughts?? Hi We are in the process of upgrading the school's fibre backbone to 10Gb, some of the cabling runs have already been done, but we have yet to replace any switches. We have always had HP \ Aruba switches and generally speaking I've been very happy with them (reliability, performance, ease of use). I am though tempted to look at the range of ubiquity switches, due to the very competitive prices. What are people's thoughts? If you have some, how have they performed, reliability etc. Thanks in advance.
  24. ssouth
    No - ours isn't set to automatically install new releases.
  25. ssouth
    1. No auditing policies enabled 2. No logging policies enabled that I know of 3. Log sizes Unused 414.49 51.45 Guardian 337.83 41.93 Reserved 40.94 5.08 Firewall 5.27 0.65 Traffic 3.89 0.48 Other 3.12 0.39 System 0.07 0.01
×
×
  • Create New...