CJF

Hi There! I don't work on the Pass product but it's worth raising a ticket with the Pass team if you haven't already via our support site: support.securly.com They'll be happy to work with you to find a solution to your issue. They will need to know your specific school and details which we wouldn't ask you to share here. Just from a general support point of view: if you're getting a blank page when visiting pass.securly.com there could be something blocking you from getting there (when I go to the same URL I get the login screen fwiw)

Bah, I thought we might have a nice root cause there :/

I have added some notes and observations to the ticket for the Support team, and raised it as an internal escalation. Sometimes the Support Team adds domains to the DNS bypass to just rely on Extension for differentiated filtering but that's treating the symptoms, not the cause. If you are going to combine DNS filtering with extension filtering, then it's better to use the simpler GuestDNS filtering as that isn't trying to do MITM or Authentication and rules out a lot of complications with double-filtering (not always an option for everyone as your network/setup may not accommodate this config) I'll look into this ZSTD compression setting - thank you for bringing it up!

We do occasionally see these errors, but it's intermittent and hard to troubleshoot. For sites that you're ok with anyone accessing you can add it to your Global Allow list to bypass MITM as a temporary workaround. If you're able to recreate it when using a hotspot to rule out double-filtering, then sharing a HTTP Archive (HAR file) with the support team might help us track down the root cause. If you're able to, I'd consider using the extensions for filtering as there is no MITM required and traffic doesn't come through our servers so you're generally going to have a better browsing experience.

Ah, well you might be lucky here. Using Guest DNS means you can manually apply it to an individual device even though the rest of the network uses our regular SmartDNS service. There's no need to separate it onto another SSID/VLAN (you might want to put it on a static IP and lock your firewall down so only specific devices can use Guest DNS).

It's a bit of a cop-out, but you could enable a Guest Network Policy, then use our Guest DNS servers to avoid MITM altogether. Downside is you'd only have very basic reporting for the devices that use our Guest DNS, no usernames etc or search terms. Not sure if that would work for you.

Hi Setro I’ll help you get up and running. Once you have an account created I’ll send through a welcome message with all the details you should need and I include a link to my calendar in case you’d prefer a remote session. Craig

Fwiw there is a policy test tool within Smoothwall. I’m not sure how easy it is to grant access to the tool nowadays but it was relatively easy a few years ago (the last time I touched the Smoothie UI)

I had a great time too, nice to catch up with you all and James is always entertaining too! Here's the pies for those that missed out this time:

@mattysmith80

Hello There! Here if you need me... feel free to @ me. I've lurked too long

Smoothwall has always strived to be a best of breed *content* filter, and I strongly believe that is the case. With the increasing complexity of School networks (not to mention the other sectors that we play in), we have added variants and options to address most customer needs. Where a third party technology is used (NAVL - Layer 7, Vipre - AntiMalware, Mailshell - AntiSpam), then we pass on costs. Support credits – a controversial issue indeed. The initial idea behind support credits was for them to be a benefit to the customer. The idea being that people don't like paying for consultancy/training throughout the life of a contract, and that with Support credits they could be used for non-support related activities. This is often in the form of a health check or help configuring a new feature. For a small number of customers on older support contracts, the number of credits is lower than average – this can be/should have been redressed in account management but I understand there are a few gaps. Call us! We are nice people... Last point - We are a UK based, firewall and filtering vendor. We are a private company and don't rely on third parties for funding or investment. We listen to our main customer base and have a rolling update/feature release cycle. You'll always have the latest version of Smoothwall and we won't have major versions to upgrade to. We're updating the firewall early next year and need people who know what they want to feed into our requirements – please talk to us, tell us your issues.

Sorry, I don't look at my mentions very often. As it's not released yet, our DPI engine doesn't have it listed. But they're publishing the source code under the Apache2 license, so I'm sure it'll get identified pretty quickly.

We use dban for that sort of magic.

If you have some hardware lying around you could install Advanced Firewall which has all the capabilities of a UTM but it's just a software install.

Hi Gream0604, Why don't you use static leases in your dhcp pool? I'm guessing you already know which have static addresses at the moment, just get their mac addresses and hand out their reservations in dhcp. Also, I hope that isn't your actual admin password in your script

Hi Guys... To get dropbox working smoothly on our test network I had to add the domain exception as suggested by Rob_F and also added the domain to the Custom allowed content category in [guardian » filtering » user defined categories]. Hope this helps...

GPRESULT should run as any user unless permissions are non-standard in AD which would cause all kinds of trouble. Have you tried rejoining one of the troubled machines to the domain?

Had a search on petri.co.il and found a similar query which was resolved: The user "xxx\xxx" does not have RSOP data. - Petri.co.il forums by Daniel Petri Turns out they reinstalled the TCP/IP NetBIOS Helper to get around it... Worth a try?