stgoodyeara

Ive narrowed down the issues to our link load balancer. We have 3 ISP's presented to the smoothwall. If i bind all guardian traffic to a single ISP E-Stream Works. This would indicate that the smoothwall isn't binding all traffic for devices internally on the same ISP. The normal steps here would be to bypass the traffic in guardian and allow it straight out, adding an Link Load Balancing rule to force all the traffic down the same tunnel. The issue here is that the live streams seem to be presented from any number of Azure IP address, and it doesn't even seem to be limited to a single azure data centre. Ideally @tom_newton we could do with solving this behaviour on the load balancer, as having all of guardian limited to a single ISP is going to have serious impact, as would bypass huge amount of Azure. - - - Updated - - - Ive narrowed down the issues to our link load balancer. We have 3 ISP's presented to the smoothwall. If i bind all guardian traffic to a single ISP E-Stream Works. This would indicate that the smoothwall isn't binding all traffic for devices internally on the same ISP. The normal steps here would be to bypass the traffic in guardian and allow it straight out, adding an Link Load Balancing rule to force all the traffic down the same tunnel. The issue here is that the live streams seem to be presented from any number of Azure IP address, and it doesn't even seem to be limited to a single azure data centre. Ideally @tom_newton we could do with solving this behaviour on the load balancer, as having all of guardian limited to a single ISP is going to have serious impact, as would bypass huge amount of Azure.

@tom_newton This is the link load balancer causing this, if I bind guardian to single external interface the issue resolves. How can I stop the LLB rapidly changing the external IP of the end user device?

Tried this and it hasn't changed anything. We have multiple sites with centralised filtering and management and e-stream works at all the other sites. This would indicate its not a guardian issue @tom_newton Tried setting a public DNS on my device and that hasn't resolved the problem.

As far as i can see its a smoothwall thing, in the sense that if i take any device from behind our smoothwall and try it it work. Could possible by DNS, ill investigate this. I have circulated the link around other smoothwall establishments and its works too. So it seems specific to my box. Any other ideas?

Ok thanks. Don't feel like it's a category issue. I bypass guardian entirely and it still doesn't work. It looks like the JS that pulls the stream isn't happy. Wasn't able to provide creds but but I've published some public live streams for you. I've just updated the ticket with a new link as the initial one I gave allows access to the room but not the broadcast.

@tom_newton Ticket number #526256 i added you as a CC to the ticket too. Thanks Tom

The browser is chucking this: live.planetestream.com is in a "Do not Filter" Rule, the URL list is in an auth bypass and SSL inspection bypass too.

Surely it has to go through the proxy to be SSL inspected? The allow all rule is firewall, ive put a source exception in to bypass guardian. For piece of mind ive just tried turning of MITM in it's entirety and it still doesn't work.

We are a Planet E-Stream and Smoothwall customers. All elements of Planet E-Stream work over smoothwall with the exception of watch a live stream. It just get a buffer wheel and the stream never comes through. If i record the live stream i can watch it back in planet e-stream via smoothwall i just can't watch it live. I have added an any,any,any,allow firewall rule for my Laptop IP and added a guardian source exception and this has made no difference. I have tethered my laptop to mobile data and the live streams work, and similarly mobile phones that play the live streams stop when added to an SSID that behind the smoothwall. Surely adding the allow all firewall rules and guardian exception should solve this? Im out of ideas when ive kicked the biggest hole possible in the smoothwall and its still doesn't work. Any ideas?

Askham Bryan College is a specialist land-based college based across the North of England with centres in York, Middlesbrough, Saltaire, Wakefield and Newcastle. We offer a wide-ranging curriculum to our Further Education students, including Arboriculture, Horticulture, Agriculture, Animal Management, Countryside and the Environment, Engineering, Equine, Floristry, Motorsport, Professional Tree Surgery, Outdoor Adventure Sport, Sports Development, Coaching and Fitness and Uniformed Public Services. Askham Bryan College has a state-of-the-art Digital Skill Academy in which we focus on digital teaching, digital learning, digital assessment and digital upskilling. Using the tools and approaches set out in the colleges digital learning landscape. Which include the first in Europe, multi-user collaborative virtual reality suite which is at the heart of the building. We have a new and exciting opportunity for an IT Operations Manager to join our expanding IT Services team at our York campus on a permanent and full time basis. The IT Services team deliver and manage a computer network and end point solutions across all College sites. The team supports more than 4,000 users and over 2,500 devices. This encompasses a diverse breadth of technologies ranging from high end enterprise network infrastructure to mobile devices. We see ourselves as pioneers when it comes to implementing upcoming and emerging technologies for the purposes of teaching and learning and business operations. Some of our previous projects include Trimble autonomous tractors, LiDAR drones and Meta Quest headsets. Our upcoming projects include a racing simulator, IoT sensors, automated gardening, an animal behaviour lab and the use of Ai to name a few. It has never been a better time to join Askham Bryan College, as we celebrate both a regional and national award win for the development of digital innovation in teaching, learning and assessment. As a IT professional, you will have experience of successfully managing IT related projects and initiatives. With proven ability in IT planning, organising and development, you will also have in depth knowledge of modern IT Systems and Services. Including knowledge of Microsoft Active Directory Services, Virtualisation Technologies, Security Methodologies, Cloud Services, server and network infrastructure as well as Microsoft 365. You should be a hardworking individual with a "can-do" attitude. Adaptability to change and the ability to work under pressure, often meeting tight deadlines, are essential. You need to be a strong team player, confident in expressing your thoughts and ideas, and contributing to the team's goals and objectives. Additionally, you must be an effective communicator, capable of building successful working relationships at both operational and strategic levels. We define the values and qualities that we require from our people using the Askham Bryan College DNA. Hardwired into what we do, our DNA strands ensure that all colleagues are committed to delivering with purpose, taking ownership, building trust and always learning. We offer an inclusive, dynamic, challenging and rewarding place to work. Our colleagues enjoy a range of generous benefits including 35 days annual leave (pro-rata) in addition to bank holidays, ample free parking, canteen facilities, support for continuous professional development, Teacher’s Pension/Local Government Pension and a range of employee benefits as well as the opportunity to work within spectacular grounds. For an informal discussion about the role, please contact Tazambal Ali, Head of IT, [email protected] 01904 772 342. Job Description: Job Description IT Operations Manager.docx Apply only here: https://ce0761li.webitrent.com/ce0761li_webrecruitment/wrd/run/etrec179gf.open?WVID=5038431NZL&LANG=USA&VACANCY_ID=36552333J4

Welcome to the club. So far the only sure fire way of stopping this is not to use the affected account. I logged it with papercut and even directed them to this tread to show its isn't only me. And there is a pattern of involvement with the papercut print deploy client. I was told the client had no ability to do this and it's a Microsoft problem. The ticket was marked as resolved and closed, not great service from papercut. I think my next step is to just erases the account and recreated it with a new SID. Luckily for me it's a service account that does it so we rarely use it on endpoints and isn't federated with Any mailboxes etc.

+1 on this too. Posting for a follow. "The following error occurred in the Point to Point Protocol module on port: VPN2-1, UserName: . The connection was prevented because of a policy configured on your RAS/VPN server. Specifically, the authentication method used by the server to verify your username and password may not match the authentication method configured in your connection profile. Please contact the Administrator of the RAS server and notify them of this error." Just the one loan entry in the event logs.

Ive logged a call with papercut, they have initially said this is a microsoft issue. Im not convinced as the issue began when we started using papercut print deploy

Interesting. The service account was used to login to an end user desktop at the time that queued unshared. The end user desktop had the print deploy client on it. I used domain admin to replicate the drivers so I can confirm the service account that unshared the driver didn't do this. It was used to increment papercut install from version 18 to version 22 of the install.

Yes....have you got a solution?