stgoodyeara

Ive narrowed down the issues to our link load balancer. We have 3 ISP's presented to the smoothwall. If i bind all guardian traffic to a single ISP E-Stream Works. This would indicate that the smoothwall isn't binding all traffic for devices internally on the same ISP. The normal steps here would be to bypass the traffic in guardian and allow it straight out, adding an Link Load Balancing rule to force all the traffic down the same tunnel. The issue here is that the live streams seem to be presented from any number of Azure IP address, and it doesn't even seem to be limited to a single azure data centre. Ideally @tom_newton we could do with solving this behaviour on the load balancer, as having all of guardian limited to a single ISP is going to have serious impact, as would bypass huge amount of Azure. - - - Updated - - - Ive narrowed down the issues to our link load balancer. We have 3 ISP's presented to the smoothwall. If i bind all guardian traffic to a single ISP E-Stream Works. This would indicate that the smoothwall isn't binding all traffic for devices internally on the same ISP. The normal steps here would be to bypass the traffic in guardian and allow it straight out, adding an Link Load Balancing rule to force all the traffic down the same tunnel. The issue here is that the live streams seem to be presented from any number of Azure IP address, and it doesn't even seem to be limited to a single azure data centre. Ideally @tom_newton we could do with solving this behaviour on the load balancer, as having all of guardian limited to a single ISP is going to have serious impact, as would bypass huge amount of Azure.

@tom_newton This is the link load balancer causing this, if I bind guardian to single external interface the issue resolves. How can I stop the LLB rapidly changing the external IP of the end user device?

Tried this and it hasn't changed anything. We have multiple sites with centralised filtering and management and e-stream works at all the other sites. This would indicate its not a guardian issue @tom_newton Tried setting a public DNS on my device and that hasn't resolved the problem.

As far as i can see its a smoothwall thing, in the sense that if i take any device from behind our smoothwall and try it it work. Could possible by DNS, ill investigate this. I have circulated the link around other smoothwall establishments and its works too. So it seems specific to my box. Any other ideas?

Ok thanks. Don't feel like it's a category issue. I bypass guardian entirely and it still doesn't work. It looks like the JS that pulls the stream isn't happy. Wasn't able to provide creds but but I've published some public live streams for you. I've just updated the ticket with a new link as the initial one I gave allows access to the room but not the broadcast.

@tom_newton Ticket number #526256 i added you as a CC to the ticket too. Thanks Tom

The browser is chucking this: live.planetestream.com is in a "Do not Filter" Rule, the URL list is in an auth bypass and SSL inspection bypass too.

Surely it has to go through the proxy to be SSL inspected? The allow all rule is firewall, ive put a source exception in to bypass guardian. For piece of mind ive just tried turning of MITM in it's entirety and it still doesn't work.

We are a Planet E-Stream and Smoothwall customers. All elements of Planet E-Stream work over smoothwall with the exception of watch a live stream. It just get a buffer wheel and the stream never comes through. If i record the live stream i can watch it back in planet e-stream via smoothwall i just can't watch it live. I have added an any,any,any,allow firewall rule for my Laptop IP and added a guardian source exception and this has made no difference. I have tethered my laptop to mobile data and the live streams work, and similarly mobile phones that play the live streams stop when added to an SSID that behind the smoothwall. Surely adding the allow all firewall rules and guardian exception should solve this? Im out of ideas when ive kicked the biggest hole possible in the smoothwall and its still doesn't work. Any ideas?

Askham Bryan College is a specialist land-based college based across the North of England with centres in York, Middlesbrough, Saltaire, Wakefield and Newcastle. We offer a wide-ranging curriculum to our Further Education students, including Arboriculture, Horticulture, Agriculture, Animal Management, Countryside and the Environment, Engineering, Equine, Floristry, Motorsport, Professional Tree Surgery, Outdoor Adventure Sport, Sports Development, Coaching and Fitness and Uniformed Public Services. Askham Bryan College has a state-of-the-art Digital Skill Academy in which we focus on digital teaching, digital learning, digital assessment and digital upskilling. Using the tools and approaches set out in the colleges digital learning landscape. Which include the first in Europe, multi-user collaborative virtual reality suite which is at the heart of the building. We have a new and exciting opportunity for an IT Operations Manager to join our expanding IT Services team at our York campus on a permanent and full time basis. The IT Services team deliver and manage a computer network and end point solutions across all College sites. The team supports more than 4,000 users and over 2,500 devices. This encompasses a diverse breadth of technologies ranging from high end enterprise network infrastructure to mobile devices. We see ourselves as pioneers when it comes to implementing upcoming and emerging technologies for the purposes of teaching and learning and business operations. Some of our previous projects include Trimble autonomous tractors, LiDAR drones and Meta Quest headsets. Our upcoming projects include a racing simulator, IoT sensors, automated gardening, an animal behaviour lab and the use of Ai to name a few. It has never been a better time to join Askham Bryan College, as we celebrate both a regional and national award win for the development of digital innovation in teaching, learning and assessment. As a IT professional, you will have experience of successfully managing IT related projects and initiatives. With proven ability in IT planning, organising and development, you will also have in depth knowledge of modern IT Systems and Services. Including knowledge of Microsoft Active Directory Services, Virtualisation Technologies, Security Methodologies, Cloud Services, server and network infrastructure as well as Microsoft 365. You should be a hardworking individual with a "can-do" attitude. Adaptability to change and the ability to work under pressure, often meeting tight deadlines, are essential. You need to be a strong team player, confident in expressing your thoughts and ideas, and contributing to the team's goals and objectives. Additionally, you must be an effective communicator, capable of building successful working relationships at both operational and strategic levels. We define the values and qualities that we require from our people using the Askham Bryan College DNA. Hardwired into what we do, our DNA strands ensure that all colleagues are committed to delivering with purpose, taking ownership, building trust and always learning. We offer an inclusive, dynamic, challenging and rewarding place to work. Our colleagues enjoy a range of generous benefits including 35 days annual leave (pro-rata) in addition to bank holidays, ample free parking, canteen facilities, support for continuous professional development, Teacher’s Pension/Local Government Pension and a range of employee benefits as well as the opportunity to work within spectacular grounds. For an informal discussion about the role, please contact Tazambal Ali, Head of IT, [email protected] 01904 772 342. Job Description: Job Description IT Operations Manager.docx Apply only here: https://ce0761li.webitrent.com/ce0761li_webrecruitment/wrd/run/etrec179gf.open?WVID=5038431NZL&LANG=USA&VACANCY_ID=36552333J4

Welcome to the club. So far the only sure fire way of stopping this is not to use the affected account. I logged it with papercut and even directed them to this tread to show its isn't only me. And there is a pattern of involvement with the papercut print deploy client. I was told the client had no ability to do this and it's a Microsoft problem. The ticket was marked as resolved and closed, not great service from papercut. I think my next step is to just erases the account and recreated it with a new SID. Luckily for me it's a service account that does it so we rarely use it on endpoints and isn't federated with Any mailboxes etc.

+1 on this too. Posting for a follow. "The following error occurred in the Point to Point Protocol module on port: VPN2-1, UserName: . The connection was prevented because of a policy configured on your RAS/VPN server. Specifically, the authentication method used by the server to verify your username and password may not match the authentication method configured in your connection profile. Please contact the Administrator of the RAS server and notify them of this error." Just the one loan entry in the event logs.

Ive logged a call with papercut, they have initially said this is a microsoft issue. Im not convinced as the issue began when we started using papercut print deploy

Interesting. The service account was used to login to an end user desktop at the time that queued unshared. The end user desktop had the print deploy client on it. I used domain admin to replicate the drivers so I can confirm the service account that unshared the driver didn't do this. It was used to increment papercut install from version 18 to version 22 of the install.

Yes....have you got a solution?

I have this same issue. I've enabled operational logging and can see the user that's unshared the printer, its a random service account that isn't related to printer at all (checked all the involved services). The computer name is given as the print server itself. There is nothing in the security logs for this account suggesting a logon event has occurred. No profile on the server for this user. Any ideas?

Askham Bryan College is a specialist land-based college based across the North of England with centres in York, Middlesbrough, Saltaire, Wakefield and Newcastle. We have an exciting opportunity for a Service Desk Technician to join our IT Team here at our York campus. The IT Team deliver a computer network and end point solutions across the whole College campus which spans multiple sites. The IT Team supports in excess of 4,000 users and over 2,500 devices. This encompasses a diverse breadth of technologies ranging from high end enterprise network infrastructure to mobile devices. This is a full time and permanent role working 37 hours per week. To handle incoming technical support incidents, requests and changes and to Fault diagnosis and repairs to a wide range of end-user devices. Call management of own calls and cover if required for other calls. Assigning calls to the other team members to complete the task. Escalating appropriate calls to the right person to resolve a problematic issue. Provide updates and ensure ongoing customer communication is maintained. The successful candidate will provide technical hardware and software support across all departments within the college. The ideal candidate will have previous experience in a similar role supporting an internal Microsoft Windows Network as well as an Office 365 hosted environment. The ideal candidate will already have experience within an IT support environment with a good knowledge and experience of helpdesk software, basic PC hardware, software & applications, fault finding and providing high levels of customer service. With a passion for all things IT as well as customer service. Additional experience in Office 365, Azure AD, Exchange Online and some technical knowledge around on-premise infrastructure, including Aruba networking, managed printing., VMWare would also be an added bonus. We define the values and qualities that we require from our people using the Askham Bryan College DNA. Hardwired in to what we do, our DNA strands ensure that all colleagues are committed to delivering with purpose, taking ownership, building trust and always learning. We offer an inclusive, dynamic, challenging and rewarding place to work. Our colleagues enjoy a range of generous benefits including 35 days annual leave (pro-rata) in addition to bank holidays, ample free parking, canteen facilities, support for continuous professional development, Teacher’s Pension/Local Government Pension and a range of employee benefits as well as the opportunity to work within spectacular grounds. https://www.eteach.com/job/it-technician-1355254

IT Manager Malton School is a high achieving and over-subscribed 11 to 18 school situated between York and the North York Moors National Park. This is an exciting time as the school is growing and moving from strength to strength. We have a fantastic opportunity for an IT Manager to join us at our Apple Distinguished School close to Malton town centre. Playing a vital role in our continued growth and development, your knowledge, self-motivation, effective time management and excellent interpersonal skills will see you as the primary contact for the technological provision of the school. The IT Manager role is key in enabling us to deliver quality education and learning to over 1000 students, whilst ensuring our IT security and stability. You must be dedicated to delivering this essential support service in a manner that embraces our school values. This is an established post to start as soon as possible. 37 hours per week (Full Year but we would consider Term Time plus an additional 4 weeks) Grade K, Scale points 29 to 32 (£35,411 – £38,296 FTE) The successful candidate will have: - Extensive experience in a similar role (a degree level qualification in a relevant area is desirable but not essential) - Experience of overseeing the management, installation, maintenance, availability and security of an ICT network - An ability to problem-solve and manage own time effectively. Here at Malton School, we can offer: - The opportunity to work as part of a vibrant, supportive community which engenders a real sense of belonging - A coaching culture which is a key focus for bespoke staff development - Involvement in the Red Kite Teaching School Alliance which enables us to work collaboratively, sharing best practice Further information can be found at https://www.maltonschool.org/essential-information/vacancies/ or by contacting Claire Hardware at [email protected] Closing date: Midnight Sunday 4th June 2023 Interviews: Thursday 8th June 2023

I know this is a very old thread, but this solution sound beautiful. If you could post the code that would be wonderful

We are still having small issues with this, some devices simple will not connect to the 802.1X student wifi. If i create a new wifi with a different name and identical settings (the same NPS server, certs etc) it will work. If i factory reset the device it will begin on the student wifi. BUT If i restore it from iCloud backup it still wont work. Its like there is a dodgy wifi profile stuck on the device. Ive tried the reset network settings etc, all that seems to work that i can find is a factory reset without restore from backup

Ive added a self signed cert with an expiry of 12 months to the radius auth server and its been no problem since.

You have got your auth type on your proxy changed to "core auth" in web proxy -> authentication. If you haven't got the correct auth type in the proxy the existence of the agents on the DCs is irrelevant. Also doesn't have to just be DCs you can put the agent on file servers too. We had to do this due to dreaded laptops being hibernated with a login event off site. This way if the users pull a file their auth record gets refreshed too.

I have install 70 unifi APs to support 1200 users in a 1:1 device environment and AP performance at time is awful. Started the install back in May and when years 11 and 13 left for study leave, leaving about 800 users it worked ok with few issues, that i put down to configuration snagging. General feedback is that it was much better than the old system.....new term....performance at times awful! Our 1:1 scheme is heavily used, its not a vanity project, its actually pivitol to our T&L strategy We have 1 U6-LR AP (the LR wasn't my preferred choice but stock issues its all that's available) per teaching space. The max client load per AP in a standard classroom is at 38, often in the mid 20s. Ive never seen an AP exceed 40 users. I've done all the usual stuff, manually scan area for best channels, adjusted power of APs to minimise bleed outside the room (they are almost all running on Low with the exception of AP in large communal area that are on med). All APs are ceiling mounted as close to the center of each room as possible. Below is a signal scan of what happens when the performance nose dives. (2.4 channel in green and 5ghz in blue.) The scanning device is in the dame room as the AP less than 3 meter from it, in open space. Any ideas what could be causing signal to yo-yo like this? It's practically unusable during these periods, and can go on for 20/30mins at a time. It doesn't do it all the time, sometime performance is excellent. The feedback from staff across the site is its intermittent, with enough problems to result in thee digressing away from planning lesson on iPad. Queues are forming at the photocopier, we have seen this for years! Any help appreciate. Even if it's just to sign post me towards a Unifi specialist that can help!

A number of my students have picked up the ios 16 beta release on our iPad 1:1 device scheme. These device will no longer join our 802.1x radius auth network. They will join a shared key network. All iOS 15 devices remain unaffected, and rolling back the device to iOS 15 solves the problem. Our setup is a unifi network using window NPS on server 2016 as the radius auth server. Has anyone else discovered this issue and a possible solution? I wonder if it's the self signed cert (that has an expired of 2029) on the radius server, but have not yet been able to test this. I can use the mdm to hold back the devices on iOS15 to limit the impact when iOS 16 goes general release. But as the devices are a mixture of school provided devices and some BYOD apple devices I can't fully mitigate this. As you know rolling back iOS version once its on general release is practically impossible. If anyone could share their experiences that would be great, even if it's report no issues on iOS16 with radius (then I atleast know its possible)

My issue this morning was simply trying to load the login page. It was across the entire site.