OB1

I've seen this issue before. I'd advise a more restrictive firewall policy. Only have the ports you need open, everything else should be closed.

Doesn't sound right. PM me your account details / Serial.

PM me your ticket reference, I'll take a look.

Yes Those 407s shouldn't be leaving your network. That's the Smoothie saying 'hold on, you're asking for x, but I don't know who you are or whether I should give it to you'. The client should then supply the Smoothwall with the relevant information, cheked against Active Directory or similar depending on your setup, after which all the requests from that client for that session are authenticated and can be traced back to it. If the client fails to provide valid credentials, it will end up in the Unauthenticated IPs group. This is just like any other group, and you can use it to block/allow categories as you wish. Most people use it as a catchall and keep it very restricted, or deny internet access entirely. I think there are some crossed wires here. Authentication is between the client and the Smoothwall. Nothing to do with the external server. Have a look in Logs and reports » Reports » Reports » Users. If you feel there are any serious holes in your audit trail, we can take a closer look. Correctly configured, a Smoothwall can provide a pretty comprehensive audit trail.

It's a https site, so if you're not decrypting and inspecting secure traffic you'll want to block the sites.google.com domain as a whole. Also, you may want to check your policy ordering. Higher rules take precedence. When you say you Allow google, do you mean you explicitly have this in an allow policy? If so, this is a bad idea.

Similar method to Youtube for Schools, except you'll need to create a custom category that contains google.com to use as your 'what'.

Depending on your setup, this might help.

Are you filtering the iDevices transparently? Also, are you using the iDevice app or going through the browser?

Smoothwall provides multiple authentication methods, depending on your infrastructure. Give us a call on 0870 1 999 500 or head to www.smoothwall.com and click Contact Smoothwall.

Ah true, getting my threads crossed...

Glad that's sorted. That domain is already in our YouTube category though... what did you add it to?

If you mean logged into youtube, edufilter should have stopped people logging in, except the YouTube education administrator account and any delegated accounts. This is the normal behaviour.

Whitelist the iTunes category and add it to Authentication Exceptions. That category contains all the addresses necessary. You'll also want to follow AMLightfoot's link and open the ports it recommends.

Through a Smoothwall?

The other youtube domains redirect to youtube.com and just add a language parameter. making sure youtube.com and ytimg.com are unrestricted should be enough.

Seems fine at this end. Are you doing any other content mods on youtube? And could you post/PM the specific video?

Unfortunately the answer to both is no. You need an individual user as the 'Who' in a policy to ensure that the allows/blocks only apply to them and don't interfere with anything else 4OD seem to have coded their player to hang if the adverts aren't available. This is probably deliberate. They also pull their adverts from a multitude of servers that change on a regular basis, so allowing only their adverts would quickly descend into a hair-removal exercise. Youtube however should be able to deal with this. Which videos on youtube are causing you problems?

Fixed.

The first time I saw all that traffic scrolling past in pretty colours I felt like I was in way over my head, but once you read the tutorial and get your head around some basics it's amazingly powerful. It's like a car. Much faster than walking, but you have to learn how to use one first.

Wireshark on the PC(s) having the problems. This will show up packet loss and other issues, and is generally an awesome tool for network troubleshooting. It can be scary though...

If you have a web filter in place blocking accounts.google.com should do the trick. You have to sign in to do pretty much anything on google, so this will eliminate the calendar, drive, gmail and installing apps.

The closest thing without bypassing the smoothie altogether is Whitelisting. If you want to do it for a single site you'll want to create a custom category in Guardian » Policy objects » User defined. This will then show up in the policy Wizard, where you'll want to set the action to 'Whitelist' along with your chosen Who / What / Where / When. What's the site in question and on what device? There may be some additional workarounds.

Unfortunately I don't believe Youtube Edu has this functionality, it's geared around adding individual videos rather than channels.

I had driver issues with puppy, but that was on a decrepit old celeron laptop. Had no issues with Lubuntu on the same hardware, and now use it's desktop environment, LXDE, whatever distro I've got.

Indeed, not an educational video in and of itself. His channel is part of youtube education though, not much we can do about that right now I'm afraid, Google decide what goes in and what doesn't. Looks like your header is functioning as intended though. There's a sticky here with some information on it that might be useful.