drewp

Is anyone seeing a problem with the desktop version of outlook not being able to access mailboxes that are shared with the user? Seem that new messages are arriving, the unread message count increases but the messages are not being shown. Logon to the mailbox that is being shared with the user and the messages are there... Have rasied a ticket to MS but thought that it might be related to this problem of opening shared mailboxes...

Might also be good to disable QUIC using GPO/MDM to cover all possibilities? Computer Configuration\Administrative Templates\Google Chrome\Allow QUIC protocol = Disabled Computer Configuration\Administrative Templates\Edge\Allow QUIC protocol = Disabled

For the Boarding SSIDs I have it setup to send RADIUS Auth to NPS and the Acc to the Smoothwall server - not forwarding the ACC from NPS to Smoothwall. Also have other SSID sending RADIUS Auth and Acc directly to the Smoothwall server. Smoothwall has an Auth option for "Redirect users to SSL Login page (with session cookie)" you could look at. It would need the devices to have the SSL Certificate from your Smoothwall Server to be installed on the BYOD to work, but you would also need that installed for HTTPS Interception. I have found Google Pixel Phones are difficult to get working with self-signed certificates...

Safeguarding Exclusions does not appear to be a standard category, must be a custom category that has been created on your site?

For me a google search for gamepluto is blocked - Do you have an HTTPS Interception policy enabled for search engines?

Could be cached content? Have you cleared browsing data on the devices?

Done a test on a device that has the cloud filter agent and it blocks that site as Video Games, Online Games. Are other sites in the policy being blocked? Have you got a ticket opened with Smoothwall's Support Team?

Are the users on the devices being correctly identified and the correct policy being applied?

For me gamepluto.com is in Video Games and Online Games, policy tester is showing it as being blocked for pupils. Content modification policy "Remove QUIC Header" applied to everyone everywhere What does the real-time webfilter logs show? What does the policy tester show?

Did a restart this morning and seems to be happier. I did log a support case with some logfiles.

@kennysarmy Are you blocking Adverts on YouTube using a Content Modification policy? https://kb.smoothwall.com/hc/en-us/articles/4408781524242-Blocking-adverts-on-YouTube With it disabled it seems to help here... More testing suggest that it does not help...

Is anyone else having problems with YouTube showing "You're offline. Check your connection." when trying to play videos? We are using Smoothwall for our filtering.

You could try a web proxy exception for the ip address of the doorbell - Guardian>Web filter>Exceptions

Office 365 A1 licences here and I can access the Legacy MRM policies...

Do you have a HTTPS inspection policy for Staff, Facebook App, Everywhere, Do not inspect Do you have a HTTPS inspection policy for Pupils, Facebook App, Everywere, Decrypt and inspect - this would cause the app to stop working for pupils. Social Media categories would need to be unblocked for staff web filter policies, and blocked for pupils, would need to check that no urls for social media platforms are included in the Authentication bypass/exceptions. Smoothwall have a KB article on WhatsApp - https://kb.smoothwall.com/hc/en-us/articles/360002134304-Configuring-the-Smoothwall-Filter-and-Firewall-to-Allow-Access-to-WhatsApp#:~:text=If%20the%20WhatsApp%20application%20doesn%27t%20work%20through%20a,as%20well%20as%20a%20Guardian%20and%20HTTPS%20Policy. Hope this is some help...

We use the legacy MRM policies to have seperate retention for the different default folders, eg inbox 12 months, deleted items 10 days. If there is a folder outside of the defaults (Inbox, Sent, Deleted etc) the legacy policies wont apply to them. The moden policies would apply to non-default folders, but it is a one rule for all items - https://learn.microsoft.com/en-us/microsoft-365/compliance/create-retention-policies?view=o365-worldwide&tabs=teams-retention

If its just the Deleted Items folder, you could set up a Exchange (Legacy) MRM Retention Policy. In Microsoft Purview, look under Data lifecycle managment, then Exchange Legacy. You would need to create a MRM Retention tag that applies to the Deleted Items folder, how long to keep items for then the action after retention period. The MRM Rentention tag woud then need to be assigned to a MRM Retention policy. Then the staff mailboxes would then need to have the MRM policy assigned in the Exchange admin Center. You can bulk assign the MRM policies.

Not sure if this will help, is the "Connect for Chromebooks" whitelisted in your webfilter policies and "Do not inspect" in your HTTPS Inspection Policies. https://kb.smoothwall.com/hc/en-us/articles/360002135604-Allowing-Access-to-Google-Services

How do you handle boarding pupils using their own mobile data in boarding houses? Do you have policies that say it should not be used or if Parents providing a mobile device with a Data package that they are responsible for it?

We are having problems with embedded YouTube videos in PowerPoints but not when using YouTube in a browser - any one else seeing this?

Are they shared devices? You could try the Authentication Method "Redirect users to SSL logon page (with backgroup tab)" this would show a logon page in the browser for them to enter their credentials. There are some setting for the SSL Logon Page under Services>SSL Login. RADIUS might also work for you if they are not shared devices. Not personaly used "connect for chromebooks"...

I would recommed having a chat with John Levis @ Very-PC about licensing!

You could turn on some advanced settings for the block page to show which group the user account is in, this might show if the user is in multiple groups with mulitple policies being applied. Guardian> Block Page> Block Pages Edit the block page you have configured, then click on Advanced. Select "Show user group" You could use the policy checker to see what policies are being applied to the user or group Guardian> Policy tester Would be worthwhile creating a support ticket with Smoothwall!

Do you have a HTTPS Inspection rule doing Decrypt inspect for Youtube? Do you have a Content Modification Policy to remove QUIC Header? (Who=Everyone, What=Everything, Where=Everywhere, Action=Apply, Remove QUIC Header) There is a Content Modification Policy that can remove YouTube Adverts (Who Everyone, What YouTube, Where Everywhere, Action Apply, YouTube:Remove Adverts)

Problem seems to have gone away for us now... Now has an advisories under Service Health Some users are only able to view the SharePoint Online service in read only mode SP377943, SharePoint Online, Last updated: May 10, 2022 8:45 AM Estimated start time: May 10, 2022 8:15 AM Some users are only able to view the OneDrive for Business service in read only mode OD377954, OneDrive for Business, Last updated: May 10, 2022 8:50 AM Estimated start time: May 10, 2022 8:35 AM