DavidYoung

School web filtering should be in line with the Safer Internet Centre's Appropriate Filtering guidance: https://saferinternet.org.uk/guide-and-resource/teachers-and-school-staff/appropriate-filtering-and-monitoring/appropriate-filtering. The last point in the linked PDF states: "Reports – the system offers clear historical information on the websites visited by your users" If you're relying on this as your main filter in school then I would suggest it doesn't comply. I suspect this isn't Jamf's fault as Apple provide a very limited API to enable web content filtering on iOS devices and they likely can't get the data required. This is why the filtering provider I work with don't use Apple's API and have developed a solution for full device filtering using a VPN profile. I think other providers have developed similar workarounds.

Salary Scale E Point 9 – 15 - £24,243 - £26,984 p.a. (depending on experience) 36 hours per week / 52 weeks per year Start Date: As soon as possible Coombe Academy Trust is a successful multi academy trust consisting of two secondary schools, three primary schools and a central team in the Royal borough of Kingston Upon Thames. The Trust is seeking to appoint a motivated individual to complement our friendly, professional IT team, and have the commitment to be part of an innovative and forward-thinking academy trust. Job Advert Job Description Person Spec Application Form Closing Date Monday 18th July 2022 www.coombeschools.org

Unfortunately, SignInApp writes attendance marks to SIMS but not Arbor. They say it is because it isn't supported by the Wonde-Arbor integration. I really wish they did have this functionality and hope it comes soon.

You can download the report they need from School > Data > Export > ParentPay Export, you don't need to create it. Source: https://support.arbor-education.com/hc/en-us/articles/360002845037-ParentPay-and-Arbor-integration

I did have to contact them a few weeks ago to ask them to stop sending relentless emails reminding us that we hadn't renewed despite having given notice about 3 times already. I don't think anyone in that organisation talks to anyone.

We're migrating from SIMS to Arbor, today's the last day of term and our upload day. Our SIMS contract expired yesterday so I sent this chain of messages to our project team: Just my own messages posted, there were responses in between. I feel a bit bad but the opportunity was too perfect.

Just uploaded 5 SIMS databases to Arbor. Now just waiting for our sites to go live next week.

In relation to Arbor? To be fair, most of their emails fully align, it is just the upload system where SPF and DKIM pass but from a different domain so DMARC doesn't align but the record is not set to quarantine or reject. I think it is more to do with the fact that the emails contain links, etc. though full alignment would increase the confidence score.

Salary Scale E Point 9 – 15 - £24,243 - £26,984 p.a. (depending on experience) 36 hours per week / 52 weeks per year Start Date: As soon as possible Coombe Academy Trust is a successful multi academy trust consisting of two secondary schools, three primary schools and a central team in the Royal borough of Kingston Upon Thames. The Trust is seeking to appoint a motivated individual to complement our friendly, professional IT team, and have the commitment to be part of an innovative and forward-thinking academy trust. Job Advert Job Description Person Spec Application Form Closing Date 19th April 2022 www.coombeschools.org

Check your junk mail, the first set of emails all sent into spam for me and I kept chasing, they said they'd sent and resent until they mentioned to check (I never usually check my junk as Gmail's usually pretty good). We're migrating 5 schools to Arbor this Friday for go live after Easter. I've got all three upload emails already.

My guess would be Ericom Connect RDP HTML client as I have seen they use this to run SIMS for online training sessions. Same principle though. When I spoke to our account manager after learning of the contract changes (that seems a long time ago now), they were insistent that it wasn't remote desktop but I'm sure it is as all the info says it is the same product and experience as currently.

Yes, no difference on iOS or Windows devices.

Interesting read and a lot of conflicting opinions in that thread, many say simply deploying CA trusted certs fixed the problem which is what we experienced. As I say, we are only piloting it as we found that there are some other caveats, particularly when renewal comes around and it requires extra steps from the end user to enter the correct domain name for the cert to validate. I think those against it in the thread and other articles I've found online are against the idea of using passwords in this manner entirely and recommend to use client certificates to authenticate. This makes a lot of sense as it is an area that could very easily lead to credential theft and can't be secured by multi-factor authentication, etc. The best option would be to use a RADIUS infrastructure with an onboarding app/site/similar which would authenticate using the school's IdP (e.g. Google/Microsoft, etc.) and then provision the correct client and server certificates onto the device as a profile so that the actual connection is secured using that certificate going forward. I know some wireless vendors provide this and there are also some 3rd party apps that can act as RADIUS servers to any infrastructure but these can be quite expensive.

That makes a lot of sense, and explains our experience when moving to the proxy setup as that was a new IP address but a lot of the traffic would also be going directly out of the schools' own IP with a similar outcome. I wonder if Google just sort of got used to it after a few days once the traffic patterns were analysed. I guess this is just one of the problems when are beholden to our new cloud overlords! @paulkerton, as it is affecting core Google Workspace applications (Sites and Calendar), have you reached out to their support?

That's strange then. I remember the time this happened to us with Google sites was when we moved to a new proxy server and suddenly had 5 schools presented behind a previously dormant IP address so I think needed a bit of warming up. It's probably worth checking with SB that there isn't any traffic associated with your IP address that isn't from your school and that there haven't been any network/IP changes recently.

Do you know how Schools Broadband present school IP addresses to the internet? Does each school have their own public IP address or are multiple schools behind a shared IP? If it is the latter then it is likely that something happening in one school such as compromised devices could be sending malicious traffic which is getting picked up. Our provider gives each school their own public IP address and I think I have seen this just once in the last few years.

We've been testing option 1 on a small number of devices (Pixel 5, 6 and my OnePlus Nord has the same restriction). We use a LetsEncrypt certificate deployed using DNS validation. The end-users need to enter a domain name when they connect. We issued the cert to wifi.domain.org but the end user only needs to enter domain.org for it to validate. I haven't seen anything suggesting this is not good practice or that it is misusing the certificate. Can you please share where you discovered this?

I'm also going to be affected by this. I'm holding out to see what Google actually decide to do for non-businesses affected by this. I have 2 domains with one real user on each. My plan for email delivery moving forward is this: https://blog.cloudflare.com/migrating-to-cloudflare-email-routing/ as my domains are hosted on Cloudflare anyway. Seems simpler than using another email service but don't know how outbound emails will work yet.

Full-steam-ahead with Arbor. We have started with two secondary schools. Had our first live data site released last week and are going through the data checking. SIMS cannot agree with itself on various figures making it harder! 3 primary schools projects start in a few weeks too.

We've just moved to Edval as are switching from SIMS to Arbor for our MIS. Our timetabler was convinced there was nothing better than NovaT6 out there having looked at Timetabler and some others but was very impressed by Edval. It is still Windows based and they said they were working on a cloud version. It is pretty expensive but you get a fair chunk of training included which our team are starting now. Fingers crossed it should be good!

How are you counting this as I represent 5 schools and I imagine there may be more MATs represented so that number could be a fair bit higher even from EG members.

Did you export the documents because Bromcom wouldn't bring linked documents over or was it a decision to not bring the docs into the new system? We have thousands of linked documents as have been paperless for several years now so it would be a big issue if these couldn't be migrated.

Sorry for not updating before Christmas. We tried to give our notice but were told by our account manager at ESS that, in line with the email sent at the start of December which had the 'Next Steps' section that we did not need to give notice before the end of December or even at all. I did want to just double-check that we wouldn't inadvertently be tied into the new contract and our account manager confirmed that their original position was to automatically move everyone on to the new contract but that this had changed: I suspect this is was in response to the threat of legal action. So we have not confirmed our notice and I will do this once we have a new supplier in place before the invoice gets raise in February.

One of our schools got stung by a 3 year contract when they became an academy and had to re-licence. They signed a 3 year deal and wanted to remove a module after the first year but couldn't as it was under contract. I would be surprised if anything were to change on that front.

I've been in discussions with them and they don't seem to be hanging around in response to this so may have something soon. We met with Arbor yesterday and they seem pretty set on their 17th December deadline to get the order in for a guaranteed April launch, do you think you'll be in a position to make the decision by then? It doesn't give us loads of time. Bromcom wanted a commitment early-mid January but seemed confident they could make it work if timings slipped. @supportman, was it Bromcom that moved you in two weeks?