IrritableTech

Have you contacted them? Wonde seem to have come out of nowhere from my point of view with their data extraction tools. Two of our suppliers have moved across to them from groupcall exporter in the last couple of months. I had to contact wonde to find how I got access to their promised 'list of extracted data' but now I do have access it does exactly what it says on the tin. Wonde seem to have quite a lot of good paperwork behind them to ensure compliance, it's the companies they are sending the data off to which I'm struggling to case for documentation.

Last year I did buy some USB heated insoles.

Any data that can identify a living human being should have adequate technical measures to ensure it is secure. Once that data is leaving site it is expected that it should be secured - encrypting is a good way to ensure it is, at least in transit. A powerpoint of the lesson probably doesn't include any info of a living individual (you shouldn't need to worry about people in the public eye) so that wouldn't necessarily need encrypting. However once you allow some info to leave site unencrypted it is easier to make a mistake with data that should be protected. Technical measures only work along side robust policies and procedures that are adhered to and regularly audited.

Thanks very much for this - although I have rung and emailed them I'm hearing absolutely nothing.

If it is static it's more likely to be an issue with the user - what they are wearing on their body or feet and possibly what they are walking on. The fact that they are having an issue with the board is probably just that it is connected to ground via the mains and they would probably have the same issue if they touched a radiator I would have thought.

We're looking at a unifi system around school in the not too distant so we've got a couple of UAP-AC-EDU's in the ceiling near our office to test out both the wifi and the tannoy. I've integrated the unifi into radius and we can happily authenticate against that and gain access to our network and dynamically assign a vlan. All that works great. The issue we are having is that we'd like to emulate a feature of our existing solution - session time outs. We'd like our users to have to reauthenticate every so often - weekly or daily perhaps. I've set a session timeout in NPS against the user group which can authenticate, but the users never get kicked by the unifi access points. They don't seem to be honoring that setting (tried Idle timeout too and that didn't help). Now I have found a couple of community posts on the unifi forums which confirm this was an issue a while back, but nothing recently or anything to suggest that our AP firmware version (3.9.19) or controller version (5.6.29) should be having these issues. Has anyone got their Unifi working with Radius Session Timeout and if so can you let me know how? Failing that any other suggestions would be welcome.

You've rapid spanning tree configured on your core - what is configured on your edge switches? We had an issue with standard spanning tree where our edge ports were sending out dhcp requests before the port went into forwarding mode so they never got a reply. Although not really the issue you are seeing, I'm still wondering about the port protection question I asked a while ago.

Irrespective of profit margins, if we demand more redundancy we can expect to pay more service charge. If someone can promise more reliability and cheaper prices then they’ll win contracts and only time will tell if they prove better value and provide a higher service level. Even when talking about contracts with public services profit isn’t a dirty word. We pay considerably less now than with our LEA provider of old, and it’s far more reliable. The LEA ‘profits’ were fed back into the system to fund improvements and development - none of which was evident to us then or now.

And there could be - I for one have been in a situation where failover didn’t work when it should have done. You can argue for all the additional kit you like with the benefit of hindsight, but are we all willing to pay for it up front just-in-case? Those who are happy to pay more money do so with other providers who provide less services. The reason for outage will be interesting - and generally I find them honest and willing to learn and improve from previous experience.

We’ve just come back online.

Lets completely eliminate DHCP and DNS from the equation for a minute. Next PC to have the issue (that you can use for a bit at least) give the pc a static IP in it's correct subnet but no DNS. Ping IP addresses of devices you know should respond (no firewalls) and then also try and ping the effected PCs fixed IP from those devices. If giving a fixed ip and no DNS does seem to work, add your DNS servers back in manually and see where that gets you. Can you ping the names of some devices which should respond. Can those devices ping the client by name? If the problem still persists then it looks like a vlan issue. Tagging or routing is still amiss somewhere. Or possibly a mac address table issue? It might be time to crack open wireshark and take a close look at the traffic. You can try using it on the effected machine and on the machine which you are trying to ping. Otherwise you'll need to look into mirroring a port or a vlan to another port but that might add complication which may throw up other errors. Grab the portable version and shove it on a memory stick now so you run it on the next client to fail... https://www.wireshark.org/download.html Try ping the router, then a device on another network. Compare the packets being sent against each other and then look at the packets from the other end. [edit] I must be a slow typer, some additional posts came in while I was typing this.

Ours here is set like yours - client requests the update. Your DHCP server is authorized isn't it? Any network access protections set? Is name protection switched on? Any IPv6 setup on your network?

Too early to ask how things are? Theoretically you just need one route to your whole /19 network from your smoothwall. ‘Any of these addresses go via here’.

I didn't get one either, but lightspeed contacting end users directly doesn't seem right to me. We're not their customer.

For me the more straight forward way would be the following... Core switch needs a default route pointing to 172.27.205.54 - the smoothwall Each edge switch on VLAN 1 need a default route pointing to 172.27.198.254 - the core switch Each vlan (with dhcp) needs an ip-helper to 172.27.192.10 - the dhcp server And a default gateway setup to the appropriate IP on the core switch (much of this you already have). And then your clients will get their default gateway from DHCP. They might attempt to ping a switch - but it's in another network so they send it to their Default gateway, the core switch routes the traffic to the correct edge switch. The edge switch send a reply to it's default gateway and the core routes the traffic and sends it back onto the client. Having the ip route-static 172.27.192.0 19 172.27.198.254 on 172.27.198.254 suggests to me that there could be a loop - and if there is that could cause either a slow down, packets hitting their ttl or some port or loop protection kicking in and dropping the packets. Our core has a ip route 0.0.0.0 0.0.0.0 10.10.1.254 - our internet suppliers router. Our edge switches have a ip route 0.0.0.0 0.0.0.0 10.10.1.1 - our core switches IP within the 'switches' vlan. All other settings are set via DHCP.

Cheers - yeah the static route to the vlan 1 interface is a bit weird. It feels like it could be causing a bit of a loop and I can't see why it should be needed. When you updated all the configs on your other switches, what did you set their default gateway to? They should ping just like every other device as long as they have a correct gateway to send the return packet to. What is the switch utilization like? I can't see anything else in your config which is jumping out at me.

Thinking out loud here... is there any port protection set up on your switches? Or perhaps it's time to look at your switch config and document your dhcp scope options. Nothing should be sensitive, but feel free to PM if you prefer.

Did you expand your subnet from before or just chop up an existing range?

Just to confirm it isn't a DNS issue - you are pinging IP addresses of servers and clients from effected clients rather than names right?

We had it for a couple of years but have knocked it on the head now. I don't believe we got much use out of it.

In the x amount of years we had xibo our staff only ever uploaded power point files. So last year we scrapped xibo and used the free version of show point https://www.presentationpoint.com/software/showpoint/ Staff drop the power point into a shared folder and a few moments later show point starts playing it. For different displays just set up different shared folders and drop the right power point into the relevant folder.

Interesting - I’ve heard nothing, so thanks for this. We’ve nearly 500 devices running sophos so I’m pretty sure I’ll be hosting locally.

I believe we will need formal contracts with processors yes. Our wish is that processors will sign our contracts, however in practice I suspect we will need to agree to theirs. I'm contacting companies this week as well. I intended to start the ball rolling with the following What information do you hold on our subjects What actions are you taking to prepare for GDPR What technical and organisational security measures are in place to protect data What policies and procedures are in place and how do they ensure they are followed Who has access to the data regarding our subjects Where is the data stored regarding our subjects Now much of this was probably covered before we subscribed to a service under the DPA, however I think it is best to double check moving forward. Looking forward to hearing everyone else's input.

Notebook files are simply zips. Google looks at the content of the file and if it finds any of the following... .ADE, .ADP, .BAT, .CHM, .CMD, .COM, .CPL, .EXE, .HTA, .INS, .ISP, .JAR, .JS, .JSE, .LIB, .LNK, .MDE, .MSC, .MSI, .MSP, .MST, .NSH .PIF, .SCR, .SCT, .SHB, .SYS, .VB, .VBE, .VBS, .VXD, .WSC, .WSF, .WSH ...it'll block them no questions asked. Open up a notebook file that has been denied and I'd expect to see one of those included. As above - we've advised using google drive as there is no way around this that I am aware of.

@petben I was wondering if you've thought about the IO on your storage when a class full of kids run the software at the same time? Assuming that might happen of cause.