IrritableTech

WinDirStat? https://windirstat.net/ I think there is a portable version you make be able to shove on a share too.

Although lightspeed requires you to use its proxy to decrypt ssl traffic. Even if small schools don’t setup vlans, they can probably reserve IPs for school owned devices and set different filtering rules based on these IPs over the others. Turning the proxy on and off at home is quickly sorted with a pac file. First statement should interrogate what IP it is communicating on... if a school one use the proxy, if anything else go direct. As for the question about v3 well we don’t really know do we until it’s live - and then the story may have been different with all SBs schools on a v3 platform rather than just some on LS and some on NS. A lot of customers have lost confidence in the brand, and the fact that NS doesn’t require specific hardware means SB can spin up a new vm or add additional ones within minutes. It does seem like a more robust and scalable solution for them.

I don’t believe so. You can turn ssl decryption on or off, but for there to be any level of filtering I believe the traffic must traverse the proxy. We haven’t got it yet, so I’m going on the info in the webinar. There’s quite a few options on how to deploy the proxy settings, so hopefully you shouldn’t need to visit every device. BYOD is probably the most tricky because of the certificate you’ll need to deploy for ssl inspection, but as you suggest you could choose to turn it off on those subnets.

Yes, it’s a proxy based solution.

Firewall on the Wifi?

I wasn't aware netsweeper was actively being used yet by SB customers. We're still using lightspeed (and supplementing it with Netsupport DNA). Meant to be joining a webinar next week about netsweeper. @TMBS what issues are you foreseeing with those services?

Sounds like you must be proxying google traffic then - otherwise google should see your schools public IP address. It'll depend on what other safeguards or monitoring systems you have in place whether you want to bypass the proxy for google or not. I guess that is for you to risk assess.

I don't think it is particularly helpful to Schools Broadband or its customers when people who aren't or never have been connected through Schools Broadband throw in their 2p. As has been previously mentioned we need to ensure we are comparing apples with apples. Schools using the Schools Broadbands hosted services can't be compared with schools who run their own filtering and firewalls, or residential customers sitting behind their ISPs rebranded netgear router from 2009. We use Schools Broadband across our MAT. Schools are connected via various filter groups so I get to see first hand the issues and I'm generally the first point of complaint from the staff in remote sites - I guess that's an occupational hazard when you were the one proving best value last time the contract came round. I'm aware of the issues over the last week or so, and I'm also aware of the improvement in the last couple of days. As a manager in a support department I know both the difficulties we suffer when a suppliers service has issues, but I also know what it is like when a service I'm responsible for has issues too. Let's cut these people some slack shall we before bad mouthing them in a public forum. It can have more long lasting effects than perhaps anyone intended. Schools Broadband have signed up for a solution with an external company on the promises of high quality solution for an affordable price. Sound familiar? They're in a very similar situation to ourselves. It sound like they are actively pursuing alternatives but unfortunately as we all know contracts take time to expire and new solutions take time to develop.

Bloxx shut down a few years ago. I think the last support contract will have just about completed by now too.

I had much the same when I rang up, does seem to be running a fair bit more smoothly now. Be interesting to know what has been changed.

Printers are a good one to pop in their own subnet - noisy things broadcasting more then they should. Glad it is working for you.

Good news. You will need to tag the link from your core switch to your edge switch (and any switches in between) with the CCTV vlan. Then mark the port untagged in your CCTV vlan on the edge switch where your camera connects - assuming your edge switches are HP as well?

You've done well. I just rang and got given our account managers details who told me that there are a few legal things to iron out but ultimately our licences will still stand. Sophos hope that someone picking up some of the services from ICT4C will end up hosting a update server and we'll be able to update from there. No mention of credentials to get updates straight from sophos, or a switch to cloud. They did say they had sent out an email yesterday to schools (anyone get one?) and they would continue to send emails when there was something to report. They also said they would start updating schools via various forums because they know it's a hot topic.

Unless you need your cameras to get out on the internet (for firmware updates for example) then no you don't really need to speak with your ISP I wouldn't have thought. But have you updated the gateway on each of the cameras? Without that they can't respond to the ping request. Their gateway will now be your switches IP in that vlan.

I use Ubiquiti unifi access points and an Edgerouter lite which would achieve what you want. Seems rock solid and will happily allow the vlans you want and routing in between them (if needed). You could look at the Ubiquiti USG and a cloud key which would give you the option to manage the whole network remotely too. Troy Hunt did a sponsored video on a similar setup in a restaurant which might give you some ideas.

I've just had a cold call from another Yorkshire based ICT support company offering their help in the light of ICT4C going into administration. Didn't take long did it?

We purchased our current sophos licence through ICT4C so I hope one way or another we'll be able to see out our subscription. I believe YHGfL is owned by the local authorities and ICT4C was a commercial entity built on the side of YHGfL. I suspect YHGfL are ok but they have chosen to close ICT4C. I hope things can be resolved quickly for all involved.

One of the twelve steps to take now from the ICO is raising awareness. I'd put it down to that at the moment. Also it puts them ahead of the game against many other suppliers - Google look pretty proactive and may gain a few customers. The more skeptical side of me might suggest they are expecting a backlash on the finer details before 25th May they may announce agreement 2.1!

It may be worth reminding anyone who is updating their CCTV policy that under GDPR you will no longer be able to make any charges for subject access requests.

That's an interesting statement you've got there... "A parent, pupil, member of staff or governor does not have a right to view." Under a subject access request I believe they do have the right to see themselves but nobody else. https://ico.org.uk/for-the-public/cctv/

I can see both sides of this argument. I always find that an increased amount of different credentials has a direct effect on the number of post-it notes stuck onto monitors. Equally I can see that a user may leave themselves logged in and casual bypasser may open sims and it would be nice if it prompted for credentials. Is there a half way house - trusted AD logins for sims but requesting for re-authentication?

We do the same with a QNAP NAS. Time machine is bundled into much of the NAS software across the vendors I believe.

You may want to turn off the Time synchronization Integrated Service in your hyper-v VM settings or else your physical machine may try to update your virtual machine which may in turn be the time server for your domain.... it can get conflicty.

Super - thank you. No rush but it is a feature I'm keen to implement.

Installed 4.5 this morning - installed without an issue. Nice to see the workstation utilization on the explorer view. Took a moment or two to understand the change to settings 'profiles' but not too long that I had a panic. When will the documentation be available on the knowledge base for 4.5? I can't seem to enable the Logon Control - it's permanently greyed out on either a converted or new profile. I guess I'm doing something daft.