IrritableTech

Are you using Google Cloud Directory Sync or GADS? Have you checked the log files in c:\PF\Google Cloud Directory Sync? Oh and have you been properly upgraded to Edu? How long have you had an account for? There are user limits until your application is fully approved.

The real retail price was around the £300 mark up until a few months ago. We noticed the price drop and put in a bid at work. From the various conversations I had with resellers and distributors and reading between the lines I don’t think the edu line has been a big success - at least not in the uk. The distributors had a lot of stock on their shelves for too long so they slashed the price to move them. Now there isn’t a great deal of stock any more, or perhaps the distributors are having to bring them in at a premium so the price has risen again. We managed to get 25 of them at a reasonable price and they’ve all been fitted and work as they should. Need to get one more ordered now too - so I’m expecting to pay a premium.

USB devices are all read only at our place. Google drive is our only permitted external storage for school related data.

Building my i3 clone from a kit was pure joy. I almost took it a part to do it all over again.

Interesting question this - but humans made the decision on which categories to block for groups of people, the automation is categorizing sites nothing more.

We’ve recently added a password to our byod network so the wireless traffic is encrypted. A guest still then needs to use the captive portal and a token. Hasn’t caused us any issues as yet.

Which begs the question - are you safeguarding more by opening up your wifi and reducing barriers such as a MITM certificate, or are you safeguarding more by inspecting everything and encouraging users to circumvent your efforts?

Different decisions are likely to be made for different users. We don’t have a safeguarding responsibility for most visitors, but we may still have a prevent duty. Staff and sixth form BYOD will be different. A landing page after authenticating to the Wifi is the most sensible option and the one we’re likely to go for shortly. I’m interested in developing a page which adapts to the device (well the reported browser) so the instructions are device specific straight away as much as possible.

Removing ssl inspection doesn’t necessarily prevent you from filtering ssl sites. Most filters can still block or allow based on the certificate or SNI, but you can’t for example block https//Twitter.com and allow https://Twitter.com/MrAdamWelch when you don’t fully inspect. There is an issue with some shared certificates, but it’s not a problem for the vast majority of ssl sites.

You don't even need to reconfigure your router technically. You can just use two connections to it, one using a switch port tagged in one vlan and another port tagged in the other vlan. If all you are offering is internet access then this should work fine. Will your router be able to provide a DHCP server for the wireless vlan? Your ruckus ports can be tagged in both vlans and should be able to separate the traffic. Do you want to be able to offer any internal services to wireless clients?

Or poison your local DNS perhaps?

So you're relying on the auto backup? I think it's here... /usr/lib/unifi/data/autobackup

You've got a unifi config backup right? You could always look to run up the windows unifi controller on another box and import the backup and you'll have your controller working again while you try to fix your ubuntu box. I moved a unifi controller yesterday afternoon, once the APs have been informed of the change of contorller IP, they just carry on as before.

Have you considered a tanoy type system? We have two levels of lockdown, full and partial so we need to make an announcement rather than just sound a noise. We've just replaced our wifi with the unifi edu units which include a speaker and we've integrated them into our voip system. But you can get SIP speakers for this purpose as well.

Nah it'll be fine 'cos all the email addresses are [email protected] anyway :-p

Much more simple to go with J Smith (Smith,J in some places as suggested) - regarding data you are giving away less info too!

I don't believe there is. You could do the old First Name = "Mr J" Surname = "Smith" Just make sure your contact settings show first name last name.

I guess it depends on that something. Someone breaking in overnight, well your site manager is going to notice well before September. A fight in the corridor on the last day - if a parent waits until September to raise it then the old fashioned investigation methods will need to be employed, I'm sure they could find a way to raise it earlier. It's perfectly acceptable for you to respond saying due to our retention policy this data no longer exists. Like many other areas of data protection, you make a judgement call based on risk and legislation and you document your decision and review annually and if the situation changes. For the record - we overwrite after 28 days, unless ceased by the police.

I've used namecheap for a few years now. Moved to them for 2FA on my account. - - - Updated - - - Haven't they been a tsohost brand for ages?

We've done very similar - a graphic on every users desktop... and stickers of shame if we find their machine unlocked... But going back to the original question, as others have said GDPR doesn't state any specific measures just reasonable technical measures. What is reasonable is for you to decide and document (and possible argue in court).

I started the process of migrating back in February and it's still not completed. Tucasi support seem to be impossible to contact. We're looking at alternative products.

I’m guessing, but thinking about it how does opendns know how many ‘users’ are connecting. I think in all honesty it’s likely to be a rate limit on requests per hour by ip or something. Your internal dns will help limit the external requests, so you may well be fine.

No. You need to use the ip of your Mac where the controller software is running.

Right well the theory is it should show up ready to be adopted. If not you can ssh into the AP now you know it’s ip address. Username and password should be ubnt Then you can do the following command Set-inform http://ip.of.your.controller:8080/inform You need to then adopt the access point in the controller and allow it to reboot, then you need to ssh and set-inform again. Not sure why you have to do it twice but you do. Otherwise have you got chrome on you Mac? If so try the unifi chrome discovery app. That may help you adopt.

When you say cloud controller is it remote from you - ie. on the internet?