Ashm

We use Smoothwall for our Guest Wifi which does HTTPS filtering using transparent proxy. The only requirement is that the client is running Windows Vista and above , XP using Firefox/Chrome, newer iOS versions for iPhones/iPads etc. If the client isn't running that they can still access HTTP sites but not HTTPS sites.

No probs, you may not need to change from 1024 bit. When you originally imported the certificate request to ipsCA it would have come up with an error saying it requires a 2048 bit key length.

I haven't done this with our Smoothwall server yet but I have done this for our Ruckus controller without any issues. I used StartSSL for the SSL Certificate. It was while since I did it but it but it something along the lines of: Re-generate private key length to 2048 bits as StartSSL will not accept anything lower - Zonedirector will reboot at this point Create a new certificate request on Zonedirector and then import that to StartSSL Import Signed Certificate into Zonedirector and then I think it gives you the option to import an intermediate certificate which I did The ZoneDirector will then reboot and hopefully you'll no longer have Certificate warnings So possibly all you need to do re-import the signed certificate and then import the intermediate certificate before rebooting.

Dell R710?

We did have issues prior to upgrading to Snow Leopard on our older Macs over time where a large number of students had logged in and the hard drives would run out of space (they only have 120GB hard disks or something around that size). Even though the cached mobile accounts are supposed to delete off the clients after set time (and after it has had a successful sync). So far we've not had that problem again but it could be because they were all freshly re-imaged in September! In terms of large files and syncing, we do have a staff member that's the main Mac user in the school who has a 50GB+ mobile account (Several years worth of Media Projects files etc) and admittedly that does take an age to sync the first time but once it's done as he uses the same Mac normally it's fairly quick to log in & log off as it just does a file sync check.

Yep same here, after deploying the fix mentioned here we haven't had the issue occur again.

The second method you've said is what we use for our Macs. Using mobile accounts allows the home directories to be synced with the Mac server on login and log off and also in the background with the Mac server. This way all the Mac apps will saving locally to the Mac (avoiding problems with apps that don't work well saving over the network and speed will be better). This way at least the users don't have to do any copying to different areas etc they just save their work as normal and everything is synced with the server. I would recommend a gigabit connection to all the Macs and the Mac server to improve sync times if possible.

We had that Bidirectional issue as well with the 1022N's (great printers!!) but what would happen is that if a non admin user printed the job would just sit in the queue and not go anywhere. If a domain admin user printed it was fine, very strange.

What printer driver are you using? I vaguely remember a having a problem like that when using the HP Universal driver for the 1022N printers. And I think it was only the XP clients which had this issue. Using the proper 1022 driver solved it.

How does the school network get out to the internet? What do you normally use the ADSL for? Yes you could do it how you've specified with 3 network interfaces.

Yep the Smoothwall box needs to be the default gateway if using transparent mode. You could set up a linux box or vm to do the DHCP & DNS on the guest VLAN and as you say have the default gateway to set to the SW box. I wouldn't put the ADSL router on the same guest VLAN, you'd most likely want it so the only thing a guest device can see is the SW box which would be their only route out to the internet.

We currently have the guest network as an open network so no we don't "see" the guests as such. We can see their IP & Mac address on the ZoneDirector web interface but to see who's logged into the proxy we have to check the SW box. But obviously we can link the device and user by looking at logs if necessary. You could set up radius/AD authentication on the ZoneDirector for the Guest network so the students would need to enter their AD Credentials before they can join the guest WLAN and this would let you see who's logged on via Ruckus. But then they would have to enter their AD login for smoothwall as well unless you did a general SW filtering policy for all users on the guest WLAN. You can find DHCP in Smoothwall under the Services menu and then just enable it for the guest VLAN interface.

We have Smoothwall G3 + Ruckus here and guest wifi is working great. Basically the way we have done it is we have a guest wifi WLAN on our Ruckus wireless which tags traffic on that WLAN to the isolated guest VLAN we have set up on the switches. We then have the guest VLAN set up as another interface on our Smoothwall box. The Smoothwall box is set to dish out DHCP on the guest VLAN and has SSL Login page proxy authentication set. And that's pretty much all there is to it so when students connect their own devices to the guest VLAN they get an IP from the Smoothwall box and then when they open their internet browser and try to access a website they get the SSL Login page, they then type their AD credentials and then they get filtered as they normally would. The nice thing with Smoothwall handling DHCP & DNS is the guest traffic doesn't touch your main windows network. Hope this makes sense

Yep, we're using Smoothwall with the SSL Login page authentication option for our student guest network. They login using their AD credentials and then they get their normal filter level depending if they're 6th form or yr7-11 etc as they would when they log onto one of the school computers. And of course all the usual logging is done in case we need to check up on anything later.

Custom built: Intel Core i5 2500 3.3GHz 16GB DDR3-1333 RAM WD 300GB 10,000rpm SATAII Velociraptor Samsung F3 1TB 7,200rpm SATA HDD WD 2TB SATAII Caviar Green Windows 7 Enterprise x64 24" TFT (1920x1200) Use it all the time with VMware Workstation so the extra RAM comes in handy

I had this problem initially, I think I had to remove the following from the web.config file:

Thanks for that update Nick, I've just tried it and the folder modified dates do not get changed when accessing a share through the extended version. The only issues I'm having with HAP at the moment is when accessing a folder on the extended version (this has been happening before applying above update as well) on a shared drive that the logged in user does not have permission to view it comes up with the following error message: Also when uploading a file in the Basic Version using the drag and drop SL method it seems to get stuck on "Checking..." and doesn't upload the file. I've tested this with a few different files, none of which have any strange characters in the file name.

Hi Nick, Would there by any way to turn this check off in the extended version? As this is the only small thing that puts me off using the extended version of HAP. I noticed it when one of our fairly large shared drives with a number of folders all had there date modified times changed to the last time I had browsed it through HAP. Will the same check be in the upcoming HTML5 v8 version? If I remember I think with the basic version it pops up with the username & password prompt if you don't have access to folder or write access when trying to upload a file. Many thanks for this great tool by the way. Ash

Ooh that does sound good - scheduling ahead of time. How does the SOLUS3 mark the computer/laptop as online eg if the laptop is in sleep mode then connected to the network with SIMS subsequently being run. Does it just ping the computer - I vaguely remember reading that in another thread. Thanks

I'd be interested to know the answers to those questions as well. We have a lot of staff laptops that are used for SIMS and the current way it upgrades for SOLUS2 works well for the staff laptops which makes me reluctant to upgrade to SOLUS3.

Yes we have been having same issue with some of our staff & student laptops (running Windows 7 x86 with SP1) every now and again. I'm fairly sure the problem is when someone turns off the laptop while it's loading windows, the next time they boot the laptop it gives them the option to boot into repair mode or boot normally. By default it's set to boot to repair mode (so most people will select it or let it time out), I've found that in repair mode Windows will give user the option to use system restore to restore to a previous restore point that could end up being before the last time the computer account password has been changed (I think by default it's 30 days). If that's the case it will come up with the trust relationship error the next time it boots and someone tries to log in (rejoining it to the domain fixes it but like you I wanted a more long term fix). What I've done is created a group policy startup script to disable start up repair by default and to ignore all boot errors with the following commands: bcdedit /set {default} recoveryenabled No bcdedit /set {default} bootstatuspolicy ignoreallfailures I've only deployed this fix about a week ago but I'm hoping it resolves it.

Hi Zerohour, I'm thinking of purchasing the P2055DN as price point seems pretty good at the moment. Please could you send me the firmware update in case we have the issue? Many thanks

We've managed to get DeployStudio to allow us to enter the hostname and then it will join to AD then OD and the entered names are set in both AD and OD. The workflow we have is to deploy the image, then the hostname form, then the configure task with Rename computer ticked, then AD binding task then OD binging task. It wasn't until I had set the configure task that it would actually set the entered name for both AD and OD.

I've gone with Home drives on one file server VM and all shared drives on another VM.

Seems okay here too, try the brother universal PCL drivers - comes with both 32bit & 64bit drivers