Synkrox

Whats the core switch and does RM do your filtering off-site or do you have a proxy on the network? Posting the config of the core switch might help if its managed? if you know it should be a flat network backup the config just in case and hard reset it perhaps?

Perhaps your proxy doesn't have an ACL/Policy for that subnet to pass traffic then? (edit: just saw your previous post) - I'm stumped then. If you have a machine on that IP range keep moving it one device further away from the router until it stops working. With a flat network no reason for traffic not to be passed.

I think Google apps are probably secure enough, but for us it would be a compromise in terms of features. Under EES agreement all students get Office (proper) for free now. Teacher laptops for home use are already covered and if they want another copy for their own machine only £9. Kids and staff alike are comfortable with Office and it is, whether you like it or not, the "standard" office suite. So I'll be sticking with it for the time being. :-)

Transparent proxying/filtering of HTTPS will send an invalid certificate (from the router) the client must first trust as it has to do deep packet inspection (if supported). Basically the destination address cant be read from the connection packet as its encrypted so it has to decrypt and reencrypt data. I don't have a smoothwall but a fortigate so cant really help much more I'm afraid.

Your subnet and all that look good to me. I suspect your gateway/router or proxy is running on a 255.255.255.0 subnet so wont respond. Chances is are that's how it was set up originally and someone expanded the subnet at some point without finishing the job! No need for all the VLAN stuff, it'll be a simple fix :-)

From the ones I have seen they don't appear to be from a common source, but do seem to be from otherwise legitimate email addresses and were copied into some other schools email addresses, both specific users and enquiry@ addresses

Just wondering if anyone has seen a higher than average amount of seemingly targeted "spear phishing" spam aimed at staff accounts lately? They come through personally addressed - often with infected zip files and phishing links in the email (which get removed by filter) but otherwise quite well worded - Hence them getting through at all. I'm wondering if it may be limited to us or schools in general? Couple of examples: Dear Valued Customer, This is a short email to let you know that your Natwest Credit Card Online Services security details was recently changed on Wednesday, January 29, 2014 at 04:00: PM. Please confirm that this request was made by you. Yes, I made this request. (link removed) No, I did not make this request. (link removed) Best wishes David Wayne Head of Credit Card Notice to Appear, Hereby you are notified that you have been scheduled to appear for your hearing that will take place in the court of London in January 31, 2014 at 10:00 am. Please bring all documents and witnesses relating to this case with you to Court on your hearing date. The copy of the court notice is attached to this letter. Please, read it thoroughly. Note: If you do not attend the hearing the judge may hear the case in your absence. Yours truly, L.McNamara Clerk to the Court.

I switched to BT on a 100/100 line, with a Fortigate UTM security/filtering device. As our web and email servers were already inhouse it was pretty painless to be honest. Even moving the sch.uk domain was a piece of cake, just switched registrar tags.

Bump :-)

What issues? Something I should bear in mind? Looks OK to me.... Anyway.... have put files here: https://www.box.com/s/bv2c7qyxj1nsbmaguqgr Chris

Fairly obvious typo - start date is Sept 2013 not 2012! Chris

Hi folks - we are recruiting for a new position within the school, for someone to take control of running the school VLE and Website, creating resources for plasma screens, promotional material, newsletters etc etc. We are looking for someone with an eye for design and the skills to construct. I'm the NM so feel free to PM me if you have any Q's Web and Multi-Media Technician Full-time Salary - 3Points within the range: £20198 to £23708 We are looking to appoint a talented and committed professional to join our Learning Team from September 2012. Closing Date: Thursday 4th July 12.00pm Interview in the Week Commencing 8th July Further details can be found, and applications made by following the link below: https://www.hirewire.co.uk/KingsNortonGirlsSchool/B301HW/MS_JobDetails.aspx?JobID=44814 https://www.hirewire.co.uk/KingsNortonGirlsSchool/B301HW/MS_JobDetails.aspx?JobID=44814

Proxy support is shocking. Not wifi linked, and the desktop IE settings don't apply to metro apps. However you can do it. After setting the proxy up in IE desktop as normal..... I wrote 2 batch files and saved them to the desktop ProxyOn.bat reg add "[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]" /v ProxyEnable /t REG_DWORD /d "1" /f netsh winhttp import proxy source=ie ProxyOff.bat reg add "[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]" /v ProxyEnable /t REG_DWORD /d "0" /f netsh winhttp reset proxy Then right click and "run as administrator" each time you need to turn it on/off. Its dirty, and MS should really have sorted this properly by attaching proxy settings per-wifi network by now! Hope this helps Chris

Dont forget to check out the HP Wireless solution - we have it here and it works a treat. Got very keen pricing as an HP bid. Fully integrated with PCM so you can see network overview both wired and wireless all from one screen. We went with the MSM430 AP's and a 765ZL that just plugs into our core switch. From power button to desktop, class set of 30 laptops in <3 mins, about 30 secs longer than wired :-)

Check out AD Tidy from cjwdev dot co dot uk - its free and will help you clear all the mess out - certainly did for me when I inherited a network with loads of old muck lying about.