TechMonkey

Wouldn't restricting access until there is more information be the prudent thing to do then, to increase the safety of students?

I wonder if locking the information to never actually be on the device, or the document to be secure would be enough? I know with M365 you can set policies that stop the download of documents, users having to either use the online version or connect direct. You can use data protection tools to label data and prevent it being opened except by those with an organisational account. If the device is never on your system, dumped straight out to Internet, then your system won't be compromised by personal devices. If the data and documents are secured, then they can't be compromised. Would still mean many systems would be unacceptable to be used though.

Been a while since I set it up but these instructions look right https://www.riptidehosting.com/blog/installing-the-remote-desktop-gateway-role-rdgw-on-windows-server-2019/

To update my testing, I had to turn publishing on for the rule that contacts our SIP provider. I'll try your example rule and see if that catches anything. EDIT: You may have to wait for Smoothwall to get in touch unfortunately. Mine shows logged traffic from that server with a rule saying source IP as the server's IP and everything else as "ANY".

I wonder if SIP calls aren't logged for some reason? I've just turned the logging on for our VOIP server and dialled out and get nothing, even selecting the rule. Interesting.

Yes, you want Remote Desktop Gateway. I would be very careful though, if you are using M365, I would also consider researching Azure Application Proxy. This will hide your RDS system behind M365 and authenticate against it, stopping the services being publicly open.

Do you mean a Gateway Manager?

At a guess I would say a rule higher up is taking priority but not logging. Is it worth turning on all logging and trying? Also, not wanting to teacher your granny to suck citrus, but are you sure the system is working as expected? Maybe the secondary has taken priority?

Worth raising the entry to the top to ensure it isn't being allowed in a different rule? Is there a different way to look for the rule? By port say?

As ever, Sir Terry Pratchett has a quote for that Thanks for getting back with the solution.

Awesome. Are you able to expand on what the issue was with the ISP? Purely selfishly for future me if we do end up going with CIPHR

May be worth looking at the IRIS version then, which is iSAMS but geared towards state schools, less customisable so cheaper, following DfE guidelines.

Yes, I've only watched a couple and it seems to have gone the way of focus on teenage angst more than the story. Though the bit in the movie theatre was a bit of a shock!

You have come on to an Education organisation centric forum so it is a reasonable assumption.

Fantastic! Good choice.

Not done it myself, though we started but our provider bucked up. Process would be work out your actual requirements, maybe with some extras for them to quote on. So you would like phone and remote support in office hours, but get them to indicate what after hours support would cost. I would get a tender document together with everything laid out very clearly, state your aims, what information you want from them (SLAs, quote, case studies, etc) and what they must have to apply (Cyber Essentials/+, ISO quals, etc) and then send the document out to the providers you want to talk to. Then take it from there. The providers should then get back in contact with you if they can fulfill your requirements and ask questions to fill in any gaps they want clarifying. Then if you were really feeling thorough, work out the possible costs, benefits and drawbacks of an in house solution.

I'd say, depending on the structure of the School or the purpose of the website, it is up for debate if the IT Team should be involved. Most websites are now a marketing tool and managed by the office or a marketing person, so apart from an initial query with the IT team for any essential technical requirements, why would IT be involved with a marketing exercise?

Yep we found this and that some apps didn't work so turned it off, but we are still getting full drives. Old profiles don't seem to get removed and the System partition seems to fill up a lot! We have just had to go through and power wash all the Chromebooks and made sure they are al up-to-date so hoping that helps.

Not used them in anger put I know Parago and Inventry have systems.

Nope, and we have had further issues so just collecting them all up and ensuring they are updated and powerwashing the lot of em.

Cleaner was good, though a bit of a sleeper, in the background kind of program for me. Outlaws is great.

I think this is the concern. It is a litany of issues, a chain of frauds, that all succeeded and weren't caught.

Sounds like he is a jobbing Vicar so could have accommodation provided and not need or have been able to get back to his house. @Arthur Thanks for the heads up on the Land Registry service. Signed up and added my house and my parents.

Have you tried from home, from a line that does go via Smoothwall or a machine set to bypass Smoothwall?

Just found this elsewhere - https://www.learndmarc.com/ You send an email to them and they step through validating SPF, DKIM and DMARC as it goes through your email headers. Makes the process a bit more visual so easier to understand and should help troubleshooting a new set up. A bit twee in its UI and a bit slow as it goes through its script but interesting.