pete

Reported very early this morning: https://techcommunity.microsoft.com/t5/discussions/edge-stable-103-0-1264-37-breaks-group-policy-management-of-the/m-p/3557245

We're doing pre-deployment testing of a 3CX system and finding out that the 3CX firewall documentation* makes assumptions that aren't valid in school networks and differs quite a bit from the actual 3CX system defaults (hosted in our case). Would someone mind posting their firewall rules for 3CX so I can sanity check against ours? I'm particularly interested in what you've got for Direct SIP phones (no SBC, talk directly to 3CX over the internet) at primaries. cheers Pete *https://www.3cx.com/docs/manual/firewall-router-configuration/ and https://www.3cx.com/docs/ports/

Don't. Data quality from the primary school isn't good enough in my experience. Partly due to parents not updating the school when information changes, partly due to primary school's lack of a dedicated MIS person. Our secondaries ask parents of new students to fill in a MS Form (Student Record Form) with a unique ID code (sent to them separately in the welcome letter) to verify it is them and the contact info is pulled from there.

I've been waiting for a response (not a resolution, just a response) to a service call raised last Friday (10th) morning. I've phoned their helldesk twice and the second time got a hint the helldesk people were getting a lot of similar queries. I've also chased via the account manager (who's elusive if I'm being charitable). So much for a 4hr response SLA.

What do Cisco Umbrella support say? Are there any known issues? Is YouTube rate-limiting them?

Basically this. Krystal also offer 50% off on hosting costs for schools. We have moved over all the trust websites to Greenhouse's CMS for various reasons (coherent identity, single backend UI, time constraints), but that's not due to anything Krystal did/didn't do.

The reception area is the workplace for reception staff and often has adjoining SLT offices. Proceed carefully lest they (justifiably) hunt you with sticks if you suggest music.

Your business manager will have a one-page summary (copy attached) RPA Cyber Cover Summary (1).pdf sent from rpa.dfe@education dot gov dot uk circa 14:00 on 15th February. There is no requirement for a penetration test as part of it, but a general vulnerability assessment or pen test as a budget lever is never a bad thing. Shop around though and ask pre-sales questions like "If you're looking for evidence of password policies (for example), does the employee running the assessment/tool know to look in GPOs *and* Password Setting Objects?".

Yeah, it's working for me now. Would just prefer better errors than "that's the wrong credentials".

The 2900 series should upgrade via SSH a bit more reliably. Share a folder containing the firmware via tftp and then step through the firmware revisions one at a time as @Michael mentioned.

Does it work? I know the credentials I'm using are correct (work fine in web browser to login to Apple School and sent 2FA message to phone), but Apple Configurator declares the login is incorrect without any indicator it's even tried to send a 2FA confirmation. Normally I'd use the MDM, but I'm moving a couple of devices between Apple School tenancies.

The issue for the site team is checking the site before arriving there, to avoid a member of staff being assaulted by anyone up to no good. So the site team request is in response to a (staff) safeguarding issue. Properly secured and with an audit trail, it's a reasonable request.

We use MyConcern and safeguarding staff like it and using the API we can pull in Smoothwall Monitor alerts. As mentioned up-thread, the "why not attend a webinar" popovers are annoying when logging in to report an issue, however. Regarding SSO, 365 and 2FA: 365 Integration has been on the roadmap since at least August 2018 (pre-sales emails) MyConcern don't maintain a log of actions relating to disabling or enabling 2FA in MyConcern if carried out by safeguarding leads / administrators (at least not available to support after 2 weeks of chasing) MyConcern require you to use their 2FA application if you want 2FA enabled. Their app requires a data connection (4G or WiFi) to function, which may be a problem for very rural schools.

Reasonable (don't cry wolf) extrapolation from smaller-scale incidents can help. Especially if you merely got lucky it was a small-scale incident.

It's a combination of the IT team teaching them to care, with occasionally deployment of pointy (May 2018 GDPR deadline), sticks (external security audit) when ($staff_member did something daft, it wasted days of people's time) necessary (RPA Cyber cover requirements from ~Sep 2022) to move (YouTube link above) them along in the right direction. Plus when you improve their safety, make sure they know about it (include on the "cool things I did" section of your appraisal) and collect before/after metrics to demonstrate benefit. Over time they should (assumes reasonable people) realise that you: Come to them with a solution to any problems you flag up Are involving them because you need their support or sign-off and wouldn't be bothering them if you could fix it under your own authority Don't create lots of work for yourself if it isn't necessary In terms of pointy sticks available to you now.... If your school uses the RPA for insurance (many do, it's pretty cheap), the requirements for the newly-introduced Cyber Cover is: Staff have to undergo NCSC Training - https://www.ncsc.gov.uk/information/cyber-security-training-schools (we've just finished everyone last week) You need offline backups Register with police CyberAlarm (don't install the software though) Have a Cyber response plan in place The opportunity cost for not doing the above is losing £250K of cover, should you have an incident. Send them the YouTube link above up-thread as well. I'd also ask for a copy of the IT section of the school/trusts risk register and red pen all over it where it's missing risks and mitigations. Include things you've already mitigated too - you need to blow your own trumpet. -- Disclaimer: Leadership here respond well (if occasionally grumpily) to constructive criticism provided it's valid. They're also not egomaniacs. My line manager is the trust CEO. YMMV.

The Harris Federation after-action report from the CEO is about the most forthright I've seen an SLT/Trust-level non-technical person be about an incident: Particularly useful for making leadership pay attention is when he gets to the "all the incident response firms within the UK were fully booked" and "our cyber insurance only covered 2/3 (£500K) of the cost of recovery" parts. Training costs (under long-term) should be highlighted as "you should be paying for this anyway", since doing so goes a long way toward mitigating all the other costs.

The current rule is: Please try to post actual wage levels with each vacancy rather than just a grade - "DOE" (Dependent On Experience), "Negotiable" and "Competitive" are suitable alternatives where actual salary range will be decided at/after interview Assuming gainful employment, most of us have a price in mind for our services. Waiting until the post-interview stage to discover the advertiser can't meet salary expectations is a waste of everyone's time. Something like: Salary range of X-Y, potentially further negotiable for good candidate. would work better from a candidate point-of-view and the advertiser would only attract candidates willing to work at that price point.

We have a public-facing status page via uptimerobot.com that gives an overview of which services are working correctly. It's a mix of third-party services we use and externally-available internal applications. It's most frequently used for chasing suppliers about service availability.

Is the series like Jim Butcher's Dresden Files or more like Charles Stross' Laundry Files?

I have the Garmin Instinct Solar that I use for cycling and general exercise. Someone else at work who's mad about running has the non-solar version and likes it. https://www.garmin.com/en-GB/p/679335

Spotted on Anme, so cross-posting. Guidance was released today here: https://www.gov.uk/guidance/meeting-digital-and-technology-standards-in-schools-and-colleges Specifically: https://www.gov.uk/guidance/meeting-digital-and-technology-standards-in-schools-and-colleges/broadband-internet-standards-for-schools-and-colleges Which sets the minimum for a secondary at 1Gbps and for a primary to 100Mbps down/30Mbps up.

What does the school/trust finance policy say about 25-year committments to the same service provider? I suspect it's some variation on "No chance, sunshine".

Typically 30 days grace by default.

-- Phone up and ask to speak with Adam about your ticket. -- edit: And yeah - they've had a month, check you've got a valid working backup and then test renewing the cert.

*trademarks uplifting koalas into Ewoks*