DGardiner

can you ping the smoothwall? have you setup a proxy for the vlan?

you can forward to another number but the app would work better

not but it applies your policies regardless of login state

setup chrome managed browsers to stop this - its only a registry entry, key for the base ou to place the browser

not entirely relatedbut if you can get onto the switches weve had issues in the pass with smoothwall auto negotiating link speed which led to poor performance - they had to be set on each device to 1g

for quic: block port UDP 443/80 on the firewall as for doh/etc you will need to check with your filter/firewall for things to try as its usually a layered approach

is the json payload set on the user ou? in in chrome://policy is it saying that the policy is coming from cloud or local? if these conflict unless you have set the policy to set who wins i cant remember the default

Google workspace is free anyway, if theyre using it - sign up for the basic edu thing then youre atleast covered under the edu data not being used for training the model

weve piped our reports into haloitsm and then have a ticketing/approval flow that makes the school conduct an investigation and then closes/escalates to IT as required. Weve built some basic reports off the back of it but its helped us alot

how are ou distributing the ip? are you using an ip helper on the router to forward to your server on another vlan? or do you have a dhcp server in that vlan?

Permissions: you dont (there was a beta a few months back with per folder permissions, not sure if thats out now or requires a licence tier) the drive is the permission, just split it into multiple drives with the access as required. Make yourself the manager to get going add the groups with the relevant access levels and take it from there and remove yourself in admin if you feel the need.

Just skip the first formula is papercut is already hex the first cells is dec the second cell converts that to hex judging from the formula (im assumign by the name)

im assuming he means like this: https://docs.google.com/spreadsheets/d/1qSenmbT3_g8CBTq2y2yvC1Wwdw2qfiT1GdYL_0lVcJ8/edit?usp=sharing

if you have it globaly can you not detect pii and add the egress gateway stuff to send it via egress gateway

if you use mobility with the paid version you can connect it to papercut cloud and print remotely and its isnt internet facing?