Jump to content
EduGeek EdSec 2026 is Go! 27th Oct in Derby! Join us for a day of EdTech security focused talks, networking, and an evening social ×

Norphy

Members
  • Posts

    8,349
  • Joined

  • Last visited

Everything posted by Norphy

  1. The question has to be, what problem are you trying to solve by moving your SIMS server to an Azure VM? Yes, it would work; in principal it's no different to running it on your own local Hyper-V server and I'm sure most people on here will tell you that works well enough. However, doing that turns running SIMS into a rather large ongoing, monthly, monetary cost. You'd have to pay for the VM itself (CPU, RAM and disk usage are all chargeable) and for the VPN tunnel back to your site, which is also chargeable. You're restricted by the the size of your internet connection and everything else going across that as well. If you don't want to host SIMS locally or if you want to offload supporting and updating SIMS onto someone else, looking at hosted SIMS might be a better option? Or, as others have said, drop SIMS like a hot potato and use a proper SaaS provider instead.
  2. Are you using Intune? You can use SCEP to send a certificate to them that way.
  3. https://tastefullyoffensive.tumblr.com/post/630243505551376384/pleatedjeans-baptainbrunch
  4. Aruba are a different group within HPE. The pre-sales and post-sales support I've had directly from them has been exemplary. Getting a proper Aruba networking partner on board is worth the effort as well. European Electronique and SwitchShop are both very good in my experience.
  5. We’re on Android 11 now. Frankly, I find the fact that they’re supporting a version as old as 6, released in 2015, to be quite impressive. Android 4 is coming on for 10 years old at this point. I’m also guessing that Google haven’t put the required APIs into Google 4.
  6. I think the maximum supported number for an IAP cluster is currently 127. That isn’t a hard and fast limit though.
  7. Considering how powerful Salamander is and how much time it saves, a grand is peanuts. It's well worth the investment and not just for Teams. I would seriously have a talk with their sales team and see just what they can do for you.
  8. Are you using the free tool or do you pay for Salamander? If you have the paid subscription, just contact them and ask them to change their extraction routine. Tutor groups are generated in SDS via their program for us.
  9. Disney+ opened in this country just after lockdown started. Lots of people took out subscriptions. Therefore, COVID-19 was engineered to push up Disney+ subscriptions.
  10. When you’re buying that many Aruba switches at a time, you’re better going to an HPE partner and getting them to negotiate a price with HPE. The discounts you get are significant, up to 40% off list sometimes.
  11. Do you really need 1300 active ports??? Even our biggest secondary barely exceeds 850.
  12. Cover the areas where a lot of laptops have air vents? Yeah, that’s gonna end well
  13. You can convert a federated account to an in cloud one by refining its immutable ID, which can be done with the AzureAD PowerShell module. Also, when you disassociate your tenant with an AzureAD Connect instance, your accounts are converted to In Cloud accounts but they’re immutable IDs remain so it may be a good idea to remove them anyway.
  14. That’s been deprecated. AlwaysOn VPN is the replacement and is an order of magnitude easier to set up.
  15. Or maybe one of the least
  16. Bear in mind that this was for a system put in when 802.11n was still the new hotness and long before Extreme took them over. They may have improved since. I also had nothing to do with the choice to buy it, it got bought at least a year before I started. That said: When they were sold the system, they were sold it under the pretence that it would be self running and not require any external systems. Everything would run either on the APs or on the HiveManager. That was nonsense. One of my first jobs when I joined the organisation was to put in some RADIUS servers because the APs couldn’t cope with the level of authentication traffic they were getting. If you wanted them to do things like GRE tunnels, they would only tunnel back to another AP or a dedicated Aerohive server, which of course meant spending more money. Whenever a policy change was made at the HiveManager, there was something like a 1 in 5 chance that the change would fail to deploy to an AP. Sometimes, re-pushing the config would fix it. Sometimes it failed because the AP had ran out of disk space, so SSHing to the AP, clearing it out and re-pushing it fixed it. Sometimes you had to factory reset the AP. All of this meant that some APs were running the new config and some weren’t meaning getting a consistent wireless network across the estate was hard, to put it mildly. On top of that, the APs were maddingly unstable. They’d die or reboot at random. At one point, an entire school’s worth of APs just decided that they weren’t going to work any more and it took me the better part of two days to fix them. Our vendor were unable or unwilling to do much about it. They blamed everything from the (brand new) switches to the POE provision (nowhere near the limits of the switch. Like >1.5kw available) to the structured cabling in the building (Cat5e, all well within spec, no run lengths more than 80m, less than 10 years old and in good condition) and when they passed the buck to Aerohive, they were again blaming our equipment. If management had not already expressly said not to consider Aerohive during the tender process, I wouldn’t have done anyway. I won’t pretend that there weren’t teething troubles with our Aruba wireless network but it has been a lot more reliable than Aerohive was. The only systems in the last 10 years that I have been more pleased to see the back of than Aerohive are CC3 at my last job and CC4 at this one. Anyway, as I said, this was for a system that’s now old and went EOL a long time ago so make of that what you will.
  17. Coronavirus: Testing problems to be solved in weeks, says Hancock https://www.bbc.co.uk/news/uk-54163683 I’m sorry but WTF? W T ACTUAL F? How has this been allowed to happen? Our so called world beating system was put in, when? April? May? Why is it that coming on for half a year down the line we are still struggling to test people? And what good is fixing it “in weeks” when people need testing now? I’d call them a bunch of clowns but at least clowns have their uses...
  18. The biggest ones are: Aruba/HPE Ruckus Aerohive/Extreme Mist/Juniper We’re using an Aruba system at the moment, after a very bad experience with Aerohive. We evaluated Mist and Ruckus and I think we would have been happy with either but the Aruba reseller won the tender. We didn’t consider Meraki because of the licensing model. We bought our system from European Electronique who have been excellent
  19. It sounds to me that you might have gone to a commercial supplier, rather than an educational one. Stone are one of many edu Meraki resellers, probably worth contacting them for a renewal quote. There are other vendors on this site which sell it as well but I forget their names. For what it's worth, it cost us about £120k to replace our entire wireless network across nine sites last year, and it won't self destruct if you stop paying its maintenance.
  20. NetSupport Notify? Yes, it costs but it seems like the ideal solution for this problem.
  21. With PRTG at least, you could write your own sensors to extract information from an XML or JSON file. You could use a PowerShell or Bash script to generate this information. I'm doing this to monitor CPU usage and monetary costs on some Azure VMs at the moment.
  22. I think we've tried to but the ETA keeps getting pushed back because everyone and his dog is trying to get one.
  23. 500 and 4500 are for IKE/IPSEC VPNs. Which protocols are you using?
  24. As stated earlier in the thread, I'm in the NEU. The effectiveness of a union can't really be judge from other people in other areas; everyone is going to have a different union rep and they're not going to be the same. Some are going to be good, some are going to be bad. The point is, whoever you choose, you're going to get some cover. I chose the ATL (as it was back them) because I was getting increasingly dissatisfied with Unison's politics so I went with a education union who accepted support staff. The NEU still do this and at least make the pretense to give a stuff about them so I'm sticking with them for the time being
  25. Going for the non-technical answer, can you not search for a PO for a previous card order? If that doesn't have all the information, you ought to be able to contact the vendor and ask for more details.
×
×
  • Create New...