Sibrows

Pants! - Thats what I feared.

The title pretty much says it all Thanks in advance

Sorry I meant to remove that All I need to do to get this working was a firewall rule (on the internal interface) allowing all traffic (initially) to pass through the firewall using a specified gateway. (as I explained earlier we are using multiple WAN connections).

Ok so how far have you got with the configuration thus far? Have you defined you Interfaces? Both of these can be created as 'Virtual IPs' within the 'Firewall' section and then under the 'NAT: Port Forward' options you can define the Destination address (10.208.208.25) to point to the NAT IP 10.10.10.10 if you leave the box ticked pfsense will also put in the correct firewall rules. In short - Yes. We're multiple WAN connections here so I'm not 100% sure if you would need to define the gateway I'm just aware that I had to. I'm not sure that I understand what your trying to achieve

Have you configured the firewall rules to use the right gateway?

Hi All We've had a small issue with Students jail breaking their iPads. While this has been dealt with from a discipline point-of-view I'm trying to find someway to keep half an eye on whether the little darlings have jail broken their iPads or not. Hopefully within our MDM (Meraki). Can anyone point me in the right direction? Regards Simon

Another vote for pfsense.

How are you taking the image?

Thanks for all of your feedback. I'll have a look at what else on our network may be contributing to the issues we are experiencing.

Its good to hear that its working successfully. The Staff connect to a wireless network that extends the internal network meaning that the iPads and computers attached to the projectors in the classrooms are on the same subnet. This has the downside that so is everything else and I'm currently thinking that there is likely to be too much other noise on the network that is causing this issue.

Thanks j224. We've got 70 classrooms all running AirServer. I don't believe its an issue with AirServer but more likely to be an issue with the way in which Apple's Bonjour protocol works i.e. broadcast instead of p2p.

I'm looking for some advice/experience from people using AirPlay on a large network. We have about 100 teachers using their iPads to show their iPads on screen at the front of the classroom using AirPlay and thus far its been less than reliable. You can have seemingly identical iPads sitting next to each other and one will see 95% of the rooms in the school and the other will on see 5% of the rooms. The background to the network: We have the internal network with about 1,000 PC's, Macs, printers and the above mentioned iPads. The iPads are mostly running iOS7 with about 5% running iOS6. I am aware of the quite widely documented issue with AirPlay and the connection dropping but this is trying to connect to the machine in the first place. We are using AirServer instead of Apple TV. Longer term I'd like to divide up the network so that the staff iPads and the computer at the front of each classroom exist on their own VLAN as opposed to the large subnet that they are on at the moment. Has anyone else had a simular experience? Do you think that dividing up the network would help this issue?

Just in case anyone reads this in the future. This is working for me as detailed above.

Hi All Over the past week we have moved our ISP the previous ISP is now unable now to provide us with Spam filtering (another story!) Longer term we are looking to move to Office 365 and as a temporary solution I'm considering routing our mail through Office 365. This will then hopefully allow for a staged rollout to smaller groups of users. Thus far I've: Added an outbound connection pointing to the external IP of our mail server. Added a transport rule to route all mail to the outbound connector except any users that exist in a certain group (this is essentially looks at an 'all staff group' and an 'all student group') thus allowing for a longer term staged roll out. I do realise that this isn't the way in which Microsoft would like a staged rollout to be handled but this resolves the issues above. Can any one see any issues with the above situation? Simon

We use Spiceworks a lot although purely as an IT helpdesk. Apart from the cost benefit we've found the device monitoring tools very useful. Having looked at several other solutions freshdesk had some nice features but we couldn't justify the cost for bits that were already there. I realise that it doesn't have the monitoring tools it would probably have been used along side Spiceworks.

And where is Zendesk coming up short?

Can you be any more specific as to your requirements? Someone who wants to be able to inventory all of their computers and then assign tickets accordingly would be well advised to go down the Spiceworks route where as Freshdesk isn't designed to support this type of use. Do you have any ITIL or equivalent requirements?

Ok so I will caveat this with the fact that we are going to be replacing the Smartcache in the not too distant future but . . . I've setup a pfSense(2.0.3) router for our Guest WiFi. This is working to the point where I try and use the Smartcache as an upstream proxy. Has anyone managed/tried to get this working. If so what am I missing. At the moment I have installed the Proxy Server Component and configured it with custom options: cache_peer SmartCacheIPaddress parent SmartCachePort 7 no-query login=SmartCacheUsername:SmartCachePassword

Thanks for this, very useful.

Can I ask where (if) that's documented officially anywhere? - I'm not doubting you but the official line from Apple is vague at best.

PGP provide bootable CD's for decryption. Make sure you get the right version for the version used to encrypt the disk. Obviously you will need the decryption password. (depending on if this is being managed by a PGP server or not depends on where you need to go to get the password). From previous experience don't expect the decryption process to be quick

Do you mind me asking how many devices you are using? The new Mac Mini Server with SL arrived today so I'll be setting it up to have a play with Profile Manager.

Thanks for your reply. How have you found Profile Manager? - I hear that it starts to have issues with anything over 200 devices.

I'm looking for some feedback from schools that are using the iPad as a 1:1 device and not as part of a class set. We are just starting to rollout iPads to staff and in the next 12 months plan to start rolling them out to pupils. I'm looking to find out how other schools are managing paid apps onto individual's devices. We have our first set of VPP codes distributed through Meraki which have worked without issue and then discovered the issue with these codes now being assigned to the iTunes/Apple account that redeemed them. I now realise that this isn't possible without using the Apple Configurator. I can see how the Apple Configurator works very nicely for class sets that are being returned to a charging trolly each evening but not for a 1:1 device scheme where your trying to update 1,500 iPads. So I'm looking to find out how other schools have approached this issue. From what I can see there are the following options: Manage all of the iPads using Apple Configurator and collect them all in once a periodically to be updated. Use a cloud based MDM solution and the school takes the hit on purchasing the apps. Use a cloud based MDM solution and pass the cost of purchasing the apps to the parents. The students are given a list of apps that they are expected to purchased outside of Apple's VPP scheme. As well as the above questions how are schools dealing with the pupils 13 years old and younger who can't sign up for an account? Thanks in advance.

That's what I had thought thanks for confirming. I don't think I'm being unreasonable in suggesting that this a major short coming. Am I?