snagrat

Anyone picked up on the comms today that Cambium have collapsed. We got a few hundred APs across the trust so I hope not!

I’ve sent you a PM

There will be shared lists I don't have access to that might be doing it. When you say do not decrypt it, does it need adding as decrypt://www.google.com (for example) as I always thought that forced it to skip any decryption. If so I will need to add it back in, but then it would need to be removed again once logged in. Only way I can think to do that is to have different VLANs, one for device login and then switch to a different one at user level

Ah interesting you say about decrypting. Both those domains I had as decrypt:// as the URL and Allow. I have removed the rules, but I'm not sure that is what you are referring to.

That is interesting. We are using transparent and are decrypting both those. I will remove them and see what happens tomorrow

We have an issue where unless we whitelist *.google.com we are unable to login to our Chromebooks using Entra credentials. It will get to the password section then just loop back first saying no network, then returning to the login screen. As whitelisting *.google.com allows it to work it must be a domain that is needed. We have allowed all mentioned by Google Set up a hostname allowlist - Chrome Enterprise and Education Help but still does not work Anyone got an idea what domain is needed?

I have a similar issues in that OneDrive does not load initially and I must run it manually. Future logins then run fine and KFM is running. OneDrive is configured to run on login but just seem to the first time

Does anyone have the required permissions to access https://support.rm.com/technicalarticle.asp?cref=tec3965872 and provide me with what it says. Hate it that RM put this behind a wall and without having a known RM support account makes it hard to defederate

Was that recently?

Emails sent from PSF (remittances etc) are failing to be delivered. The example that comes to me fails on DMARC Authentication-Results: spf=pass (sender IP is 149.72.163.237) smtp.mailfrom=sendgrid.net; dkim=pass (signature was verified) header.d=sendgrid.net;dmarc=fail action=quarantine header.from=school.org.uk;compauth=fail reason=000 The problem seems to be that the header.from address does not match the header.d and mailfrom domains. My DMARC settings appear correct in M365 and passes all tests. PSF say it is nothing to do with them. How would I get these emails to pass DMARC checks?

If you mean the Enterprise login, then no you have to do it at school level. I just email them and ask them to downgrade it as I cannot.....

iPhone - no - they are 15.8.4. WiFi is set to my home. It connects fine automatically if I go through the wizard. Used to have this error before and adding to WiFi manually was a fix, but that just doesn't cut it anymore.

I am trying to add multiple iPad Air 2 to ASM but get the error "MCCloudConfigErrorDomain – 0x80EF (33007)" Nothing seems to work. Have tried several suggestions on the internet around partially completing the wizard before trying to prepare. All result in the same error. Mac and AC2 are now both fully up to date. On home WiFi with no firewall or filter. Any suggestion on what to try?

We have added a new domain to Microsoft 365. All email accounts have been updated to use this email address. SPF, DKIM and DMARC are all configured and successfully pass any test that I run online. However, we still have a lot of complaints that emails from our new domain are going into people's junk. Is there anything else that may cause this? I cannot see that there is. Or any other checks that can be run to check if our domain is being flagged as genuine?