Tammie

Hi Eric, thanks for your reply. That rings a bell actually, I'm sure that's what they mentioned when I was at BETT. I'm not sure how to do that or if it's been done, but I can ask.

Hi, thanks for your reply. I'll give them full access, start there. We have GAFE accounts, so in theory it should have worked, good suggestion though. Yes, they're all on the same VLAN, and so are the Chromecasts, so if I understand correctly no need for Bonjour gateway, but do correct me if I'm wrong!

Hi all I have to bite the bullet and try to find out why we can't get Chromecasts or Google Cast for Education to work. We have Ruckus and Smoothwall, and I'm not sure where the problem lies to even ask the right person. I was wondering if anyone knows? Once I've set the Chromecast up, it can connect to our wireless but it can't connect to the internet. I've had a look in Smoothwall and I can't see anything being blocked in there, so I don't think it's that, but I could be wrong. When we try using Cast for Education, I can cast from a wired PC to a Chromebook, but not the other way round, leading me to think it's to do with the wireless. Obviously that's no good, as you'd want to cast to a device connected to a projector. I spoke to the guys on the Ruckus stand before we went ahead and they said it wouldn't be an issue, but I don't know where to go from here really. One option is to have the Chromecasts having totally unfiltered connection from SWGfL? If anyone has any experience to share I'd be grateful! Tammie

Hi Tanja Thanks very much for your reply. I don't have Network > Outgoing section so that answers my question.

Hello all I'm sorry for the probably very obvious question! I have to open a port to upload hosted SIMS data - usually I'd just contact SWGfL and they'd do it. Recently we've had some issues connecting to a service online where I had already asked SWGfL to open ports and I wondered whether there was something in Smoothwall I had to do also? Googling, it looks like it depends on whether you have the UTM which I don't think we have. TIA

Hello all We'd like to be able to see images from Google Cultural Institute, I was wondering if it was enough to allow all the ggpht.com addresses or whether there are implications associated with doing that that I'm not aware of? We'd like to allow it for Staff and Students - I don't want to allow inappropriate sites in error. Or, does anyone know the correct way to do this if I'm barking up the wrong tree? Thanks! Tammie

Hi - don't know if this is still an issue (it's not often I have an answer to something but I do to this so I'm gonna post it!) but I had to get s3-website-eu-west-1.amazonaws.com unblocked in order for it to work. Tammie

I'm out, I really need to keep that holiday free for moving. Have fun guys!

Technically speaking I'm supposed to be moving house around then so I'll keep an eye on this and let you know.

Thanks Steve, I don't know, it's still blocked by smoothwall. But in terms of 'removing the upstream proxy', that's all you'd need to do?

Thanks Steve. SWG said this - For testing purpose , we have allowed all web traffic from Smoothwall to internet through our firewall. Kindly remove the upstream proxy and retest. Please contact the Smoothwall support for testing this, if possible so I just wanted to check I've actually done that for them and then tried to connect to Google (which it doesn't). Does that sound right what I've done in terms of removing the proxy? If so, and it's a negative, I'll put it back again.

I'm going for option a) on this one!!

Hi all I'm have trouble getting Connect for Chromebooks to work, which is a problem as that's one of the reasons we bought Smoothwall. Long story short, the SWGfL engineers have asked me to remove the upstream proxy while they test things their end. I've gone into web proxy >> upstream proxy >> proxies and deleted the proxy information in there (took a photo of it before!). Is that it? It hasn't sorted the problem, so I wonder if I've not got that right. Many thanks

I'm sorry if you did this, I didn't get a notification (I guess because I hadn't set one up!) so I didn't know - I wasn't ignoring you all. I hope you had a nice time :-)

Thanks both for your replies. Yes, definitely shared the device I'm trying to cast to with a classroom and an individual, and I know what you mean about the allow bit. I have the latest OS, have double checked that. I have managed to get it working by chance! I connected both the receiver (windows laptop) and chromebook to my mobile hotspot and once I'd done that, the receiver was listed in the app, even after connecting to our network with a proxy. I'll have to find a better way of doing that ...

Hi all I've just spoken to 2 Google support guys now and the upshot is they say Cast for Education won't work connecting via a proxy. I knew this was the case for the device itself, but didn't realise it was so for the extension. That seems daft seeing it's actually meant for an education setting ... has anyone got this working? TIA

Hold on, it's suddenly working! I did make some of those allow rules this morning so I guess one of those has made the difference. It's good that @psydii asked me to retrace my steps ... :-)

Hi psydii, thanks for your reply. I hope you can make sense of my instructions, I appreciate you even having a look as it's complicated!! It was based on GAFE outline for restricting YouTube across the network so students who were not signed in to Google would get a restricted version of YouTube. The basic instructions for what I did are here at post #19 My actual steps are these: Step 1 - in Google Admin Console Follow this https://support.google.com/a/topic/6206681?hl=en&ref_topic=6259349 The step “Restrict YouTube content on your network” refers to the following. Step 2 - in DNS Manager [*=1]Server Manager, DNS, r click DNS Manager [*=1]While in your DNS manager, select “Forward Lookup Zones” on the left pane [*=1]Right click in the white space and select “New Zone” [*=1]Select Next to progress through the New Zone Wizard. [*=1]On the second screen, select Primary Zone. [*=1]Replicate to all DNS servers running on domain controllers in this domain [*=1]Enter the name of the zone. You will have to follow these steps three times iterating through the following list: youtube.com googleapis.com youtube-nocookie.com It is imperative that you type these exactly as shown! 8. Allow only secure dynamic updates 9. Finish! 10. Repeat for the other two URL’s outlined in step 6 Now to configure each zone: youtube.com [*=1]Left click [*=1]Right click in the white space on the right pane and select New Host (A or AAAA)... [*=1]Host - * FQDN - youtube.com IP - 206.111.13.155 [*=1]Step 2 [*=1]Host - accounts FQDN - accounts.youtube.com (may be just youtube.com) IP - 206.111.13.154 [*=1]Step 2 [*=1]Host - restrict FQDN - youtube.com IP - 216.239.38.120 [*=1]Right click in the white space on the right pane and select New Alias (CNAME)... [*=1]Alias - m FQDN - youtube.com FQDN for target host - restrict.youtube.com [*=1]Step 8 [*=1]As step 9, with Alias - www googleapis.com [*=1]Right click in the white space on the right pane and select New Alias (CNAME)... [*=1]Alias - youtube FQDN - googleapis.com FQDN for target host - restrict.youtube.com [*=1]Step 8 [*=1]As step 12, with Alias - youtubei youtube-nocookie.com [*=1]Right click in the white space on the right pane and select New Alias (CNAME)... [*=1]Alias - www FQDN - youtube-nocookie.com FQDN for target host - restrict.youtube.com We are with SWGfL for our broadband and have RM Safetynet with a proxy filter. In the SafetyNet rules I have allowed *.youtube.com and accounts.youtube.com to be on the safe side. It was working - when staff went to YouTube initially they got the restricted version and then could sign in to YouTube with their GAFE account to get the unrestricted one. Now after the half term break no-one can sign in. I have also tried removing the accounts.youtube.com part of the youtube.com forward lookup zone in the DNS, no difference. For info, I signed into Chrome with incognito, signed into a non-GAFE account and tried to sign into YouTube and got this error: Tammie

I am struggling to get this GAFE YouTube settings for restricted access thing working. I've followed the general instructions about adding CNAMEs for the various YouTube URLs and I've changed the settings in the GAFE Admin Console. It is working mostly, in the fact that we do get served the restricted version of YouTube, but when a teacher tries to sign into YouTube in order to access the unrestricted version I get "This webpage is not available ERR_QUIC_PROTOCOL_ERROR It did work for the first week or so, I swear! Anyone had this?

Thanks for passing that on @Brimstone, that's useful to know.

He said in order to have the multiple profiles there would be some data stored locally on the device, so the storage space was an issue.

I asked an Apple tech at BETT if he thought this would work with iPad 2, he said unlikely if they were 16GB ones (the majority of ours are). Anyone heard/think different?

Thanks for posting the link @bwestlake I have emailed them for more info. I am interested to know if our 100+ iPads that were bought a couple of years ago (before you needed any verification from your reseller) will be acceptable! Just when I thought I knew how exactly I was going to manage them, it changes again ...

Not at the moment, is the answer!

I've seen that some Android tablets are supported by GAFE to the end that you can have 5 users per tablet (correct me if I'm wrong). The Nexus 9 isn't on that list (the 7 is) but I was wondering if anyone had experience of doing this? I know you can have 2 users as a standard tablet, I wondered if managing it with the Admin Console gave you the ability for more than two...