dazza007

So I have been trying to phone them all afternoon and the phoneline is "engaged" I managed to get the app open and past the update loop by opening up the firewall completely to the computer for testing. Therefore I have gone back to them to ask for a complete firewall exception list....

Why do programmers to this to us! 4 hours that I can never get back getting through applocker and system protection the software needs to high privileges to run! I have hit a wall where the client opens and states that "Secure Client has been updated, and the application must be restarted for the updates to take effect" Stuck in a loop. Restart program and computer same message. Nothing on Smoothwall showing, phoned support and they told me to uninstall and reinstall. Same problem.....

Hmm quite old..... Another day, problem seems mainly related to screensharing

I see 365 https traffic blocking Have you run the network connectivity tool?

It is an s14. We are getting teams traffic from teams ip addresses and ports on the external interface being dropped so a fun day to be had by all! Smoothwall looked at this further for me. We were getting dropped packets and they changed the setting in the ring buffer and increased the mtu back to 1500 The ISP are pushing through packets of 7000-15,000 mtu (not sure if this is causing issues) but it can't help

Having major teams issues again as site returns to teams teaching. Must be the third time I have gone back to smoothwall. Numerous firewall Bad Traffic seems related to non-teams udp ports. Teams has group policy, QoS wired Qos. TCP ports all in ranges discussed above. So issue persists!

Thanks! It is flagged as Bad External Traffic

Thank you. Therefore if you install the VPN (as it is a manual install), the opvn file needs to be taken off the computer? or can the certificate be "transferred" in a hack on the computer?

I am stuggling to understand why even though all the Microsoft 365 exceptions are entered onto the smoothwall - sites double checked and ip addresses double checked in https exceptions/auth/web exceptions I am getting firewall incoming drops from the MS servers ip addresses. I understand that the smoothwall will track the outgoing connection and allow the incoming one corresponding, but I am having difficult figuring out what I am seeing. Surely the MS ip addresses are not trying to open a connection? Evidently I am missing something or something is not right? for example 52.97.129.242 is definitely Microsoft 365 list 52.96.0.0/14 Plus The network connectivity tool has stopped going through the firewall for no apparent reason!

You are not alone there! The Open VPN client is not updated and that left me very concerned too! I have put in Remote Desktop with MFA from within 365 thanks to the expertise on here. I would be interested to find out what vulnerabilities the client has. The advice is to have MFA for remote access. Having the smoothwall with limited support at the moment worries me with this situation occurring.

Ok credit where credit is due. I must say that I did get good service yesterday with an urgent request less than 2 hours response a fix within 6. Thank you Smoothwall Team!

There is a tool that can tell you what is the holdup on login it will get you right to the problem Analyzing a Slow Boot with Windows Performance Recorder & Analyzer • Helge Klein

I agree it is frustrating, I manage to figure out the problem before they get to me. If you look at the similar threads below it looks like it has been a problem in the past, Where where the guides for todays applications such as configuring the Smoothwall for Teams, Remote Desktop. When you get in contact the team is great, it is just the period of frustration not knowing when they are going to help.

Thank you roberto! That article is superb! Is it paramount to have the RDS Gateway on a DMZ ? Natting to internal servers without a DMZ seems wrong. I am googling vlan hopping as a security vulnerability and it seems that the gold standard is to have a DMZ As you see I have set myself a big task here!

Evening all! I have read almost every article and blog on remote desktop services, but unable to decide/figure out how to implement an RDS gateway using Smoothwall. I have never setup remote desktop before so this is totally new territory! I am inclined to have MFA and port forward 443 through the smoothwall (external>internal fw port) to the core switch onto the RDS gateway server on a DMZ with the Gateway domain joined via the core switch. How insecure(bad) is this plan? Any pitfalls? Any advice much appreciated! Darren

Thank you everyone that has saved my day! i would have never found that, even though I was using this policy this morning to switch the domain laptops to a FT 802.1X network.

Hi Google is not my friend this morning! I have been getting the word out not to join domain laptops to the BYOD however the new technician is advising users to join the domain laptops to the BYOD network so I need a network management solution. Is this possible using NPS, google comes up with preventing BYOD accessing the non-BYOD network! I have a Cisco WLC and the only painful way is to deny access using mac addresses. Regards, Darren

Thank you very much! Having read auto qos, which incidently never came up doing research, all i need to do now is enable auto qos trust dscp on the interfaces connected to the wifi. As the service and group policy marks the packets

Hello I am looking for some expert help for applying QoS across our Cisco network. Background Port use teams - Voice port 50000:50019 (mark DSCP 46), video ports 50020:50039 (mark DSCP 34), and sharing ports 50040:50059 (mark DSCP 24). Teams marks ports for the teams service on 365 Group policy marks dscp based port assignment for teams on the client for video/audio/file screen sharing - verified in wireshark dscp marking. After much research I have implemented a QoS profile on our 5508 WLC skype voice-and-video Mark 34 Bidirectional ms-lync-audio business-and-productivity-tools Mark 46 Bidirectional ms-lync business-and-productivity-tools Mark 34 Bidirectional ms-lync-video business-and-productivity-tools Mark 34 Bidirectional statistical-conf-audio other Mark 46 Bidirectional ms-office-365 other Mark 34 Bidirectional ms-services other Mark 34 Bidirectional internet-audio-streaming other Mark 46 Bidirectional i have now looked at how to implement QoS on the 2960s switches and have finalised a QoS to implement on the switches. Creating L2 access list for the different teams port ranges and assigning them to a class map. mac access-list EXTENDED Teams-Audio 20 permit tcp any any range 50000 50019 30 permit udp any any range 50000 50019 mac access-list EXTENDED Teams-Video 20 permit tcp any any range 50020 50039 30 permit udp any any range 50020 50039 mac access-list EXTENDED Teams-Sharing 20 permit tcp any any range 50040 50059 30 permit udp any any range 50040 50059 class-map match-all TEAMS Match access-group name Teams-Audio class-map match-all Audio match ip dscp 46 class-map match-all Video match ip dscp 34 class-map match-all Sharing match ip dscp 24 class-map match-all BEST-EFFORT match ip dscp default exit policy-map PER-DEVICE-TEAMS class TEAMS trust dscp exit class Audio set dscp 46 exit class Video set dscp 34 exit class Sharing set dscp 24 exit class BEST-EFFORT set dscp default This is applied to the ports as needed. I am also looking at whether CDP applies QoS from the WLC profile on the attached switch but it is unclear. Q is the QoS config correct for the switch and are the WLC profiles complete? Many Thanks! Darren

So got a quote today from techbuyer - £500 for 4 dl365p gen8 with 900Gb SAS disk and 160Gb RAM with fibre card that is £125 each!!!!!! And a lefthand unit 2TBx12 - £50!!!!!! Bargain hardware were not interested.

thanks people some good suggestions there. The servers are 4x dl380 gen8 2 fibre cards 2x hp lefthand units

We are looking for an energetic and enthusiastic person to fill the role of ICT Technician at Windermere School. The applicant will preferably have experience of working in a busy IT environment and be able to independently support students and staff with their devices. Closing date: When suitable applicant is found. For further details and an application pack please see (ignore closing date on website if viewing immediately after posting this ) https://www.windermereschool.co.uk/vacancies/

Hi Does anyone have any recommendations on companies that purchase used IT equipment? I found a company called techbuyer who offer to purchase used IT servers if anyone has used them a recommendation would be great! Regards, Darren

Thank you, I had tested this on 1809, but now we have 1909 and realised that this broke so fixed it with method you said, but we have 2004 too! Do I need the files from each build in the source folder then?

Having trouble getting .NET 3.5 installing consistently across site to run Burconix pw changer for the teachers. Is there an alternative PW reset tool that has been programmed to run on the later versions of .NET Windows 10 Struggling to find one at the moment Cheers, Darren