BKGarry

If it is a non SSL site they do get the block page, if it is an SSL site they get a site cannot be reached page in their browser.

I have a seperate VLAN for BYOD with the SSL Inspection disabled, so it doesn't ask for the sophos cert, it does still give the warning about the windows cert at the initial connection

If these are domain joined machines, you want to get STAS installed on all your DCs, with the other DCs setup as collectors in them. This will look for the login events and log them in and out of the firewall. If they are not domain joined, do you have user based RADIUS? as we have our NPS server passing those details through too. Basically you want STAS over NTLM

Yeah I did see that the other day, as I have been loving all the stuff they have been posting to YouTube :-)

Eggs....

Interesting, I have direct access running fully with LTSC versions. (my Student devices are LTSC, staff are the SAC)

Running this website as a student may help give you some information. https://swgfl.org.uk/services/test-filtering/ Also the safer internet website has some documentation that may help for you https://www.saferinternet.org.uk/advice-centre/teachers-and-school-staff/appropriate-filtering-and-monitoring/provider-responses-0

241 years 7 - 11 and 167 already out with Sixth Form. We are a single secondary school with around 940ish students on role

There is also a platform called exam.net which looks promising for what you may need but in order to lock them out to the exam, they have to install something.

This is on our router itself, we use a SophosXG for firewall and filtering. This is a firewall rule, as it is a port opening and not a filter unblock (if that makes sense)

No problems, this is our configuration for outbound traffic.

Is this onsite or offsite? I had this before I added the ports needed into our Firewall for the networks that needed it. Used to look like it was connecting, but never show the camera and kick out after about a minute or so.

IT Logistics and Support Leader

No problems, sometimes someone knowing that it is possible and where to look is all you need :-)

You can make a custom admin role with just access to reporting, I did that for our Deputy heads. They login with their details to Admin.google.com and they only see reporting If you want more specific instructions, I can give them later for you :-)

I am afraid I did it all myself, no 3rd party involved here, was so easy once you have one setup on the controller. Have the App installed on your phone, put AP up, open App, adopt it to the controller and then Name it. Onto the next, etc etc I did set all the APs up with DHCP Reservations first and added them to NPS as RADIUS clients

I must admit, I got around this with a Server 2019 RDS Host and Gateway and used the inbuilt HTML5 client for running the apps in. Important note: The HTML5 element uses websockets which do not work through Web Application Proxy, so you need port 443 from the gateway direct to the web (no other ports needed)

Personally I'd give it a shot as there is definitely one academy school listed on their website

New one that I have to thank Overnet Data for their help with setting up. https://www.notifications.service.gov.uk/ The government service that gives you 25,000 free SMS Messages a financial year and the costs outside of that are stupidly cheap. Signed up to it, followed the steps to get the system "Made Live" and their support send me a nice little PDF of what to do to intergrate it into Edulink One, saving a bunch on SMS now with the costs from here even after the 25,000 per annum

Not the first Land Before Time, they will be an emotional wreck when that scene happens. Personally anything from the Disney Renassiance (1989 - 1999, Little Mermaid through to Tarzan) is usually a good shout.

Now I know i struggle with colours, but Cookie Monster is deffo highlighted is red marker in that picture right?????

They are very well priced. I have the HP allow all VLANs over the port but then I can use switch port profiles for more than one VLAN with a default for no problems at all. But everyone works a little differently. Personally, for our setups I wouldn't bother with a USG and have a decentish layer 3 switch in the middle somewhere. If those sites still have decentish core switches for VLANs, keep em ans use them

Fibre is not a problem at all, had to turn off the setting where it wants it to be a HP fibre module but everything works fine. Make the VLAN, have it as tagged on the ports you want with your management/AP one as tagged traffic and put the VLAN number with the name you want in the unifi controller and it all works just fine.

we have a HP Aruba core to do the routing (I will look at the version tomorrow, but it isn't anthing majour) and then everything else is Unifi. I don't really think the USG works for us in education with our extensive firewall and filtering we require. I have the cabinet switches come back to a unifi 16-XG in the middle, which my server hosts also plug into, and then one 10gb link from the to the "routing core" as i call it and that has 1 port to the XG (for firwalls and filtering) and one to the VOIP server.

I had a look in Global Settings and it really doesn't seem to be a thing that you are able to do. It may be worth contacting your SIMS Support unit over it and see if they can suggest anything. I couldn't see anything obvious in the homepage timeline settings either.