broadld

@SIMS_Customer_Support Is this an update that will take SIMS offline to apply a database patch? I feel quite uncomfortable rushing through a patch which will have had little testing done on it in the middle of a school day. Have ESS been in touch with the DFE regarding the CENSUS return?

I have organised a trial for this so we will see if it works any better than last time we tried it.

The safeguarding side seemed to just work in v1. But the broadcast of screens and locking screens was very hit and miss. Like other have said if they got this sorted it would be great. Hoping someone can test and see if it works any better in v2.

If you can let me know if this improves the deadlocks that would be great.

Has anyone applied Patch 20352 yet and has it improved the lockouts?

That's great so literally we can get rid of the open port and the connector does it all. I suppose the good thing about doing it this way, is the user is authenticated before they even get to your system!

I presume after it is configured you have to configure your firewall to only accept traffic from Azure? Otherwise someone would still be able to access the RDWeb server directly if they got your external IP address and browsed to it.

Do you need any additional licensing in Office 365 to run an app proxy?

Hope you got this sorted. If not you need to put the vhdx file on shared storage. Shared storage in a HyperV Failocver Cluster should display in c:\clusterstorage\. There may be multiple volumes if you have different tiers of storage setup. You need to create a VM in Failocver Cluster Manager and attach the disk. If you have already created the VM in HyperV you can protect it with Cluster Manager after. Have a look at this guide from Papercut which covers quite a lot of it. It will also explain it a lot better! https://www.papercut.com/help/manuals/ng-mf/common/cluster-server-2012-2016/#:~:text=In%20the%20Failover%20Cluster%20Manager,the%20virtual%20machine%20up%20on.

Good evening, Just wondering what people's experiences are with protecting RDWeb RDS servers. Only port 443 is port forwarded from the firewall. We have user account lockouts in place, MFA configured, Geo Blocking and have evlwatcher to block IP addresses with failed logins. We are looking to buy RDP guard. Is there anything else we can do? I have been considering also looking at an azure app proxy.

Not received anything from them other than them confirming they were looking into the issue yesterday morning.

Same reply that we got from support. Not sure why they don't have a status page or send an email out to let people know.

The relay is only used for WOL. The Sensor client is meant to keep traffic on the local network. Only should use the internet if you are connecting from outside your network. However from our testing a few months ago the safeguarding screenshot system worked fine. But broadcasting your screen and locking students screens was so intermittent. It would miss big chunks of the class. Support couldn't resolve it and said no one else was having issues like it. But just from reading forums lots of people are having exactly the same issues.

What access control system do you use? We recently had an issue with Paxton Net2 where it would intermittently connect and then disconnect for some time. We troubleshooted it for a number of days and found it was Defender AV causing the issue. We added an exception to the on access scanning for the Net2 database and the issue instantly went away.

It is only because we had a ticket open with them about the deadlock issues.