ChrisCole

Hi there, Just had mine installed this morning and with a little hacking have the dashboard working fine across the school, being served up from an idle IIS install. I only have IE8, Firefox and Chrome to hand, so IE7 may still play up, but I'll explain what I did... The main app is an Adobe Flex thing and the Java applet is actually just a detection app which sends as subnet broadcast on UDP/2317 to detect the data logger (An EnergyICT WebRTU Z3, in case anyone cares). If your network has more than one subnet (and you don't have UDP helper running) or there's a firewall in the way, the meter won't necessarily be detected automatically, I assume this is what's happening in your case. So, assuming you know the IP of the meter (its MAC probably starts with 00:24) , you won't need the Java Applet to load at all and can just fake the XML response it provides - getting the thing to work across subnets and making the page load a fair bit quicker. The attached index.html should help you out - just replace "INSERT_YOUR_METER_IP_HERE" and "INSERT_YOUR_SERIAL_HERE" in the getRTUs() JavaScript function with the IP and serial number of your meter and it should work (and remember to clear the cache in IE before reloading the page). You can get the serial number of your meter by going to its built in web server (serial should be in the format nnnn-nnnnnn-nnnn). index.zip Chris.

Hi, Depends on your budget, but the Cisco ASA security devices support mandatory transparent HTTP/S filtering through a Websense server. The Juniper Netscreen range certainly do too, though not sure about the newer SSG stuff. ASA Specs: http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/prod_brochure0900aecd80285492.pdf The 5505 handles 4000 connections/sec and is about £400. You get a two user license for the SSL gateway with that too, which might be useful. The DC agent/Logon agent running on Websense will handle user identification. Feel free to give us a shout if you have any Q's about setting up Websense (and/or the ASA side of things). FWIW, I've found Websense v7 to be considerably more reliable than 6.x Chris.

Hi Jim, I have my ASAs setup to directly query the DC using LDAP, rather than go via a RADIUS server: aaa-server Windows_LDAP protocol ldap aaa-server Windows_LDAP (inside) host x.x.x.x server-port 636 ldap-base-dn OU=xx,DC=xx,DC=xx,DC=xx,DC=xx ldap-scope subtree ldap-naming-attribute sAMAccountName ldap-login-password * ldap-login-dn CN=xx,OU=xx,OU=xx,OU=xx,DC=xx,DC=xxx,DC=xx,DC=xx ldap-over-ssl enable server-type microsoft The ASDM 6.1 GUI in conjunction with ASA 8.04 is considerably more useful than the v7 stuff you're using, by the way... Chris.

Have you tested out the built in anti-spam support of exchange 2007? (How to Enable Anti-Spam Functionality on a Hub Transport Server to enable it if you have Hub & Transport roles on the same server) I have the content filter set to reject stuff with an SCL > 7, this works pretty well in conjunction with both zen.spamhaus.org and bl.spamcop.net as block list providers. There's also a free greylisting script for Exchange 2007 (JEP(S) | Proxmea), though I've not used it myself. Chris.

Hi there, Anyone ever had problems with 802.1x (EAP-MS-CHAPV2) user authentication over wireless not working when using mandatory user profiles (WinXP, SP3)? When a user logs on with a mandatory profile the RADIUS server (IAS on 2008) just sees repeated attempts to authenticate, but there's never an IAS_SUCCESS event indicating a proper connection (the clients stall at the 'validating identity' stage). Simply changing the profile to a normal roaming profile (NTUSER.MAN --> NTUSER.DAT, no other changes) results in everything working fine with successful authentication, and connection, etc. Rather odd and rather frustrating - the lack of anything on Google makes me wonder if it mightn't be an SP3 foible, but annoyingly I don't have any SP2 machines immediately to hand... Will crack out Wireshark/Process Monitor tomorrow and figure this out, but kind of hopeful someone here might well have experienced this before? Cheers, Chris.