Wave9_Lee

As a counterpoint to this, many of our customers have said that content-aware filtering can report too many false-positives and creates wasted time in dealing with them. If systems that use category based web-filtering are using a proper categorisation service and updated regularly and quickly, that's enough for many. On the other point about combined filter/firewall, the benefits of this include lower cost, easier management and better visibility. Just my 2p.

Hi @Joko Here's my obligatory post offering info/demo and pricing for Sophos XG and Fastvue if you'd like. PM me or contact me direct anytime for a chat or pricing, cheers

As it's FttP, it's not likely to be uncontended, won't have the same SLA as a leased line and is asynchronous. That's all fine as FttP goes, but depending on the size of the school and the services you run, just double check it's what you need. cheers

Thx @BKGarry, @mrhall if you'd like any pricing/info etc, then please drop me a PM or contact me any time, cheers Lee

Correct, ideally you don't want two different carriers ending up in the same data centre cluster of your service provider. You may have physical separacy locally, but at the aggregation point you're relying on your service provider having multiple redundancies, properly configured and tested. We provide carrier and ISP indepedence for this reason. Ideally your 2 carriers would be on different infrastructure i.e. Openreach plus VMB. Double check that VMB aren't actually using Openreach tails, as is sometimes the case where they don't have their own fibre. If you can't afford 2 x fibre, then an fttc/fttp is a good shout as although it's Openreach tail, it uses different infrastructure back to the exchange and different kit and backhaul in the exchange too. Incidentally we configure our backup line as active-active, so you get the use of both day to day, load balanced in whatever priorities you need.

Hi there, It's worth looking at Sophos XG, it offers excellent filtering capability combined with next gen firewall. I'd be happy to arrange a demo and/or quote anytime, let me know if interested, cheers

If you've found someone, just give them a call - it's you selling, not buying, so nothing to be worried about. You can check them out on companies house if you're worried about getting paid. Also quantity will be important, many companies wouldn't be interested in small quantities - ebay might be a better bet for a handful of kit. imo

Hi Petben, If you ping me a PM with your contact details I can get someone to help you set this up. cheers

Turn all the features on,

I don't generally know Fortigate pricing as we're not a partner, but in terms of size of appliance and functionality, we can undercut most on-prem appliances with Sophos every time (i.e. like for like) You have to be carreful when comparing as you might find that some resellers will underspecify the appliance to fit a budget, rather than size the solution correctly. Happy to send some pricing over if you drop me a PM. cheers

I'd be happy to arrange a Sophos XG demo, PM me if interested.

Happy to arrange a demo of Sophos XG for you if you need. No obligation. We offer an annual payment, inclusive of unlimited helpdesk for any adds/moves/changes as well as troubleshooting, so overall think it's pretty cost-effective. PM me if you're interested. cheers

Perhaps fix the IPs of the DFE chromebook and let them out unfiltered, to see if they behave better as a test?

Not my area of expertise (not much is tbh) but perhaps it's something on your umbrellla policy or google management - i.e. does the device or umbrella know it's on the inside of your school network and applying a different policy? They could be being filtered/scanned twice? If you don't have access to Umbrella config, perhaps you can set the XG to let the devices through unfiltered as a test? Have the DFE devolved any of the Umbrella admin to schools, or is it one size fits all and they are expected to be direct internet connected rather than proxied etc? Also, is the school connected to a direct internet service, or through an aggregated WAN? Again proxy and NATing could have an effect.

Totally agree it's furstrating. It's there for a good reason (for the vendor and the preferred partner) but agreed, doesn't really work well for a '3 quote' procurement'. To be fair, with many vendors, if there is a full procurement ongoing, they will generally give all resellers the same price. Bit hit and miss though...

We offer annual charging for a 3 year licence, which takes the sting out of it. I'm biased, but do think it's worth it. Ransomware can have a massive impact both from a cost and dowtime perspective.

Hi ITGURU we can offer fixed IP SIM from multiple carriers, PAYG or longer term. Drop me a PM if you'd like some pricing cheers Lee

This should be pretty straightforward, and we've done it many times, no issues.

Hi We can provide a price for Meraki Licencing renewals and new kit etc. Happy to help if we can. Like many vendors, there is reseller protection in place, generally giving the original reseller some price advantage, but happy to try for you. cheers

We'd be happy to provide some priced options if you'd like. As mentioned, you have a few options; 2 x FttC (cheapest, adds some resilience) Contended (EoFttC variant is uncontended, slightly more expensive) FttP - (i.e. Superfast) up to Gbps, contended, in very few areas, not symmetrical - usually contended - possible high install costs, some subsidy programs are available. Leased Line - best SLA, symmetrical - up to 1Gbps (sensibly) - getting cheaper all the time.. Cheers

If you're looking at replacing an on-prem with another on-prem offering, take a look at Sophos - let me know if you would like a demo, or pricing. cheers Lee

I wonder if it's just NNI traffic, as we take DIA from many carriers including VMB, TTB, BT etc and not a single outage yesterday.

Hi Jonah if you'd like some quotes to compare, I'd be happy to quote. We can offer most carriers, and project manage your installs etc. Drop me a PM or contact me directly if it's of interest. You'll need to have a think about resilience in terms of your firewalls/filtering etc, i.e. a ring toplogy might be better than P2P, subject to your locations. It sometimes works out more resilient and flexible to have a private WAN for not much difference in price. Happy to discuss, cheers Lee

I’d be happy to provide pricing and info, contact me directly or drop me a pm. If it’s the rgc scheme, I think you need to place your order soon due to the deadlines. Most schools use the CCS broadband framework for this, which were also on. cheers

Sophos XG will do that for you, an appliance on site that you can manage. Wave 9 can install and manage/support and provide training if required. If you like a quote and more info, drop me a note or pm, I’d be happy to help you out. cheers Lee