speakercon

Not really, just firewall features and still renew the forticare for firmware/hardware replacement.

Fortigate + Securly. You won't regret it.

The fortigates are just doing the firewall function, we renew the forticare for the firmware updates and hardware replacement. Securly works off site, removes the filtering/inspection burden from the appliance, if you have multiple sites the filtering is all in one place, easily scalable and just works better/quicker/easier for blocking/unblocking. No AD integration required as it authenticates with the O365 account to apply users to the correct filtering group, easy to set up.

We use FortiGate's with Securely for filtering (having previously used the FortiGates for filtering) and wouldn't choose anything else now.

If they're still getting network folder desktop then there must be a folder redirection GPO in place that needs removing? There a load of GPO's you can set to silently sync desktop/docs/pics so they don't need to select them manually. Personally I don't redirect the desktop to OneDrive, and just redirect via GPO to the public desktop folder which stops them saving anything in there. - - - Updated - - - To add in my experience you need to remove the old user profiles after a folder redirection change.

I think most schools would choose a cloud only platform over on prem for systems like this if the features are more or less the same, and certainly most IT support staff would if they are lucky enough to be involved in the decision making, as on prem systems like SIMS/Inventry add to their workload with their inevitable issues which get put on them. Having to blank the screen out for support to do anything is a faff, in most busy schools there's never a great time to do this. That's something but the other points remain a worry.

They have a portal that you should be able to log into to view the list of items/SN's after a collection, ours go back years. Maybe drop them an email to get an account set up if you don't have one.

Are there any plans to move the whole platform fully cloud based? I think most schools would be fine with not having a local database and already rely on the internet connection for most things, MIS/phones/files ect... Having a local database with loads of sensitive information on a non-encrypted windows box, in a publicly accessible location with the firewall/antivirus disabled and EOL OS's is more of a cause for concern.

Has anyone been invited to trial the 'BETA Cloud Console'? Still connects back to the database on the PC from the sounds of it. Sounds like SIMS connected. The whole thing feels like SIMS. They really need stop working on the current system and create a new true cloud system from scratch imo to avoid the same fate of SIMS, too the likes of the superior Signin App.

We have LTSB at one site, I've asked them what's the plan is on this and it looks like there will be a charge to 'upgrade'.

Did they involve you prior to purchasing? We have some staff mobiles (android) and we manage them through Intune and force a specific SSID to connect which has the relevant filtering policy applied to it.

Would a point to point be an option instead of catenary wire? Would obviously need a small switch in the remote building.

I literally just noticed a couple of days ago that defender was turned off at one site, and upon checking the others it was also the case. Turning it back on broke various things so I feel it was turned off for convenience on their part but it clearly needs to be on. I opened a ticket with them asking for the required exceptions to be applied but so far have had no response. I wonder how many other schools have theirs turned off? I feel like Inventry is the SIMS of the sign in systems.

You need to view hidden system files. EDIT Oooops I was a page behind.

Just going back to the Synology O365 backup, is the data of any use without the tenancy? Can you view/extract data without restoring back to the tenancy? My thinking if you can could this actually make things worse in the case of a local network compromise? If the O365 tenancy wasn't compromised they could get the O365 data from your NAS?

This is quite correct.

I've previously used a bat file run every few minutes to remove all the desktop.ini files.

Try eBay, you can pick procurve stuff up for next to nothing and it will probably carry on working for years... HP ProCurve 2810 48G J9022A 48 Port Gigabit Ethernet Rackmount Switch J9022A | eBay

Lets not forget the DfE threw out their own 'standards' when they ran out of money towards the end of the CTC funding and started using Unifi. I take them with a table spoon of salt.

Yes, depends if its a wall cab or floor cab? I keep 1m and 0.5m in stock so whichever works best, you end up with a small loop at the bottom but doesn't look untidy imo.

Unless money is no object and the switch per panel method can be done, I always go Fiber Panel cable management bar patch panel cable management bar patch panel cable management bar patch panel cable management bar Switch cable management bar Switch Looks neat and is easy to make changes, use some velcro cable ties to keep the cables tidy on their way down. I'd remove the old voice panels.

Absolutely. I assume with cloud to cloud providers there are safeguards to prevent this? 2FA on admin accounts I would imagine is enforced, but are there usually other things like preventing mass data deletion?

**Thinking aloud** What if the NAS was on its own internet only VLAN with no network access, and not storing the log on credentials anywhere (although obviously it would need to be accessed somehow for management)?

Interesting, what sort of internet connection do you have? Is that for the initial backup or every incremental backup?

How would the Synology option look in a Ransomware attack situation compared to a cloud backup such as Barracuda?