chrispounds
Members-
Posts
60 -
Joined
-
Last visited
Content Type
Forums
News
20th
EduGeek EDIT Conference
Blogs
Everything posted by chrispounds
-
Smoothwall iOS11 Unifi Issue
chrispounds replied to smo78's topic in Internet Related/Filtering/Firewall
Glad to see it's working I should of been more specific as to what to do with the URL!- 7 replies
-
- ios 11
- smoothwall
-
(and 2 more)
Tagged with:
-
Smoothwall iOS11 Unifi Issue
chrispounds replied to smo78's topic in Internet Related/Filtering/Firewall
I Believe there was also an update to the UTM, that SOPHOS acknowledged, where iOS 11 devices where having issues with authentication.- 7 replies
-
- ios 11
- smoothwall
-
(and 2 more)
Tagged with:
-
Smoothwall iOS11 Unifi Issue
chrispounds replied to smo78's topic in Internet Related/Filtering/Firewall
Hi Guys, Try unblocking captive.apple.com - We had this when iOS 11 came out, it trys to connect to this site first before it attempts any authentication against your radius servers / various methods, we found allowing the device to reach apple then enabled the device to stay connected. We had ours with SOPHOS proxy and Meraki Wireless. Hopefully it helps somewhat!- 7 replies
-
- ios 11
- smoothwall
-
(and 2 more)
Tagged with:
-
Hi, We also have this issue, we pre-configure some of our iPads with Wi-Fi credentials via Meraki. Also using UTM. This also drops out, but only with certain types of connection, this one in particular is used with a RADIUS server. Will be interesting if anyone comes up with a fix for this, the forget network / reconnect doesn't solve it for us.
-
We solved our iOS11 Wi-Fi issue in the end by skipping any authentication checks on captive.apple.com from our proxy server. According to the packet trace, iOS11 was basically telling the device to de authenticate from the Access Point because it couldn't reach captive.apple.com without authenticating with us first! Nightmare, but solved, so there's 1 less worry!
- 20 replies
-
- 2
-
-
- apple
- apple configurator 2
-
(and 3 more)
Tagged with:
-
We have an issue with iOS 11 on the Wi-Fi, getting it to direct to a sophos proxy authentication page, it just won't do it, drops the SSID after getting an IP address, previous iOS versions seem to have been fine. Meraki are looking into it, but of course blamed our environment first, before realising we were hunky dorey before the new update! Grr...means none of our students can access their wifi at the moment, my heart bleeds
- 20 replies
-
- apple
- apple configurator 2
-
(and 3 more)
Tagged with:
-
Hey guys, We currently use Meraki for our Laptop / iOS MDM solution. We also use Barracuda MDM (free with our mail filter) for Android devices. The problem is, it's very limited and we would like to explore other, costing services. I've had a look at Manage Engine, which we currently use for our helpdesk - this seems like a solid product so far. I've also looked at Intune, but im confused with their pricing, as it seems to be per user and not per device? Just wondering if you have any suggestions or whether you are using something now that you like? I've considered using Googles own, but again, they charge based on your AD environment (objects) and we are a large college / university campus, so that's a no go!
-
identify PCs not running logon script
chrispounds replied to Markurageek's topic in Windows Server 2008 R2
Hi Markurageek, This will output it to a gridview in a window, if you want this information outputted to a csv file, replace "out-gridview" with Export-Csv "C:\Temp" | ft -NoTypeInformation Let me know if that helps! Obviously change the name of the service after -DisplayName, make sure it's in quotes as it is string, if you dont put a * wildcard after, you will have to make sure you type it perfectly! -
identify PCs not running logon script
chrispounds replied to Markurageek's topic in Windows Server 2008 R2
Hi Markurageek, You could employ powershell here to do the dirty work for you. It should be quite simple. You can run a query against an OU (providing that you have your machines in an OU) that can tell you if a certain process is not in a running state on all the machines inside that container. If this interests you, i can knock something up, let me know. -
Meraki's MDM solution is good, but it is only a free addon, so does lack the "premium" features. We have it installed on a fair few devices (large college / university with outcentres) and it does the job for us. DEP is good, but means you will have to buy direct from Apple or an approved reseller. If you want things like time control, i would advise against. But if you already have access to Meraki for wireless etc, i would give it a go for sure.
-
I made a powershell script recently that searches based on parameters you set and pulls back login dates / times etc, you are more than welcome to give it a try You will have to make sure that you have another file, which has been turned into a function, this is referred to when you see Get-LogonHistory.ps1. It's quite a long one, so i've uploaded both to a pastebin for you. Powershell Script = https://pastebin.com/AeWXxZpT Get-LogonHistory.ps1 = https://pastebin.com/CQhbxCmR Please make sure you run it from an admin account. Any questions, please ask.
-
E-marker Proxy settings
chrispounds replied to chrispounds's topic in Internet Related/Filtering/Firewall
Hi TheCrust, I've PM'd you the details. -
So, no luck with the exception, i even made it a REGEX match, to rule out any discrepancies with the URL. I think i'm going to have to revisit this one later, until someone else comes along with the same issue, it seems to be less than 1% of sites that i encounter this with.
-
Hi Jahilton2002, I have tried applying a Skip all site checks rule to the domain, but i will make a specific one, in case the rule i made previously isn't being applied, i will report back.
-
Hi Colly, Yeah i did see that there are a number of little issues, although i'm never sure they come out with a stable version! So far, it's only 1 website in question, so i think in this case they will have to find an alternative source of bags for the college shop! Not worth the hassle and weekend work of a rollback! Thank you for the suggestion though, much appreciated
-
Hmm, thank you for the suggestion, the timeout is happening before 60 seconds have elapsed, which is the default setting, so i don't think that's the cause, but i am willing to give it a go!
-
Hi Guys / Gals, Not sure if anyone has experience with a UTM, I'm having troubles with accessing a certain website through the proxy, using UTM 9, with 9.501.5 firmware. I get the error code 504 (connection timed out), i've attached the logfile code so you can see. Steps so far, include the usual website exception, which didn't work, AV skipping, no luck. Then i tried adding it to transparent mode skiplist, both source and destination as a DNS host, with URL applied to the eth that the proxy is connected to. Is there anything else i can try? Still newish to this UTM, so apologies if i miss anything glaringly obvious. Just to mention, tried without proxy = fine. Other browsers, i get the same result, a timeout error from UTM displayed on screen.
-
Moving Computers within AD with a CSV file
chrispounds replied to Qwedsa182's topic in Windows Server 2012
If you want to "test run" the script, add -whatif after the "move-adobject" line and it will simulate the action for you first. Then just remove it and re-run it when you are happy.- 8 replies
-
- active directory (ad)
- computer
-
(and 3 more)
Tagged with:
-
Moving Computers within AD with a CSV file
chrispounds replied to Qwedsa182's topic in Windows Server 2012
Hi Qwedsa, You can import the data using Import-CSV. Each one of the rows is treated as an object, you can target specific columns also. So you could store the new OU into the CSV, then with the script Ric provided, adapt that to your needs. powershell.org is a great place to seek help if you require it But, here is a script that should do it, obviously you need to change the variables to match your scenario What this is doing, is reading column names from the CSV file, so where it says $item.CompName - this is because the column name in the CSV has a title of CompName. Then all of the PC's that need targeting are written below it.- 8 replies
-
- active directory (ad)
- computer
-
(and 3 more)
Tagged with:
-
Can confirm i have added all of the above adresses into our SOPHOS UTM and also disabled auth on them too, still won't play nice unless i turn the proxy off for that user's machine, which obviously isn't ideal.
-
Regarding this, we have a member of staff who encounters proxy issues when using it, so we have had to (temporarily) turn the proxy off to get it to work, any ideas what this app tries to access url/ip wise? Just wondering if anyone has already figured the exceptions
-
E-marker Proxy settings
chrispounds replied to chrispounds's topic in Internet Related/Filtering/Firewall
Hi Noel, I spoke to a chap who actually rang me, who was quite adamant that it wouldn't work in a school environment and said it wasn't worth my time or his to get it to do so, especially on school equipment, due to the program needing so much admin access. So that would explain why it works on personal laptops. He did say that he couldn't disclose what ips/urls the program tried to go to for security reasons. So i still can't help the user who want's to at least use it in college! Shame, but maybe we just have to say - If you are making money from it, don't use college resources! -
New Wireless System what to go for
chrispounds replied to aidenbran2000's topic in Wireless Networks
I must say though, we installed it at our outcentres also, so that makes up the numbers! But yes, we are a large site with multiple buildings -
New Wireless System what to go for
chrispounds replied to aidenbran2000's topic in Wireless Networks
We use Meraki here at the College, roughly 150 AP's throughout. Can't fault it if i'm honest, cloud dashboard is great and easy to use. The support is outstanding also, if an AP has issues, they will send out a replacement straight away, we've even had newer models sent out as the last was EOL! We make use of the free MDM solution as well for our iPad clients. So another added bonus. I don't think they are cheap, but definitely worth the investment because of the long guarantee.
