MHegarty

Smoothwall uses a really obscure method of handling their NTLM which breaks most modern applications, so I would never switch to that option. I can’t think of a way you can enforce this without control of the BYOD devices. If they’re iPads or Chromebooks can you do MDM on them?

Unfortunately there will always be this sort of stuff. I thought smoothwall filtered images that it deemed inappropriate anyhow? For now just filter Creativeboom.com entirely. That will block it out as smoothwall intercepts images from bad sources and replaces them with blocked iFrames, if I recall correctly.

There is a feature I was researching called Always-On VPN. You can force it via MDM and force all traffic through your own VPN which could literally just be an internal server. Students wouldn’t be able to connect over the MDM policy if you install it right.