CrootUK

Hi Folks, I know this has been discussed lots before and most of the time turns into an argument I'm not looking for that just positive suggestions please. We need local installs of Python gone for many reasons that I won't get into. I need to find a route that will allow students access to an IDE preferably in the web that will allow editing and running code and also importing csvs/text files and when done be able to save the work locally. What is everyone using please? Many thanks.

Nope still manually updating address objects every time exams emails us saying “Its slow again”

When on the cli type setup, then you have the “permit admin access” option that’ll create a new access rule on your selected interface. Hopefully that works out for you.

The issue isn’t so much smoothwall, but rather the options Apple gives these vendors. Smoothwall ships a custom firefox browser for apple devices, whilst this filters well within the app itself it doesn’t filter in other apps that have built in browsers eg onenote, google earth etc so theres chance of misuse. You also have to remove safari which may make an iPad less familiar to the regular user. Same applies for many other vendors in the web filtering and monitoring space again mainly due to the options Apple are allowing these vendors (with the excuse of privacy even with asm enrolled devices), I know others have tried to get around it with likes of netsweeper tunnelling traffic in a vpn like fashion which has its pros and cons I believe. Apple has some options via MDM to do web filtering but it’s basic and no reporting. This is all only really an issue if you’re looking to filter off site, if you have an onprem appliance thats doing proper realtime filtering / https inspection then that will cover an iPad appropriately (smoothwall can do this)

Who wouldn’t given the opportunity! LOL

Edit sorry was on mobile app which doesn’t show the voting system, have voted now.

Highly recommend https://www.redwaynetworks.com

Anyone come to a conclusion on this when using smoothwall? We are transparent, no proxy. Not looking to open up port 8443 to all destination IPs and Pearson don't provide a subnet... We have a firewall rule and address object setup that works for a while until Pearson change AWS compute and the IP addresses change. As Smoothwall doesn't support DNS for firewall rules I can't just add in "springboot-prod.priv.pearsonprd.tech" and "springboot-prod.identity-prd.pearson.com" Thanks!

I reckon its a student aswell😂

Also receiving complaints here, users getting 504 Gateway Time-out. Microsoft-Azure-Application-Gateway/v2

See link for info: https://mynewterm.com/jobs/16519/EDV-2024-TDET-97926

https://www.serversource.co.uk

Hi All, To be clear to begin with, this is a new setup and smoothwall are confident they have other customers doing this but are checking with devs on what the solution is. I thought asking on here may speed it up for us as we are getting some heat from it currently. So for those already using Smoothwall in a parent/child (tenant) setup across schools but use a single domain how have you got idex to work? At present idex is picking up our session and it can be seen in the user authentication tab (with groups) but the proxy isn’t appreciating thus shows us up as unauthenticated. For us our “single” domain is actually more a central domain at present as we have all the individual schools connected through trusts and idex is working perfectly for them just not the central one (where the smoothwall themselves are actually joined). Many thanks

Meraki MS125 and 225 on edge here all at dual 10Gbps spread across two core switches (where possible more in secondary rather than primary schools), was a mix Cisco Nexus/Catalyst, Aruba and Unifi at our schools, Meraki has made it way easier for all our techs to get involved/action network changes. Hiring skilled people in edu space is hard, Meraki took some pressure off of us (IT) so was worth the money ontop of the other benefits. Don’t get me wrong UniFi is great, certainly gets the job done and now they have aggregation switches and proper warranty they certainly tick more boxes. When stacking comes they’ll be a real competitor for large networks (again N2H tho) still achievable without by chaining using DACs etc gotta get that STP Priority right tho [emoji6]

An agent that would manage and ensure the extension is on different types of browsers that might be installed and configure it so the extension is unable to be disable etc and also pickup traffic outside of the browser etc would be ideal, think we spoke about this before and you mentioned it was coming. being able to just push some software out rather than relying on multiple policies to configure a multitude of different browsers would make life much easier, but even then so many apps have built in browsers like google earth, maps, onenote that filtering beyond the browser is needed too unfortunately (nothings easy!) we go live with trustwide smoothwall next week, happy to try anything you have after! (This has side tracked OP, I am sorry)!

Would love to see the installed agent version of cloud filter for windows instead of/management of extensions.

Hi All, For those who have gone through a site visit from DfE in regards to a completed CTC project, what kind of questions were asked etc? just trying to gain clarity on the kind of people that need to be present for it? Were any technical questions asked? Many thanks

snap!!

Hi folks, Has anyone managed to get alerts to work from bromcom via edge through to windows notifications? It works for Teams Web and Notification test websites but not bromcom for all our computers win10/11. Thanks.

We are new customers to bromcom and it really has been dreadful for us all week. IT across the Trust are really getting the brunt for it, blaming our network etc. We have over 5 pages of tickets open with bromcom across our schools. I feel sorry for their support. There is clearly a real need for change.. split some load to AWS just anything but stop blaming Azure.

Seeing a 25 min delay on emails too.

We are doing a trust smoothwall deployment atm and I recall atleast 5 virtual interfaces showing I am pretty sure, does the interface have a static ip thats enabled? it wont show with dhcp/ip disabled pretty sure… tried rebooting too?

Doh, just rolled out 14 of these gen servers not enough time to do it now🥺

Unless you’re significantly confident in hardening Linux as a OS i wouldn’t go near a harden repository, your better off handing that off to a cloud provider who can handle that for you, its really not that expensive. Id recommend chatting to CT.co.uk, they can even help with how to restructure the hardware you have to put you in a better place. Without knowing the exact specs it will be hard to advise further, but usually you’d go with bigger but slower disks in a backup server.. cpu/ram really not so important for veeam, 6 core core, 8gb ram is the veeam reqs. https://www.veeam.com/products/veeam-data-platform/system-requirements.html#:~:text=If%20you%20deploy%20a%20worker,for%20product%20installation%20and%20logs I’d suggest a physical box unless you have off domain hyper-v servers it doesn’t make sense to virtualise on just one server for veeam… is this covering multiple sites? do you have vpn/mpls/sdwan in place? if so you could centralise it? Lots of options but hard to help without quite a-lot of potentially exposing info. Id advise speaking to CT or someone similar.

I suspect you may get some vague responses with it being backup and all. As long as you’re following this you should be good. https://community.veeam.com/blogs-and-podcasts-57/3-2-1-1-0-golden-backup-rule-569 If you’re using RPA for cyber cover immutable cloud backup doesn’t suffice so a rotated hard drive or tape library is the only way. My main advice would be have a box not on the domain and with the credentials to it not stored digitally anywhere, I know this to be what saved a few trusts after a cyber attack.