Xur

I'm with "Swarm"

There was a recent tweet from John Jackson to say it's been cancelled but that's no longer there. I can't see any changes to the Eventbrite page either. https://mobile.twitter.com/TM_QAS/status/1240046989124997125 I think it's safe to assume it's been cancelled and hopefully there will be webinars instead. I do appreciate all the work LGfL are doing, particularly in light of Coronavirus, but it would be really useful if there was more and earlier communications. To give another example, John tweeted about Freedom2roam's availability on the 12th but an email and support site announcement only went out yesterday. It doesn't seem logical to have to rely on checking an individual's Twitter feed to get the latest info!

I checked this with the service desk and LGfL don't globally block sparklebox but instead have it denied in their default filtering policies that schools inherit. Therefore giving us the choice, if we really want to, to unblock it by removing the blocked URLs.

I don't have any experience with Synology unfortunately but it's been possible to control you're own firewall for many years with LGfL. If you give them a call and ask about "Option 2" I'm sure they'll be able to send information on this over. Regarding troubleshooting, I would recommend running a packet capture and double checking the requests it's making. may be of interest as well.

If the app is installed on a device inside your school and just needs to send some mail, LGfL have a mail relay server that you can send emails via. I use it for Redstor alerts. Give the help desk a call and they'll give you the details.

As others have said, just raise a case with the LGfL Service Desk and let them know what mail services you want access to. They do have standard rules they can apply and you won't need to complete a spreadsheet. WebScreen just deals with ports 80 & 443, so that's why the reports will be blank as the mail client will make requests on 465/587, 993, 995 etc which will need the firewall changes.

Thanks again for picking this up John. Yep, and it's really useful for checking a particular record but it doesn't give you all the records for a domain. If you use the lookup to check an LGfL domain for example, it won't provide a definitive list of all the DNS records.

I was pondering the same question yesterday. I'll check out Trello, thanks all

Thanks John. Having a read only view would be great. I keep my domains with Atomwide/LGfL as it keeps things simple and means if anything LGfL related did need changing they can just do it for me. I've had numerous issues in the past with domains, from predecessors forgetting credentials to domain management to website hosts having control of domains/not wanting to relinquish that control. Having the domains with Atomwide avoids all this. On the occasions that I do need a change, it's usually done within an hour of a case being logged and the extra layer of sanity checking is useful. Being able to see a definitive view of all the records at any given time would be a great addition.

And also here https://www.lgfl.net/news/dyn/046f7a0c-7814-4a8a-9920-8302b80aa34a

My understanding is the following: Freedom2Firewall was basically about LGfL being able to offer an option 2 connection with filtering and a LGfL provided firewall that we can manage. They are also going to look at making improvements in the firewall request process which sounds good to me. Lgfl@yourservice looked to be a portal where you get see stats on LGfL services for the schools you manage in one place. Free2Roam is basically a better browser based remote access but still keeping AnyConnect. Based on what was said we should see this all within a month or so. All sounded like a step in the right direction for me.

RIP. A great actor. He did a really amazing job even with the small role he had in Skyfall.

Same here! I really need to get round to updating them

I've been lurking for a while but felt compelled to reply. From personal experience I've found that getting firewall changes was pretty easy, as long as I had 'all the info'. Mainly where it's connecting to and on what ports. I would argue that the reality is that the majority of schools don't actually want to make firewall changes themselves or have staff on hand who have the expertise to make changes and to troubleshoot if something doesn't work. I think it's viewed as a 'security risk' by LGfL/Atomwide aswell, which DaveAshworth has mentioned above. I'm kinda happy that I don't have to make the changes, certainly without a GUI! I don't want management, but more visibilty of the firewall config would help. Particularly when it comes to troubleshooting and knowing exactly what is open.