Search the Community
Showing results for tags 'firewall'.
-
Moving away from LGFL Web filtering/Firewall
xicor posted a topic in London Grid for Learning (LGfL)
Hi All we have 3 sites with LGFL and so far we've been using LGFL web filtering but to be honest I'm getting fed up with web screen and the lack of any control over the firewall, some of you might have seen my previous threads about this and despite various promises from LGFL this issue remains several years later and web screen is still looks it was made by a graduate at uni So..... I've decided to slowly move away from my reliance on LGFL's web filtering and firewall and just get my own and have complete control, I'll set the LGFL connection to be completely unrestricted and just use my own firewalls/filtering etc. in your experiences what has worked very well with web filtering and firewall ? Thanks in advance! -
We're running into some problems with our system and want to investigate different support companies (apart from B4B) to handle our Yeastar and firewall configuration. Likely this could be done remotely. I've drawn a blank on firms in Ireland who support Yeastar. Can anyone recommend a Yeastar-supporting phone company?
-
Hi, the head of PE asked me to download some software called ‘Anki’ https://apps.ankiweb.net/ but even though the top level level domain is whitelisted in our Sophos web appliance, the software errors when trying to ‘sync’. Just wondered if anyone out there has any knowledge of this software and what you did to get it working? The error states that ‘A network error occurred’. os error 10061. Thanks -
Morning all, we have been having problems for ages now and can't find what the problem is. We use Smoothwall for our filtering, and Watchguard for our Firewall. On a regular basis (daily, sometimes every other day), we loose connectivity from our smooth wall to our watch guard (shown in Smoothwall as "gateway failed"). After 18 minutes, the connection resumes. This resumes without touching Watchguard or Smoothwall - no reboots required. Luckily Smoothwall have set up a failover port, which kicks in and connects to a different port on the Watchguard during the outage so our end users at worse see a 20 second "blip" which is solved by a refresh. The dropouts happen around the same time of day when staff arrive / start to log on en-mass (between 8 and 9am). To cut a long story short, Watchguard say "they can't see anything wrong" and Smoothwall say "Watchguard are dropping DNS packets". I say this is crazy and we need it fixing! The dropouts only appear during term time, so for example over christmas break we didn't have any users logged on to our domain and we didn't see any dropouts in the logs. If i connect a laptop directly on the WAN link then there are no ping drops. So... could the problem be linked to a rogue machine logging in and doing something funky? Is it one user that runs a certain service which throws things off? Do I need to go and hit the Watchguard with a cricket bat and hope the problem goes away? On a separate note, but an example of weird stuff happening, years ago we had a machine running OS X Lion, and every time that machine connected to our SAN, it sent the SAN in to a panic. We patched the SAN and things seemed ok. Now I'm not saying this is SAN related, but it shows how such a small thing can cause a huge problem. ANY help would be muchly appreciated. -
Do you use the Windows Firewall in your environment on desktops or other windows clients? Doesn't matter what version of windows. Any input as to why you have enabled or disabled would be great.
-
Hi All, Just wondering if I could have some rough idea of the costs for a Firewall and Web Content filter management hardware solution. I've had a few quotes, but management believe "no one is paying that sort of money" and that "everyone else is getting it much cheaper". Specs to include, Firewall for approximately 300 people, Web content to include layer 7 and Bandwidth management on a 3 year deal. How much per year? -
http://i.snag.gy/yD2i9.jpg Link: The best kind of network protection : funny [Reddit]
-
Hi, We use the YHGFL SMS vpn solution in our schools but I am unable to address the server by host name in a couple of our schools running Server 2012 R2 environments. Connection to vpn is successful but when trying to access drives mapped by \\hostname\Share fails with the following error. "The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you"- I can access without issue by IP address only but I do not wish to use ip mappings in these schools A bit about the environment - single server 2012R2 DFL and FFL. Clients running Windows 7 with a host file entry for the server - server runs infrastructure services, ADDS, dhcp, dns, file and print etc. I stumbled across an article that suggested opening port 88 (udp & tcp) on the server firewall - this has been done - I also noticed that group policy updates etc fail due to lack of connectivity to the server and that the vpn adaptor uses an ip on a 24 bit subnet where as the schools are on 21bit. I digress, posting this in hopes that someone has seen and fixed this problem or one of the tech bod's at Y & H have the answer? Thanks in advance, Chris (MINT) -
We have a Sonicwall TZ210 which refers web requests to a Websense server to check if the request is permitted, etc. I am trying to replace the old websense server (crashy, no disk space 2003 P2V conversion) with a new 2008 vm. However the sonicwall refuses to 'see' the websense server - simply states "server is not responding" I am fairly new to both Sonicwall and Websense, and whilst there seems to be lots of documentation on both, there seems to be very little on using them together. The instructions seem to be - put in the websense ip address into sonicwall and turn on for zone. But not much help when it goes wrong. Is there anyone who uses these products together who could give me a place to start. My install is new (7.7 web security) and pretty much defaults all the way. Any suggestions appreciated! -
Hi, new setup for work we're trying to do, however have had some problems. We've installed a new 2012 R2 setup with Remote Desktop and RemoteApp, Web Access, Gateway etc on different servers. Works great internally and we can publish Apps and access Desktops. Our internal domain is along the lines of "ad.contoso.com". Our office has a dynamic IP and we are using the .myfirewall.co domain provided by Sophos as a DDNS host which refreshes every 4 minutes. We want to publish RD Gateway for users over port 433, we're not worried about certificate errors as we can fix this by deploying the certificate via Group Policy. However, we are confused regarding the setup and how to get it all working over the internet. We want all RemoteApps/Desktops to be accessible over SSL over the internet, however forwarding port 433 to the gateway does nothing, as it's not on the same server as the web role. We are confused at the setup also, as our AD FQDN is internal only and doesn't resolve in the public DNS records for obvious reasons?! What do I have to do to get this working? You can be general with instructions, or specific to Sophos XG if you know! First time we're doing a setup like this, however want this to work. Any ideas you've got, let me know! Thanks, Whistler.
-
Codecademy Learn SQL behind Smoothwall
J_Worth posted a topic in Internet Related/Filtering/Firewall
Hello everyone, Trying to get Codecademy Learn SQL but it is refusing to work. Looking into it in more depth it would appear that our Smoothwall proxy is blocking WebSockets (both WS and WSS). How can I allow WebSockets through the Proxy? If I set my work computer to bypass the Guardian/Proxy then it functions as expected. Many thanks in advance. Kind regards, -
Morning all, I'll be starting a "How To" series shortly covering Sophos Products, mainly XG, UTM & Cloud Antivirus. Happy to cover topics you would like also so if you have anything you would like covering in a short video - please do let me know and I'll provide Kind regards James
-
Palo Alto Networks will be running their first Cybersecurity Summit in London on the 21st March. It is free to attend. I wanted to let you all know, especially for those around London as this should be a great day. This day is for end-users only and provides a great opportunity to network with others and hear from some great speakers. Below is the outline of the session. To register and to find out more information, including the full agenda, you can visit their landing page: Palo Alto Networks Cybersecurity Summit This year's theme, "Disrupting the Cybersecurity Status Quo", acknowledges the rapid pace of change in cybersecurity in recent years and the readiness and need for market disruption. In a digital world where adversaries take advantage of increasingly affordable technologies and leverage automation, we’ve seen, in response, an explosion of cybersecurity product innovation to counteract attacks. A big challenge for enterprises constrained with a lack of skills, resources and budgets is that accelerating innovation in cybersecurity creates a paradox that makes the consumption and usability of that innovation more difficult. You will discover how Palo Alto Networks is leading the way in that disruption, and how your organisation will benefit. Speakers include: Nir Zuk, founder and chief technology officer, Palo Alto Networks Greg Day, CSO EMEA, Palo Alto Networks Attend to find out how Palo Alto Networks is disrupting the cybersecurity market to help customers consume and use innovation faster. Learn how Palo Alto Networks Next-Generation Security Platform, powered by automation and artificial intelligence, helps prevent successful cyberattacks. Get up to speed with the latest network, cloud and endpoint security innovations and leave with new ideas to better protect your business. -
Has anyone got one, are they as good as all the calls I get claim?
-
Hi Wasn't sure which area to post this one in as it's Windows but also CC3 and firewall related. Let me know if I need to move it :-) I have a teacher using Moodle but on his laptop he gets problems where the RMSmartCache proxy stops him navigating around at seemlingly random points. E.g. he'll log in, be using it for 10 mins and then when tries to move to another page within Moodle, the proxy/firewall error reports he cannot get to the page. This is not the RM blocked warning, just the smartcache box reporting no access. The Laptop is set up on XP using CC3 and on IE7. Any ideas? I'm stumped at the moment. Cheers Nozza
-
So, I'm having a play with IPTables, with the aim of getting rid of our ISA box (there's no need to pay for a proxy!) The thing that is odd about our network is this - it is a single port 'firewall', as we are on a WAN. So, what I'd like to do is this, port forward all requests for port 80 to another web server. I have the following rules in the iptables.up.rules file in /etc/ (created via webmin): -A PREROUTING -p tcp -m tcp --dport 80 -j DNAT --to-destination 10.5.143.125:80 -A FORWARD -p tcp -m tcp -d 10.5.143.125 --dport 80 -j ACCEPT Yet, when I navigate to the that machine in a browser, nothing happens. It just hangs. Any ideas?
-
Hi All, I am currently trying to install the O365 apps to do away with Office 2019, I have tested the O365 setup install in task manager on 2 pcs, one connected to our firewall and one that just goes straight out to the internet, the pc which goes straight out installed office however the PC which was going through our firewall didnt, has anyone has this before , what IP/sites should I whitelist in order to install the o365 package Thanks in advanced
-
I have a small project for a school. They want the internet connection to cover 3 floors. As I know, Mikrotik and Ubiquite have good access points and both of them do not require any license, but what is the best solution and which one is easier to congifure please? They want to create two wifi connections. Also, they want to the connection to go through Netsweeper cloud firewall . Do you know if any of them offer discounted price for educational sectore please?
-
Assuming cost come back equal, which firewall + web filter would you deploy in your organisation tomorrow: Sophos XGS WatchGuard Fortinet Palo Alto Other We are currently investigating the list of vendors above for a multi site firewall project. If your chosen firewall provider isn't listed above, which would you choose and why? We would need the following functionality: Usual Firewall + Web Filtering Layer 7 App control DHCP server RADIUS accounting SD-WAN (site to site VPN) Interested to know everyone's thoughts. * disclaimer We are currently a Sophos XG house and we aren't unhappy with it, but we are not investigating the market to see if there is anything worth investigating. I'd be very interested to hear comments from those that moved from Sophos XG to something else and how they found the alternative. Usual grass isn't always greener...
-
Hi All, I've recently had our firewall moved over from Sonicwall to Smoothwall and our BYOD Wireless has stopped working and I'm after some advice. Smoothwall is acting as a DHCP server for the BYOD VLANS (MAT). When the device connects through the Smoothwall RADIUS (Authenticates fine). The Device asks for an IP address, Smoothwall then assigns it an IP address, then the device asks again for an IP Address...Then it just loops and then eventually times out. It's like the end device is not accepting the IP address it has been given. I've tried setting a static IP address and no luck either. Ruckus are adamant everything is working fine on their end and so is Smoothwall but I can't find what the issue is with the devices not accepting the IP address...Any ideas will be hugely grateful as I'm pulling my hair out with this one! Thanks -
We have a smoothwall multi tenant build across our MAT: 1 x Parent S15 in secondaries 1 x Child S10 in secondaries 15 x Child S1 in primaries In the past been a big advocate of their solution in education however, Our secondaries are split-site so we depend on internet breakout and smoothwall VPN for some essential services, for example our canteen civica cashless system, papercut and Peice of Sh* Financials (PSF) Until our suppliers offer a proper cloud based solution for these services, we are at the mercy of the VPN mutli tenant build solution provided for by smoothwall We seem to be facing issues on regular basis, VPN control randomly failing, web content filter service not working, system logs getting full despite settings telling logs to recycle. A handful of S1 boxes where handed over to us with default username and password along with SSH access so got comprimised, we where blamed for this by the installations team for not changing them after they where the ones who had configured the multi tenant build. Kids have been unable to eat as we are cashless and cannot checkout at the tills, our examination officer has been unable to download papers this morning, when printing goes down, the guy who sells pitchforks to the staff mob around the corner rubs his hands together in glee, it's becoming so disruptive I'm now no longer an advocate of their solution and looking for alternatives Yes we have backup procedures but still its not ideal when i or the senior techs are offsite trying to implement them remotely on a last minute basis What alternatives are their for a MAT build, i realise every company has its flaws, i just want to keep options open when it comes to renewal
-
We noticed that students have been using a website to bypass our Paloalto web filtering. The website is:https://webrecorder.io/ We are a bit miffed how the Paloalto missed this but have informed Paloaltonetworks of the mis-categorisation of that website so hopefully it will be re-categorised as high risk and as a kind of proxy. Just thought I'd make others aware incase it isn't being caught by their filtering systems too. We are currently checking to see if there are other 'web archives' that are allowing students to bypass the filters. Got to say it is scary seeing what the students have been using it for!
-
The wad process is taking 99% on the fortigate box I keep killing the process then a hour later it will go up again is there anything I can do to diagnose what the problem is the fortigate is running 5.6.7. Any help will be appreciated. -
I'm receiving the following on my Firewall log, an entry every second. It's been happening since upgrading from Glamis to Inverness-8 approximately a week ago. Time Inbound interface Outbound interface Source IP Destination IP Protocol Source Port Destination Port Rule Action 1:31:24 PM Port 2 (EXTERNAL) N/A (DA Server) (SW Ext Iface) TCP (6) HTTPS (443) 53233 Bad external traffic Reject The weird thing is that traffic from the Direct Access server is being blocked at the *external* smoothwall interface, to which it shouldn't have a route except through the internal interface. Any idea if this is typical, or if I have a bad rule somewhere? The bizarre thing is that from the look of my Helpdesk queue, Direct Access still works! -
Palo Alto Networks has launched specially priced solution bundles, purposely designed for schools and colleges, combining the power of their PA820 and PA850 boxes with URL Filtering, Threat Prevention and support. With their deep cyber security expertise, commitment to innovation, and game-changing Next-Generation Security Platform organisations all over the world rely on Palo Alto Networks to detect and prevent advanced cyber attacks while safely enabling applications, now you can too! If you're currently looking, or plan to review your firewall in the near future, please send me a PM and we will get the ball rolling. Due to T&Cs, we're only able to release pricing following a successful DR approval. Who choose Palo Alto Networks for your school or college: Protect networks, students, and data by automatically detecting, analysing and preventing known and zero-day threats. Ensure appropriate access to web content for a variety of users, with customisable security permissions and access privileges. Offer IT teams application visibility by identifying thousands of applications, and user visibility by integrating with user directories. Protect student and staff information with Zero Trust network segments that allow access for only approved applications and users, rather than ports and IP addresses. Secure newly deployed technologies, including cloud, mobile, online course delivery, virtualisation and more. Comply with data protection and student protection regulations.
.thumb.jpg.0fdd912a7c0b26f28e4b87f76a463629.jpg){kind=avatar}
