Search the Community

Hi, new setup for work we're trying to do, however have had some problems. We've installed a new 2012 R2 setup with Remote Desktop and RemoteApp, Web Access, Gateway etc on different servers. Works great internally and we can publish Apps and access Desktops. Our internal domain is along the lines of "ad.contoso.com". Our office has a dynamic IP and we are using the .myfirewall.co domain provided by Sophos as a DDNS host which refreshes every 4 minutes. We want to publish RD Gateway for users over port 433, we're not worried about certificate errors as we can fix this by deploying the certificate via Group Policy. However, we are confused regarding the setup and how to get it all working over the internet. We want all RemoteApps/Desktops to be accessible over SSL over the internet, however forwarding port 433 to the gateway does nothing, as it's not on the same server as the web role. We are confused at the setup also, as our AD FQDN is internal only and doesn't resolve in the public DNS records for obvious reasons?! What do I have to do to get this working? You can be general with instructions, or specific to Sophos XG if you know! First time we're doing a setup like this, however want this to work. Any ideas you've got, let me know! Thanks, Whistler.

We have a strange problem with gateway settings disappearing from machine. * Checking the network adapter settings in Windows show the gateway correctly * Running ipconfig shows no gateway listed. * Setting the adapter to DHCP then back again resolves it * A reboot causes it to re-occur * We are running on a server 2003 domain * Our gateway device is a school guardian We have run the following registry hack to try and resolve it, however so far unsuccesfully. Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters] "ForwardBroadcasts"=dword:00000000 "IPEnableRouter"=dword:00000000 "DeadGWDetectDefault"=dword:00000000 "UseDomainNameDevolution"=dword:00000001 "EnableICMPRedirect"=dword:00000001 "DontAddDefaultGatewayDefault"=dword:00000000 "EnableSecurityFilters"=dword:00000000 "EnableDeadGWDetect"=dword:00000000 PC's appear to be running generally slowly when the gateway setting is missing. Has anyone come across this, and if so how did you resolve it. Cheers Iain

We have just setup a RDP gateway and Remote session server to access school for pupils and staff at home. How do I customise the Gateway homepage with school badge and instructions

Hi there, Before I put this up for general sale elsewhere I thought I would see if anyone could make use of this here. We've just replaced our former Smoothwall UTM-1000 appliances with newer S8 units. Here are its specs: CPU: Intel Core 2 Quad Q9400 2.66GHz Chipset: Intel G41/ICH70 BUS: 1066MHz RAM: 4.00GB (as 2x 2.00GB) LAN: Intel Pro/1000 Gigabit Ethernet / RJ45 Other: 2x USB 2 on front panel for system upgrades 1x RS232 via RJ45 for optional serial console 1x SVGA at rear for optional connection to monitor HDD: 2x 500GB 3.5" Display: Multifunction front panel LCD with 4x push buttons Approvals: FCC, CE, RoHS Here is a link to it's PDF guide: http://www.smoothwall.com/media/114615/UTM-108-308-1000-getting-started.pdf We are hoping to receive £150 for this. It is roughly £25 to ship with confirmation. We are in the B17 0HR area of Birmingham if you wish to pick up the unit instead.

Hi, our school has run-out of IP address ( 123.123.123.x/24 ) so the LA gave us a new scope (456.456.456.x/24). I added this new scope to our Win2008R2 DHCP server but the new scope didn't issue any IPs, I went back to the LA and got this reply:- The switch ports need to be configured into the correct vlan on the switches. I'll need the switch port numbers and the addresses/name of the switches they are connected to and I could do it for you. I don't remember this being necessary in the past (at other schools), so I asked another engineer at the LA and he said both scopes (new & old) needed to be in a super scope, I configured the super-scope and both scopes issued IPs, however the computers receiving IPs from the new scope were unable to see the server shares and connect to the internet. Does anyone know where I'm going wrong? Is the first LA engineer correct and he needs switch info? Thanks TraineeGeek

Hi, I'm sure I'm missing info from my problem - please ask if I am. We have a scope, 10.212.x.x, giving out addresses 10.212.1.x - 10.212.4.x We can ping the gateway (10.212.1.1) from 10.212.1.x, 10.212.3.x, and 10.212.4.x clients, but NOT 10.212.2.x. Here's the vlan as defined on our Cisco core: interface Vlan212 description Guest Vlan ip address 10.212.1.1 255.255.0.0 ip helper-address 10.1.200.60 ip helper-address 10.1.200.66 no ip redirects no ip unreachables ip flow ingress end Where else can I look for issues? Note, if I put in an exclusion into our DHCP server that prevents 10.212.2.x addresses from being handed out, clients the previously received one no longer get any IP address. Thanks!

Wondering if anybody has made the jump to UniFi UXG Pro Gateways at all? We are about to upgrade our internet connections across our 12 schools and for some are looking at 5Gbps connections as the costs are not much more now for this speed. However, the Smoothwall appliances are not capable of this amount of through-put and we've not been entirely happy with Smoothwall for a while now and are therefore looking at moving away from them. Plan would be to move to a cloud-based filtering product (with support for 1:1 devices which Smoothwall doesn't do, apart from their rubbish cloud offering) and we are currently involved in setting up trials with Securly, LightSpeed and potentially Senso. All our routing is pretty much done on the core Aruba 5400 switches so would only route Internet traffic through the Gateway. Have contacted both Meraki and Aruba to look at their Gateway offerings with SD-WAN capability (we site-site VPN all 12 schools) but the costs for the Meraki and Aruba gateways are ridiculous! No educational discount per say, just potentially a bonus free year for each year purchased. Looking into it we'd potentially need at least a Meraki MX450 with quoted pricing so far of around 15k for the appliance and £25k for a 1yr license! Now comes the UniFi UXG Pro... spec wise is pretty much on par with the MX450 and in some areas better. £500 and no yearly fee...! Yes I know support isn't the greatest and warranty is only for two years but I could buy many of these over the years if they go wrong and still not come anywhere near the price of the Meraki. We are looking at getting a technical support package through 4Gon for our UniFi wireless anyway to keep as banked time for when needed. Watched many reviews online and whilst the GUI isn't always the best, the general reviews of the firewall performance and security is on par with pfSense. Just wondering if anyone has gone for it and what the performance is like, reliability etc?

Hi All, Really new to this stuff so please bear with me. We have just taken delivery of four Dell tablets, supplied by Live Register, that are to be used as mobile tills for catering. They have come pre-installed with the necessary software, all I need to do is connect them to the relevant VLAN so they can talk to the catering server and then we can get LR to do the final config. They need to have static IP addresses in the same range and settings as our static tills - the only difference is the WiFi - we've never connected the cashless catering stuff wirelessly. I've done the following: On our WiFi controller (A Meru MC4200) 1) Configured a VLAN with the same number as the catering VLAN on our switches and the same IP settings as far as Default Gateway, IP Address and Subnet Mask are concerned. 2) Configured a security profile with no requirements for passwords etc so I can test stuff easily 3) Set up the SSID to look at the configured VLAN of choice. If I set the wifi adapter of one of the tills to one of the chosen static addresses the device seems to connect (there is no internet connection but this is the case with the other static tills as the system only connects over the internet via the server). Problem is the mobile till will not ping anything, gateway, server other static tills once connected. It can ping itself. Nothing can ping out to the till either. As the network settings are identical to the static tills aside from the fact the static tills are cabled and the mobile tills are not I'm guessing there is something in the WiFi config that I have missed. It's probably pretty basic. Any suggestions?

Hi guys, Are there any school who are currently using sims learning gateway (self hosted) on RM network? 1. Have got the sharepoint and ms sql database on the same box or on seperate boxes? 2. How well is user account consolidation working for you? 3. Does it in any way interfere with RM dc in any way? Cheers, CompSezNo

Hi all. Back to basics network advice required here. Like most schools here in NZ we have seen a huge uptake in internet usage over the last year. We currently have a single 2mb Telecom SchoolZone connection for our internet access and web filtering, and over the last few months have experienced some pretty severe bottlenecks. Senior management are concerned that when the internet connection is saturated because of use in the classroom, it is affecting the 'business' side of the school, and they have asked me for an interim solution until we move to a fibre connection (hopefully at some point towards the end of next year...) My thought is to purchase a standard business DSL package (which will obviously come with a router), stick that on the network, and use DHCP Reservations and the 'Router' option to point the office/administration PCs to that router for internet. I'm confused about DNS however. My DC, which is issuing DHCP addresses to my workstations has it's gateway set to our SchoolZOne router and all existing internet traffic goes through this. How do I configure DNS on the DC and workstations to still use the DC for it's primary DNS, then forward to the new router for unresolved queries. Does that make sense?

Hi All Hoping for some wisdom here or anyone with previous experience of this issue please! Basically, we run a remote server using RD gateway and up until recently it was fine, all of a sudden it's not accessible from any domain joined PC but still works perfectly fine from any non domain joined PC We've tried everything we can think of but it's driving me nuts.. Any ideas? The only thing we've changed recently is the website provider, and it's SSL certificate but can't see how that would be related.. The server is on a subdomain but has a separate certificate Many thanks in advance