Search the Community

Hi All, I have having some issues loading web pages, either receiving time out or security errors such as the this from random sites such as Collins connect. I did initially have the same sort of fault with the YPO website but seem to be able to mitigate the error i was receiving by adding the reg key as detailed here (http://forums.whirlpool.net.au/archive/2553967) The issues are mainly present on the internal networks and using IE, less so on my guest network (DHCP from router direct to filter) and using chrome, however still present to some extent. Has anybody else had these of similar issues? DC 2012R2 Workstation Win 7 64 Hosted Schools Broadband Lightspeed Web Filter Mikrotik Router

We currently have LightSpeed MDM and we're looking to replace it. We're looking to replace it as it seems slow, clunky, difficult to navigate and just generally rubbish. Has anyone else had a similar experience with LightSpeed?

Hi, I have enrolled our Surface win8.1 RTs to MDM and are trying to force a specific SSID for them to connect to. Although they don't seem to want to do anything.. Any help please

Hi, Hopefully you'll bear with me on this one, I'm looking for advice and / or how you are currently deploying your iPads. We currently have two differing uses of iPads; bays and student one-to-one project. I think the easiest thing to do would be to explain what we're currently doing, then assess what and how we want to improve. Currently, we use the Lightspeed MDM solution. We have VPP codes but now want to move over to the managed distribution so we retain the ownership of the app. At the moment we are using one Apple ID to configure all iPads (though we do buy enough codes to cover the amount of iPads). We have been using Apple Configurator to supervise, install the MDM profile and then Configurator to deploy the Apps (quicker than OTA). The main problem we come up against, more so on the one-to-one iPads where the students have their own Apple ID, is that any updates to the 'base' setup we do, they require the school Apple ID to update those Apps. This isn't ideal. I find the whole process of configuring iPads troublesome and too time consuming, they can't make it too easy like applying Apps to the device rather than an Apple ID, can they? It really isn't fit for purpose. Anyway, I'm hoping someone can point me in the direction of applying Apps to devices as a base build, handing them over to students and then them not being prompted for the school Apple ID. If we're doing it completely wrong, that's fine, we'd just like a few pointers on how the rest of you are bypassing these little niggles.

Net-Ctrl is an established iboss reseller and over the last few months we have been replacing a lot of competitive solutions. Our current customers have found iboss to be easier to use than the market leaders (you know who they are!) that the solution creates less false positives, and is much faster on high speed (100Mbps +) networks. If you’re currently not happy with your WebFilter we would like to you to a one-on-one webinar with an iboss specialist to get a better understanding of the solution. They will go through the iboss offering, provide a tour around the dashboard, discuss how it compares to other products on the market and answer any questions. This is a great way to understand the solution, and how it differ to others available on the market. If this is of interest, please PM me with some suitable times and dates and we will aim to accommodate your schedule. In addition, we're currently offering some great discounts into education, for some ideas on pricing please get in touch.

Hi all, Has anybody recently migrated from an MDM, to a new one? I am looking at ditching Lightspeed LSMDM, and moving elsewhere, probably Jamf. Mainly due to the price per device per year. I've also thought Lightspeed's customer support, and lack of updates since buying in to them in 2016 has been really poor! (I did hear from our reseller that Lightspeed are mainly focusing on their Security filtering and less bothered about keeping LSMDM cutting edge). Unfortunately our Lightspeed licence has ran out over half term, so I have no access to the console. However, I imagine all iPads will need manually resetting one by one regardless? We're a 2 form entry Primary, over 400 pupils, currently have between 250 and 300 iPads (thanks DfE scheme!). Looking for pointers in what direction to go with this, if anyone has been in a similar position, any advice would be greatly appreciated! A

We are currently trialling Lightspeed's MDM for managing iPads and their web filtering software via the Rocket box and it looks very promising. Our current firewall is Microsoft TMG and we are having problems getting traffic out from the rocket appliance to Lightspeed's servers when the appliance is in proxy mode. Does anyone have experience of running Lightspeed from behind a TMG firewall and could give advice on server publishing rules/NAT settings etc on TMG to allow traffic in both directions? I can provide further details if anyone has experience and may be able to help. Many thanks.

Hello Everyone, We currently use Lightspeed rocket as our filter for our network. The decision was to allow staff to use twitter (For some unknown reason). I have allowed twitter on our filter for all staff however it is not showing correctly and I have no idea why. (Please see above picture) Any Help would be apprenticed.

Something I've noticed with regards to the Lightspeed web filter is that iOS 8+ devices cannot update or download apps from the app store. I've tried unblocking the following in URL Patterns: store.apple.com itunes.apple.com apple.com Any ideas or additional urls I may need to unblock to be able to download?

Hi All, I'm looking for some help with a strange issue I currently have - my network setup as follows: Client>>>>HP Switch>>>>Lightspeed>>>>Router Vlan 1 - Default Vlan (Client Default gateway address is 10.18.168.1) Vlan 40 - Guest BYOD (Client Default gateway addess is 10.19.72.2) >>>10.19.72.2 is the Vlan 40 IP address. Vlan 60 - Staff BYOD (Client Default gateway address is 10.19.88.2) >>>10.19.88.2 is the vlan 60 IP address. I have a static route set on the main switch for the default gateway 10.18.168.1 - so everything that cant find its way out goes to 0.0.0.0/0 then the static route forwards it to 10.18.168.1 (the router) The problem is any users on Vlan 40 or 60 do not seem to be getting filtered by the lightspeed, so users can access any website. I have contacted lightspeed but they seem to think the tagged traffic is not hitting the lightspeed? Does anyone have any ideas, I have tagged the port 4/12 with vlan 40 that goes out the lightspeed but it doesn't make any difference (the lightspeed is working as a bridge)? I'm just trying to get vlan 40 to work so far. Here is the running config of the switch and router below: HP Switch>>>>> Running configuration: ; hpStack_WB Configuration Editor; Created on release #WB.15.11.0007 ; Ver #03:12.15.0d:09 stacking member 1 type "J9728A" mac-address 6cc217-0b6c00 member 2 type "J9728A" mac-address 1458d0-9b22c0 member 3 type "J9728A" mac-address 6cc217-0b9cc0 member 4 type "J9728A" mac-address 1458d0-9be100 exit hostname "HP-Stack-2920|ITWorkshop|CabA" trunk 2/A2 trk1 trunk trunk 2/A1 trk2 trunk banner motd timesync sntp sntp unicast sntp server priority 1 10.18.168.13 sntp server priority 2 86.19.119.81 no telnet-server web-management ssl ip access-list extended "vlan40filter" exit ip access-list extended "vlan60filter" exit ip default-gateway 10.18.168.1 ip dns server-address priority 1 10.18.168.13 ip route 0.0.0.0 0.0.0.0 vlan 1 ip routing interface 2/19 name "Internet Out - LightSpeed" speed-duplex 100-full exit snmp-server community "public" unrestricted oobm ip address dhcp-bootp member 1 ip address dhcp-bootp exit member 2 ip address dhcp-bootp exit member 3 ip address dhcp-bootp exit member 4 ip address dhcp-bootp exit exit vlan 1 name "DEFAULT_VLAN" no untagged 2/21,2/23-2/24 untagged 1/1-1/8,1/10-1/48,1/A1-1/A2,1/B1-1/B2,2/1-2/20,2/22,2/25-2/48,2/B1-2/B2,3/1-3/4 8,3/A1-3/A2,3/B1-3/B2,4/1-4/48,4/A1-4/A2,4/B1-4/B2,Trk1-Trk2 tagged 1/9 ip address 10.18.171.2 255.255.252.0 exit vlan 40 name "Student + Guest BYOD" untagged 2/21,2/23-2/24 tagged 1/43,2/19,4/9,4/11-4/13,4/15,4/19,Trk1-Trk2 ip address 10.19.72.2 255.255.248.0 ip helper-address 10.18.168.13 ip helper-address 10.18.168.14 exit vlan 60 name "Staff BYOD" tagged 1/43,4/9,4/11,4/13,4/15,4/19,Trk1-Trk2 ip access-group "vlan60filter" vlan ip address 10.19.88.2 255.255.252.0 ip helper-address 10.18.168.13 ip helper-address 10.18.168.14 exit spanning-tree Trk1 priority 4 spanning-tree Trk2 priority 4 no autorun no dhcp config-file-update no dhcp image-file-update password manager HP Router >>>>>>>>>>>> interface GigabitEthernet0/1 description LAN bandwidth 1000000 no ip address ip verify unicast reverse-path duplex full speed 100 ! interface GigabitEthernet0/1.1 bandwidth 1000000 encapsulation dot1Q 1 native ip address 10.18.171.254 255.255.252.0 ip access-group LAN-to-LAN in ! interface GigabitEthernet0/1.40 bandwidth 1000000 encapsulation dot1Q 40 ip address 10.19.79.254 255.255.248.0 ip access-group LAN-to-LAN in ! interface GigabitEthernet0/1.60 encapsulation dot1Q 60 ip address 10.19.91.254 255.255.252.0 I'm not sure where I'm going wrong here? Could someone post me there HP switch & router config if you have the same setup please? Any help would be great. Thanks Al

We are testing the use of the Global HTTP proxy option for devices going home with students. iPads are running 9.1. We are using Lightspeed, and the proxy policy and certificate are pushed by Meraki (legacy). Now that were are on 9, almost everything is working properly. However, I cannot figure out how to log out of the proxy and/or clear the cached credentials. As part of the check-in process when they return, I want to ensure that the students are logged out and ready for the next student. I believe the Lightspeed is set to an 8 hour timeout which is being enforced correctly. I tried using http://lsaccess.me/logout - that says the log out was successful, but blocked pages still show the same user and I'm never prompted for credentials. Does anyone have any ideas? Is there another lsaccess.me address I should be using?

Hello All, I am really scratching my head about something and wondered if anyone has come across the same. I have just implemented Lightspeed MDM to manage our 60 iPad's, one of the features I was sold on was the "WiFi Whitelisting" option to stop Students joining other WiFi networks. However, after turning this feature on, yes it does work for a second and then student's can't join other networks, only the one specified in the profile, but the problem is, the WiFi drops out for about 4 seconds, and then reconnects. It's almost like the iPad looses all of its restrictions and policies during them 4 seconds, and then re downloads them. This issue just keeps happening in a loop. I have used Apple Configurator 2 to prepare the iPad's for the MDM, the WiFi profile is installed via Apple Configurator 2 and Lightspeed. Any help is much appreciated, not really getting very far with Lightspeed's support! Many Thanks James

Hi, We use Lightspeed here and the pupils are restricted in what they can do and access by time of day and age. We have found that they are bypassing the system using “HotSpot Shield”. They have the app installed on their own personal device and when on the school BYOD wireless they then use this to bypass the security and filtering. We have tested on a device logged in as a pupil and Hotspot Shield ignores and bypasses all filtering. We have implemented all the settings recommended by Lightspeed, but still no joy in stopping this. Have you experienced problems with pupils using Hotspot shield on their personal devices to bypass the school filtering? How have to stopped it? Pupils are on the school internet connection via the BYOD wireless network but the filtering is applied to this network. Thanks.

This position is with a growing software company specialising in network security for the education sector, supporting customers in North America as well as Europe. This is a second-line technical support position dealing with other IT professionals by phone, email and remote access onto live systems. The position is part of a hard-working, informal team of technical and commercial people who enjoy working with an innovative product in a fast moving sector of the IT industry. Responsibilities for this position include accepting support issues by phone or email, logging issues into support tracking system, assessing support priorities, investigating resolutions, troubleshooting issues with customer, liaising with R&D team, resolving issues in timely fashion, and documenting issues and resolutions. As this is a small, dynamic team other responsibilities may be assigned as needed. Skills necessary for this position include a good understanding of WAN/LAN principles, Internet Protocols, IP addressing, routing, and other related networking knowledge. Also necessary is a good understanding of network security principles including content filters, anti-spam, proxies and other related technologies. Basic understanding is needed of databases, web servers and email. Other skills welcomed include knowledge of Citrix, Netware, FreeBSD or Mac OS X. Experience required for this position is a minimum two years helping support at least one network with at least 100 PCs. Experience is necessary in installing and configuring MS Windows servers and desktops, as well as supporting them in a live environment. Experience in troubleshooting network related issues is preferred. Previous experience in educational or public sector environments would also be advantageous. Flexible working hours may include early morning or evening work and may occasionally require on-call support at weekends. As it is a small team flexible working is managed informally. This is a great opportunity for an IT professional to work at the leading edge of one of the most important aspects of the industry. This role offers the chance to be part of a growing team and deal with a wide range of networks and security issues. Your knowledge and experience will grow in a way very few other roles can offer. Please direct CV’s and covering letters to: [email protected] with Ref: lse0031V

Hi all, I currently have wifi guest access set up using WPA2-PSK, password, then Ruckus guestpass, and then lightspeed Web Auth via AD. I have Vlans, and transparent proxy in place and it generally works OK for guest devices Few annoyances: It's annoying I can't tell lightspeed to forget all web logins at lesson ends, as even with the 55 min auth its is possible to have the wrong student in logs if the machine was turned on half way through a lesson. In an ideal world I would like not to need the multiple systems of authentication. I'm aware Ruckus can do AD and RADIUS auth, the reason I used guestpass, is I like it auto-expiring access after a set amount of time, and it limits each student to one device. I don't see how I would achieve this otherwise but.... If I used RADIUS or AD auth on the ruckus guest SSID, is there a way for Ruckus to pass the auth info along to the lightspeed rocket? The reason for this is that I have had to set the re-auth for students to 55mins (lesson duration) and they find this annoying throughout the day. We collect their MAC address but I can't see how to use this as a method of auth on light speed. Has anyone managed to get Ruckus AD/Radius auth to be passed on to lightspeed? P.S Has anyone found a way to save the Ruckus logs for what device connects where? Would be useful for when inclusion lose a laptop to know what AP it used last.

Hey all, Just had a demo from Lightspeed of there Total Network Control system, and aprt from being client-server based (Yuck), it looked okay. Anyone got any experience with it?

Hi guys I have been having a bit of a nightmare... We've had internet speed and connectivity drops for some time. My initial thought was an issue with the web filter (Lightspeed), as since we upgraded to 3.0 in about September 17 we had difficulties sometimes logging in etc. Anyway several updates later etc, I was assured that it wasn't an issue with our rocket. We then started looking at all kinds of other things. Our DNS servers (which were only virtualised last summer) I thought could have been an issue, then we were looking at our ISP as our bandwidth was maxxing out sometimes, then back to the filter as they'd released a new user agent (the LMA) which I wasn't aware of, a dodgy internal server was also looked at. So at 3:30 Friday afternoon, which was an INSET Day so most staff left by that point, our internet fully goes down. Up until that it'd only been drops. We unplug the entire network and patch things back in looking for a loop or something. Turns out that when we remove the web filter all is absolutely perfect, speeds faster than ages, non drops or anything. By this point I'd accepted that our out of warranty six year old filter had had it. I speak to their support guys in America, and run a workaround plan by them. Workaround is to create a Virtual Rocket, backup the database and config from the physical and restore that to the virtual and then change the IP of the virtual to that of the physical, unplug the physical and hope that the clients user agent talks to the virtual as if it were physical. Their support guys said that's a great idea and I should go for it. So I have spent the weekend creating a virtual rocket, and doing all that (given that the physical was faulting that took longer than I'd hoped). But it seems that using a virtual as a filter on its own without a physical does not work. Their support guy who's oncall today on his own isn't sure why. My staff and students return on Tuesday, with tomorrow being bank holiday and me actually being off until Thursday. My workaround this evening is remove our current DNS forwarders and use OpenDNS. This seems to be working fine, but I just read on another post that the free version is limited to 50 users. Without really having the opportunity to test 50 users prior to Tuesday morning I wondered if anyone has any info on this limitation? Can't see anything about it on their website. Any suggestions would be welcome at this time. No V-Lans here and staff IPs are mixed in with students.... Cheers for any suggestions in advance...

Good Morning all, Hoping someone could help, we are currently experiencing weird issues accessing YouTube. So using an AD account filtered by LightSpeed, the user is correctly identified as a member of staff and has no problems accessing websites - goes to YouTube.com directly or using a link to video from Google/Bing and nothing, the page just sits there with the loading spinner on the tab spinning for as long as you leave it, try same test in Chrome I receive an error "SSL Connection Error". However some staff can access YouTube just fine. All the accounts have the same group policy settings for IE. I then used the Reset Internet Explorer Settings from the settings menu, I can then access YouTube. This to me says its a problems with the local machines, however taking before and after screenshots of all the settings there is no changes between originally and after the reset! So I created some new AD users, logged them in, couple could access YouTube, couple couldn't - all these accounts used the same group policy settings. To make the situation weirder, I set accounts of users who are having problems, in LightSpeed rule sets with no filtering, and they could access YouTube - switch it back to Staff filtering, and they couldn't! Repeated this a few times and each time it would stop access/allow access! Anyone any idea what the problem is?