Search the Community
Showing results for tags 'proxy'.
-
In order to integrate with the admissions platform we're using, we'd like to use a Cloudflare tunnel and web application firewall to make the API endpoint for our MIS system available for their system to connect to over the internet, without needing to expose our MIS system directly to the public internet. However looking at Cloudflare's documentation it seems like you have to switch your whole domain's DNS over to Cloudflare as part of the Cloudflare onboarding process? We don't want to do that as we are an .ac.uk domain holder and as such we use Janet DNS for our public DNS. Is it still possible for us to use Cloudflare's tunnels, or do we need to look for a different solution? Entra Application Proxy was something else we looked at but this appears to require an Entra sign-in, which is no good for an API that is only going to be used by automated systems. -
Hi Everyone, This is a feature that has been in Public Preview for some time now and in December we finally went in to General Availability to Azure AD Premium Customers, (soon we shall make it available to Azure AD Basic also). Azure AD Application Proxy is a service that allows you to publish internal applications that are today possibly only accessible internally without you having to open any ports on your firewall inbound, and also allows you to use Azure AD as a Pre-Authentication Method so that you can ensure the user is Authenticated AND has been granted access to the application before the request is allowed to pass through the proxy connector and for the application to be then rendered in the browser to the user. This is an extremely popular feature, with the likes of TMG, ISA etc. going end of life customers needed a way to be able to continue to publish applications externally in a secure way and so at the same time we achieved this and also prevented you from having to open up any ports on the firewall inbound I am sure some of you on here with have plenty of questions so please go ahead and ask them and I will do my best to get back to you as soon as possible. I posted an article up here for you to obtain further information: Azure AD Application Proxy – Publish Internal Applications Externally Secure, No Firewall Req. | James Evans - EduTech's Blog For any of you whom don't have Azure AD Premium or are yet to purchase this via your Enterprise Agreement we recently enabled this for Direct Purchase via the Office 365 Administration Portal. http://www.edutech.me.uk/active-directory/azure-ad-premium-now-available-via-direct-purchase/ Enjoy! James. -
Hello, all.. This is probably something REALLY simple, and my coffee deficiency is showing. Up until now, we've used GPO to remove the option to allow folk to sign into Chrome. Now, however - as is the way with things - we need to look at enabling it to allow Staff to use an extension which is registered to our central email domain account. It only works if you're logged into Chrome with a valid email domain. Anyhoo.. Onto the actual problem As a test, I've removed the GPO that prohibits the sign in. I login into Chrome with my relevant credentials (it takes me to the main login page). I select "Link". And then I can't browse the WWW. If I look at Chrome settings, proxy, it's still all good - using the System proxy settings. As soon as I go into Settings and logout, WWW works again. We're behind authenticated proxy (WebSense/ForcePoint). Our proxy Infrastructure person isn't in this week (yay), so I'm kind of guessing here that the proxy is either being fed bobbins details, or that it isn't actually using the System proxy settings... Does Chrome not send the user credentials of the logged on user when using a linked/sync'd account? Cheers, Gerard -
We're having issues with SurfProtect in that despite users successfully authenticating with SurfProtect (Logs show the username alongside URLs) users are not being assigned the correct access profile. This seems to effect most but not all users, I have two users, both members of the same group, one user gets the correct profile and the other doesn't. The profile has the Groups added but for some reason it just doesn't work. We're unable to contact Exa directly as we aren't a direct customer and have to go via our reseller and their support is useless Has anyone else seen this before? Any help is greatly appreciated
-
Codecademy Learn SQL behind Smoothwall
J_Worth posted a topic in Internet Related/Filtering/Firewall
Hello everyone, Trying to get Codecademy Learn SQL but it is refusing to work. Looking into it in more depth it would appear that our Smoothwall proxy is blocking WebSockets (both WS and WSS). How can I allow WebSockets through the Proxy? If I set my work computer to bypass the Guardian/Proxy then it functions as expected. Many thanks in advance. Kind regards, -
Hello, So, I've posted about this before however I'm still having problems with it. Basically, I have MDT set up through WDS for imaging machines. Practically every machine in the network will image with no issues aside from these 'ERGO AS1' machines This is what appears on screen; Intel UNDI, PXE-2.1 (build 082) Copyright (C) 1997-200 Intel Corporation For Realtek RTL8111B/8111C Gigabit Ethernet Controller v2.10 (071105( CLIENT MAC ADDR: 00 90 F5 8C 21 E6 GUID: FFFFFFFF-0C0C-0000-0000-000000000000 PXE-E51: No DHCP or proxyDHCP offers were received. PXE-M0F: Exiting PXE ROM. Why is this? Is there an easy fix? I have to image an entire suite like this and they all have the same issue, if I can't get it to work, I'll have to use the Windows 7 disc! Please help!
-
Hello, I currently have any traffic that goes to bing.com redirect to google.co.uk (we block bing as you can access inappropriate content) Below is an example of the squid.conf file acl badsites dstdomain bing.com deny_info http://google.co.uk admin_network http_reply_access deny badsites admin_network http_access deny all This works fine but I would like it if anyone were to search for something using bing it will redirect the search query to google.co.uk bing.com/search?q=SEARCHVALUEHERE google.co.uk/search?q=SEARCHVALUEHERE It looks like i just need to replace bing.com with google.co.uk. Is this possible? Thank you, William -
We have a strange problem with gateway settings disappearing from machine. * Checking the network adapter settings in Windows show the gateway correctly * Running ipconfig shows no gateway listed. * Setting the adapter to DHCP then back again resolves it * A reboot causes it to re-occur * We are running on a server 2003 domain * Our gateway device is a school guardian We have run the following registry hack to try and resolve it, however so far unsuccesfully. Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters] "ForwardBroadcasts"=dword:00000000 "IPEnableRouter"=dword:00000000 "DeadGWDetectDefault"=dword:00000000 "UseDomainNameDevolution"=dword:00000001 "EnableICMPRedirect"=dword:00000001 "DontAddDefaultGatewayDefault"=dword:00000000 "EnableSecurityFilters"=dword:00000000 "EnableDeadGWDetect"=dword:00000000 PC's appear to be running generally slowly when the gateway setting is missing. Has anyone come across this, and if so how did you resolve it. Cheers Iain
-
Hi Wasn't sure which area to post this one in as it's Windows but also CC3 and firewall related. Let me know if I need to move it :-) I have a teacher using Moodle but on his laptop he gets problems where the RMSmartCache proxy stops him navigating around at seemlingly random points. E.g. he'll log in, be using it for 10 mins and then when tries to move to another page within Moodle, the proxy/firewall error reports he cannot get to the page. This is not the RM blocked warning, just the smartcache box reporting no access. The Laptop is set up on XP using CC3 and on IE7. Any ideas? I'm stumped at the moment. Cheers Nozza
-
Hi All, This might be a silly question but I will ask anyway and give the reason. Last week I had about 20 users all trying to access a https site using different usernames etc (it was for Thrive training). They said that if one person tried to add a record to the system logged on as 'user1' while someone else in the suite (logged on as 'user2') tried to access another page they were not on then they would then be presented with the page as if they were 'User1'..... I am sure that still does not make sense after reading it 5 times so I will right it in steps Both users are using IE10 and logged onto the Thrive site as... 1.PC1 is logged on as 'User1' 2.PC2 is logged on as 'User2' 3.User1 adds a record to Thrive and saves 4.User2 refreshes Thrive page on PC2 and it now says they are logged in as 'User1' (they should be 'User2') eMy question is... Does SWGFL proxy cache cookies or something that would cause this issue to happen? I ask because this is a idea put forward by the programmer's of the software, they think I need to disable the cache on the proxy. If that is what is needed then why didn't Merlin and all other content management systems fall foul of this issue? I hope someone can make sense of this and give an answer Thanks for your time and effort in advance
-
Hope this is the right section, I am trying to set up a transparent squid proxy but i think i am over thinking the problem and not getting anywhere. Here is the setup. So vlan 1 will be the main one that connects to the internet and lets say anything on this is tagged vlan id 1 and has a ip of 192.168.1.0 and netmask 255.255.255.0 this can be computer and printer and anything else. So my other vlan will be say vlan 2 and anything connected to this will be on the following 192.168.2.0 and netmask 255.255.255.0, i want this trafic to be isolated from vlan 1 but needs only internet access so i want transparent proxy working on this vlan with no config needed client side. Do i set my 12.04 server to act as a bridge so that traffic can travel across to the gateway (router) for internet after going through my proxy? Hopefully all this makes sense.
-
Hi all, We have recently given our science department 20 laptops and a trolley. All the students do is play games and stream video. They're killing the access points so we need to prevent internet access on these machines. We are running the old ISA 2000 for our proxy which I'm not too farmiliar with. Can I add a Computer group rather than a user group to our 'Banned Internet' access rule? How would I go about this? Is there an alternative way to stop them from accessing the proxy. I just need a way that I can 'break' their IE either through the proxy/group policy. I'll do some googling in the mean time while i eagerly await a response Thanks Chris
-
I work in a High School and a number of are teachers use laptops that they log on locally to, this allows them to use them at home, at my pervious job the teachers could come into the school and not have to uncheck the Auto Detect Proxy tab and re enter it every time they want to use the internet. Im sure this has something to so with the WPAD file that sits on the server! Im pretty sure I can find this however I don't want to touch it until I have a better understanding of what each section does! Can anyone help me with this issue?
-
Ok, Where to start! In are school teachers have a lot of laptops that they use locally therefore not picking up the proxy settings with out putting them in. What I want to do is to still allow people to bring in there laptops and just have them have the Auto Detect internet settings on. I hope this is making sense! I found this article: Automatic Discovery for Firewall and Web Proxy Clients This seems to explain what I want to do but im totally confused! are proxy is: proxy.embc.uk.com and the port is 80 plus theirs the usual proxy bypass exceptions. How on earth do I set this up! I very briefly saw it in my old school something to do with a WPAD file. Please Help any info anyone needs I will be happy to help out! Thanks
-
I am trying to set up a Smoothwall Express 3.0 proxy to allow my school network to connect to the internet supplied by our county council. The new setup is to replace an old Cobalt Qube that has failed after 9 years continuous service (PSU problem) The old proxy used Squid and with the exception of occasional problems caused by log files accumulating faster than the cron job to rotate them was very reliable. The academic network (270+ computers) is a Windows 2003 domain. Network mask 255.255.0.0. we use the 10.0.xxx.xxx IP range. Almost all the computers gain their addresses via DHCP. A group policy sets the proxy settings used by IE to connect via 10.0.0.1 using port 3128. The county supply us with a single outward facing static IP address 172.xxx.xxx.xxx, and the addresses of primary and secondary DNS servers. We have to use port 3128 to connect to their smoothwall proxy server c***.xxx.sch.uk. Physically the smoothwall server lies between the school network and the county WAN connected via a pair of NICs If as an administrator I manually enter c***.xxx.sch.uk. and port 3128 into the IE LAN settings I can connect to the internet. This must be going through the smoothwall proxy as there is no other physical path it can take. But no matter what settings I try in the smoothwall configuration I cannot get machines to connect via 10.0.0.1:3128. I would welcome any suggestions as how to proceed. Bob
-
We have started to deploy Windows 7 using Microsoft Deployment Toolkit (MDT) and Deployment Services (we have always used Ghost in the past). Unfortunately we have found (after deploying 60 machines!) that the Internet does not work on a MDT deployed workstation on Internet Explorer 8 or 9 (DVD installed and Ghosted workstations work fine?!). We are however able to connect to the Internet using Firefox and Chrome, download Windows updates and device drives from the Internet, ping the county councils proxy and connect to the Netsweeper admin console from the affected machines using IE. Internet proxy settings are set by Group Policy and work fine for XP and Windows 7 workstations that we have installed from DVD or imaged using Ghost. We have tried deploying a workstation to a workgroup rather the domain (thus no GPOs applied) and after manually entering the proxy information IE still doesn’t work (but Firefox etc. do..) Microsoft are now involved and although we still have no resolution we have discovered using Microsoft Network Monitor 3.4 that it appears to be an issue related to NTLM authentication as when the proxy asks the second time for NTLM authentication the workstation fails to send another request and simply displays the ‘Internet Explorer cannot display the webpage’ page. It appears that IE only sends the domain and workstation name to the proxy and then fails to respond when requested for the username. On a working workstation IE will send an additional request with domain, workstation name and username and from there the proxy will authenticate and send the page requested. The question is, has anyone else experienced this issue, either related to MDT or separately? If the answer is yes have you managed to resolve it and what was the resolution? Any help with this is much appreciated as our Windows 7 deployment is now very much at risk. Many thanks Nath
-
Hi Everyone, Basically I'm trying to connect an XBox 360 to the internet from behind a proxy server. I have to get it connected to XBox Live to run an indie game called Kodu in school for a programming lesson. The problem is that you cannot setup a proxy server on the XBox. I have found a solution but I want something a bit better. At the moment I have got a 3g dongle that connects to the internet. Basically to use this I setup a wireless ad hoc network which my XBox connects to and then I can share the 3g connection with the wireless network. The problem with this is it is my 3g dongle and I don't really want to give it to the school to use. What I'm looking for is this. I want some software that I can use to manage a wifi ad hoc network (essentially creating my own proxy server). However this software must allow me to channel the internet connection to that network not directly from an ethernet connection but from the proxy server I am already behind in school. Does anyone know of anything that might/will do this?
-
Hi Guys and Gals, Hope some can Help Firstly we are Running a 3com WX2200 Wireless Switch with 33 Access Points and all that works well. We are about to deploy the Web Portal Option to allow certain Pupils to use there own laptops on the Network for Internet Access Only. We have got most of the problems sorted but the main one we are having at moment is turning on the school web proxy. We belive there is a way of doing it in a webpage Ie when the Web portal login page loads(this does not require the proxy set) and the user logs in it then would load another webpage that sets the correct proxy settings and then allows them to continue using the internet. Then when when thay log off it goes to another web page and turns off the proxy. if this cannot be done via web page is there away of getting a reg key frag to run once they have logged on. Thanks Stuart
-
Well I've just installed Network Guardian 2008 on my backup proxy box so that I can then swap it in with the live one to get NG08 installed on the main rackmount proxy. So far the upgrade on the spare has been fine it picked up all the settings it needed as part of the installation. One thing I wasn't successfull with under the last version was active directory integration for authentication but with NG08 it seems to be working fine at the moment. Ben
-
Hi Guys, We are using a smoothwall to filter our internet traffic for Staff and Students. We also use Office 365 for our email. We would like to allow our staff to use Outlook 2016 to Manage their email and Calendar. This all seams straight forward so fare... Well it doesn't seam to work.. Every time we try and run the connection setup wizard it take and age to find the email server settings (fails), then tries and unsecure connection (fails) but if we uncheck the 'use proxy box' in IE it works first time. Once outlook is configured, if you re-tick the proxy box Outlook continues to work perfectly with no issues. Has anyone else had the same issue? Does anyone know of a solution to fixing this issue. In our exceptions box we have the following; *.ourdomain.org;*.office365.com;autodiscover-emeacenter.outlook.com;odc.officeapps.live.com;proxy.ourdaomin.local Any constructive suggestion welcome.
-
Hi all, As some of your know I'm currently working on a helpdesk system for a school as part of my final year project for uni. I installed it last weekend and only have one outstanding issue which is the following: The server has an internal static IP say: 10.18.79.200 The server has samba providing a net-bios hostname say: helpdesk-beta Now I can access all service except for http via the helpdesk-beta domain name. When I have the proxy configured in the web browser if I try to access http://helpdesk-beta I get an error back from the proxy saying unresolvable. I assume this is because the proxy is attempting to resolve the hostname using an external DNS server which obviously dosn't know about the machine? I belive the school use a cachepilot box provided by RM can anyone confirm how the DNS on these is normally setup and if it's possible to add a local entry? The only alternative is to add the address as an exception in the web-browser but this is obviously undesirable. Thanks Jona
-
after the release of fedora 11 on tuesday ive been thinking how to update my servers that run fedora and my netbook. After a little research i discovered a utility in fedora that basically swaps the f10 repos for the f11 repos and runs an update. This seemed perfect, the servers would be able to update and the only down time would be the reboot at the end. To test it i turned on my netbook made sure there was no important documents that needed backing up and then launched the utility. The problem appears to be that it wont work behind the proxy, yum has its moments trying to find mirrors not filtered by the smart filter, but it normally comes across an accessbile mirror after no more than 3 attempts. This utility seems unable to function behind the proxy, i will try the netbook again when i get home and have un filtered internet, but obviously thats no help to my servers. Has anyone used this utility possibly to go 9 -> 10 behind the LancsNGFL proxy?
-
Hi, i got a flyer on my desk this morning advertising the Sophos WS1000 web filtering appliance. anyone used it? or know anything about it?
-
I've been asked to look into a site which refuses to load on school devices, using the explicit AD proxy the site refuses to load, however, when using transparent it loads fine. Would anyone using the SurfProtect AD proxy be able to check if icould.com is accessible? Thanks in advance
-
Hi All I need to give my staff a static IP to enable them access to Office 365, our office 365 is setup to only allow access from specific IP's, so far I've tried to use a VPN using "Perimeter 81" but it seems the laptops I have for staff although new they are struggling and also with the VON usage and their slow home internet its becoming almost impossible to use, so I need something like a smart DNS provider that masks the home IP's of my staff, is there anything that does that ? by using a smart DNS their internet speed will not be effected and I can whitelist a single IP on O365 but I can't find anything useful online most of the smart DNS I'm finding is for personal use and most of them are for people wanting to use netflix etc I can't use my own vpn as I neither have the bandwidth onsite nor will it solve the slow connection issues, any advise is much appreciated.
