JOEBOX-L Archives

Joebox User

JOEBOX-L@LISTS.MAINE.EDU

Options: Use Forum View

Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
From:
Ray Soucy <[log in to unmask]>
Reply To:
Joebox User <[log in to unmask]>
Date:
Wed, 13 Apr 2011 12:20:20 -0400
Content-Type:
text/plain
Parts/Attachments:
text/plain (65 lines)
Tim, what OS are you using?

There is an issue with Mac's looking at the search domain list, rather
than the system domain.  If you're using the local DHCP server on the
Joebox it will hand out the search domain in addition to the system
domain, but if you're using Network Management, it's an extra per-host
option at this time.

I also have reports that the auto-discovery process seems broken on
Leopard, but works in Snow Leopard.

The "Force MECguard SSL" option (since the upgrade) would only
generate certificate errors for users that aren't using the MECguard
SSL proxy, as it will be presenting them with a page explaining that
no-proxy SSL has been disabled on the network.  Perhaps Firefox isn't
set to use the system proxy settings for these users.

On Wed, Apr 13, 2011 at 10:47 AM, Tim Levesque
<[log in to unmask]> wrote:
> First, we made an attempt to use the auto-discovery option in the browsers but even after the DNS entries were added we couldn't get it to work. When the proxy configuration was manually entered into the browser/system settings it would filter SSL just fine.  What I ended up doing was writing a package to update the configuration in the system settings as well as manually configuring and locking down the browsers.  Deployed the package and everything has worked fine since.
>
> This is for the SSL filtering only, we have NOT turned on the "Force MECguard SSL" option because it was throwing up a lot of those annoying certificate error pages in Firefox(our main browser) and users were freaking out because they didn't know how to navigate the certificate exception options.  As long as the internet filter filters both the https and http versions of the pages in my block list, I do not mind that we are not forcing SSL.
>
>
> Tim Levesque
> MCP, A+, NET+
> Technology Director
> Easton School Department
> 207-488-7702 ext 18
> www.eastonschooldistrict.org
>
>
> On Apr 13, 2011, at 9:45 AM, Ray Soucy wrote:
>
>> I'm interested in feedback from schools that have deployed, or
>> attempted to deploy, MECguard SSL (the proxy-based HTTPS filter).
>>
>> Anyone using it successfully yet?  If so, how is it working out?
>>
>> If you've tried to deploy it but ran into a roadblock, I want to hear
>> about that as well.
>>
>> --
>> Ray Soucy
>>
>> Epic Communications Specialist
>>
>> Phone: +1 (207) 561-3526
>>
>> Networkmaine, a Unit of the University of Maine System
>> http://www.networkmaine.net/
>



-- 
Ray Soucy

Epic Communications Specialist

Phone: +1 (207) 561-3526

Networkmaine, a Unit of the University of Maine System
http://www.networkmaine.net/

ATOM RSS1 RSS2