Category: Service

Transparent proxy issues

Good morning… and Happy New Year.

Unfortunately, we have received a few reports today that there are issues with the transparent proxy networks This morning. Devices are connecting okay but can’t browse the internet. This is in hand and apologies.

Thanks, Kev

DfE’s Cyber Security Standards: A guide for schools and trusts

My colleague James Toll has recently posted an article onto the HFL website, that I thought was worth sharing: https://www.hfleducation.org/blog/dfes-cyber-security-standards-guide-schools-and-trusts

Thanks,

Kevin Crawley

 

RM Unify AD Sync

There is an important update regarding RM Unify AD Sync and upcoming changes from Microsoft that may impact your service.

Microsoft Azure are ending support for Transport Layer Security (TLS) 1.0 and 1.1 ending 31st October 2024. For more information, please read the blog from Microsoft:

https://azure.microsoft.com/en-us/updates/azure-support-tls-will-end-by-31-october-2024-2/

This change directly affects how the RM Unify AD Sync service communicates with RM Unify. Without action, RM Unify AD sync may stop providing user updates to RM Unify and other services, for example, RM SafetyNet.

Action Required:

You will need to run an application on your server to force a minimum version of TLS 1.2 in advance of the deadline imposed by Microsoft on 31st October 2024. Please follow the link to this RM article for instructions to install the update on your server:

Security update for RM Unify AD Sync

(There is no further action for schools that have a HFL technical support contract as this change has been carried out by our engineers)

Broadband issues?

Unfortunately we are receiving a few queries to say that some schools have no internet. RM are working on this and apologies for the disruption.

Network maintenance and change freeze in July

RM have purchased some new hardware and it will be used to replace the existing central firewall clusters. The existing hardware is approaching full capacity so this work obviously needs to go ahead. The new hardware will be the latest model with a lot more capacity and it will be a direct swap out.

The work will involve copying all the firewall config data and then over three nights (2nd, 3rd and 4th July) the platform will be updated. I am assured that it is “low risk” particularly as the same software version will be used on the new hardware. However, if there are problems, it will be straight forward enough to quickly roll back the changes.

Both RM and HFL are keen that this work goes ahead now rather than waiting for the summer holidays. This is because if in the unlikely event that there are issues, they may not present themselves until schools return in September, when there is high traffic.

This event will incur a change freeze meaning that new firewall rules cannot be created from Monday 1st July 9AM through to Friday 5th July 10AM. This will allow RM to copy over the up-to-date firewall config data. With this in mind, over this period we will not be able to create new firewall rules. This includes RM making firewall changes as well as HFL/School IT Support updating access within SafetyNet.

If you have any queries or concerns, please get in touch with HFL Broadband Support and/or Kevin Crawley.

Intermittent Chromebook issues from yesterday

The problems were a result of Google making some recent changes and this resulted in intermittent issues impacting all ISPs – not just RM (HFL). Last night, Google engineers took measures to mitigate the issue. I am pleased to report that since Google’s work, performance now appears stable.