Wireless and web filter

On our campus, we have k-12 that use our network.
We have 4 WiSM and 4 4404 controllers. Wireless network requires to go through Cisco NAC system. Now, this "high school" need to have their wireless network to go through 8e6 R3000 network filtering appliances. We already set up separate SSID for university and high school. SSID are broaadcast all over the campus.
Is anyone have experience in traffic routing with Cisco Wireless (Lwapp), Cisco NAC, and 8e6 R3000 Enterprise filtering.
My manager recommend this:
The most appropriate and simplest setup is to run the device in "Invisible" mode -- packets are mirrored to the filter. I believe this is how things are currently set up (correct me if I'm wrong), so configuration changes associated with a physical relocation should not be drastic. Requirements for this change beyond racking the unit in a different location include: assigning a new management IP, changing the synchronization setup on Source/Target units, definition of subnets/VLANs to monitor (depends on current filtering config) and switch configuration to push traffic to the device. (Corrections to this list are welcome
Your thought on this?

Have you considered Cisco Mobility Express?
AP521s controlled by WLC526. Multiple access (SSIDs and VLANS) with Web Page authentication for clients.
http://www.cisco.com/cisco/web/solutions/small_business/products/wireless/index.html
The Cisco Partner Reseller Helpline can help convert Business requirements into Product SKUs as well...
https://www.myciscocommunity.com/docs/DOC-1377

Similar Messages

After ios5 upgrade cant get out to the internet via wireless, it wont get past our Smart Filter (web filter)

I just upgraded my 3GS to IOS5, and now at work when i am connected to our WiFi I can no longer get out to the internet.
A little back story on how it worked prior to ios5:
I would connect via wireless, and then load Safari and type in a webpage I wanted to go to. A pop up box would come up, to authenticate me on our Web filter server (Running Smartfilter), I woudl enter my regular Active Directory username and Password and boom, i could then surf to my hearts content.
After the upgrade, I connect to the wireless, load Safari, type in the webpage i want to go to, and the progress bar moves abotu 3mm and then stops, I never get the smart filter prompt.
I have tried a full reset on the phone, forget network, reset all network settings, I even tried putting in the IP address of the smart filter box as a proxy and still it doesnt work. I have gone to smartfilters website to see if anyone else has posted there, or if there was a clue as to why it doesnt work, but nothing so far.
anyone else having this problem? any ideas?
If it wasnt broken, why would apple mess with it! a LOT of companies run smartfilter as well as other web filters. I thought apple was trying to seduce corporate customers, and so far a lot of poeple are dissapointed that they cant get to the internet.
tha
nks in advance for any assistance.
j

I am having the same problem. The issue also occurs with Safari on Mac OS 10.7. I work for a school and I am sure that other schools are using smartfilter too.

Best Web Filter and Application control for K-12 School using Chromebooks

Sophos UTM has good education pricing and provides all this and a lot more
Wil replace the firewall and has excellent web filtering and application control
Also nice features for education like allowing google apps but limiting to your google domain

We are currently using Barracuda Web Filter (410) with a Watchguard firewall. This school year we are launching Google for Education with 160 Chromebooks to start the program.
We need to upgrade our webfilter and are considering another Barracuda as well as Litespeed, Websense and perhaps OpenDNS.
is there anyone who is in a similar situation that has some recommendation?
Here are a few more details:
School is 900+ students
300 wired workstations
Active directory environment
Ruckus Wireless with 30+ access points
This topic first appeared in the Spiceworks Community

Excel web part and choice filter web part session timeout

Hi,
I have set up a excel web part and choice filter web part so I can change the parameters for the excel with the choice filter. I used this link: office.microsoft.com/en-001/sharepoint-server-help/connect-filter-web-parts-to-excel-web-access-HA010105470.aspx
The problem that I have, is that each time I select a parameter through the choice filter web part, I get a session timeout:
How can I prevent the session timeouts? I allready checked the Trusted File Location in the central admin (the location where the Excel is uploaded is not mentioned specifically, but the main domain is, so I guess all domains that built upon the
main domain are also trusted locations?)

Hi vjo,
Please try to increase the Short Session Timeout in the trusted file location, compare the result.
If this issue still exists, please check the ULS log to find whether there is something about this issue.
The path of the log file is: C:\Program Files\Common Files\microsoft shared\Web Server Extensions\14\LOGS.
Thanks,
Wendy
TechNet Community Support
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
[email protected]

Wsa S160 accept usage control and web reputation filter update failure??

end-user noticed there are some failure on the accept usage control and web reputation filter update. it show update /download failure on nov 11 and nov 14. I do check the update log it shows Mon Nov 14 14:45:11 2011 Info: Starting scheduled update Mon Nov 14 14:45:12 2011 Info: Scheduled next update to occur at Mon Nov 14 14:50:12 2011 Mon Nov 14 14:45:59 2011 Info: wbrs released download lock Mon Nov 14 14:45:59 2011 Warning: wbrs update failed but the new update shows "not available" . is this a eror or it is normal ?
IF there is not new release for update, if I click update, will it report a update failure? or what else I can check?
i checked the update log.
Mon Nov 14 14:45:11 2011 Info: Starting scheduled update
Mon Nov 14 14:45:12 2011 Info: Scheduled next update to occur at Mon Nov 14 14:50:12 2011
Mon Nov 14 14:45:59 2011 Info: wbrs released download lock
Mon Nov 14 14:45:59 2011 Warning: wbrs update failed
Mon Nov 14 14:50:12 2011 Info: Starting scheduled update
Mon Nov 14 14:50:18 2011 Info: Acquired server manifest, starting update 4966
Mon Nov 14 14:50:18 2011 Info: Server manifest specified an update for merlin
Mon Nov 14 14:50:18 2011 Info: merlin was signalled to start a new update
Mon Nov 14 14:50:18 2011 Info: merlin processing files from the server manifest
Mon Nov 14 14:50:18 2011 Info: merlin started downloading files
Mon Nov 14 14:50:18 2011 Info: merlin beginning download of remote file "http://updates.ironport.com/merlin/masters-2.1/1453"
Mon Nov 14 14:50:18 2011 Info: merlin waiting on download lock
Mon Nov 14 14:50:18 2011 Info: merlin acquired download lock
Mon Nov 14 14:50:18 2011 Info: Scheduled next update to occur at Mon Nov 14 14:55:18 2011
Mon Nov 14 14:50:27 2011 Info: merlin released download lock
Mon Nov 14 14:50:27 2011 Info: merlin successfully downloaded file "http://updates.ironport.com/merlin/masters-2.1/1453"
Mon Nov 14 14:50:27 2011 Info: merlin started applying files
Mon Nov 14 14:50:27 2011 Info: merlin applying file "merlin/masters-2.1/1453"
Mon Nov 14 14:50:27 2011 Info: merlin restarting merlin
Mon Nov 14 14:50:27 2011 Info: merlin verifying applied files
Mon Nov 14 14:50:27 2011 Info: merlin updating the client manifest
Mon Nov 14 14:50:27 2011 Info: merlin update completed
Mon Nov 14 14:50:27 2011 Info: merlin waiting for new updates
Mon Nov 14 14:50:59 2011 Info: wbrs started downloading files
Mon Nov 14 14:50:59 2011 Info: wbrs beginning download of remote file "http://updates.ironport.com/wbrs/ip/1321069006.inc"
Mon Nov 14 14:50:59 2011 Info: wbrs waiting on download lock
Mon Nov 14 14:50:59 2011 Info: wbrs acquired download lock
Mon Nov 14 14:50:59 2011 Info: wbrs released download lock
Mon Nov 14 14:50:59 2011 Info: wbrs successfully downloaded file "http://updates.ironport.com/wbrs/ip/1321069006.inc"
Mon Nov 14 14:50:59 2011 Info: wbrs beginning download of remote file "http://updates.ironport.com/wbrs/ip/1321069341.inc"
Mon Nov 14 14:50:59 2011 Info: wbrs waiting on download lock
Mon Nov 14 14:50:59 2011 Info: wbrs acquired download lock
Mon Nov 14 14:50:59 2011 Info: wbrs released download lock
Mon Nov 14 14:50:59 2011 Info: wbrs successfully downloaded file "http://updates.ironport.com/wbrs/ip/1321069341.inc"
Mon Nov 14 14:50:59 2011 Info: wbrs beginning download of remote file "http://updates.ironport.com/wbrs/ip/1321070032.inc"
Mon Nov 14 14:50:59 2011 Info: wbrs waiting on download lock
Mon Nov 14 14:50:59 2011 Info: wbrs acquired download lock
Mon Nov 14 14:50:59 2011 Info: wbrs released download lock
Mon Nov 14 14:50:59 2011 Info: wbrs successfully downloaded file "http://updates.ironport.com/wbrs/ip/1321070032.inc"
Mon Nov 14 14:50:59 2011 Info: wbrs beginning download of remote file "http://updates.ironport.com/wbrs/ip/1321070355.inc"
Mon Nov 14 14:50:59 2011 Info: wbrs waiting on download lock
Mon Nov 14 14:50:59 2011 Info: wbrs acquired download lock
Mon Nov 14 14:51:00 2011 Info: wbrs released download lock
Mon Nov 14 14:51:00 2011 Info: wbrs successfully downloaded file "http://updates.ironport.com/wbrs/ip/1321070355.inc"
Mon Nov 14 14:51:00 2011 Info: wbrs beginning download of remote file "http://updates.ironport.com/wbrs/ip/1321071157.inc"
Mon Nov 14 14:51:00 2011 Info: wbrs waiting on download lock
Mon Nov 14 14:51:00 2011 Info: wbrs acquired download lock
Mon Nov 14 14:51:00 2011 Info: wbrs released download lock
Mon Nov 14 14:51:00 2011 Info: wbrs successfully downloaded file "http://updates.ironport.com/wbrs/ip/1321071157.inc"
Mon Nov 14 14:51:00 2011 Info: wbrs beginning download of remote file "http://updates.ironport.com/wbrs/ip/1321071469.inc"
Mon Nov 14 14:51:00 2011 Info: wbrs waiting on download lock
Mon Nov 14 14:51:00 2011 Info: wbrs acquired download lock
Mon Nov 14 14:51:00 2011 Info: wbrs released download lock
Mon Nov 14 14:51:00 2011 Info: wbrs successfully downloaded file "http://updates.ironport.com/wbrs/ip/1321071469.inc"
Mon Nov 14 14:51:00 2011 Info: wbrs beginning download of remote file "http://updates.ironport.com/wbrs/ip/1321071901.inc"
Mon Nov 14 14:51:00 2011 Info: wbrs waiting on download lock
Mon Nov 14 14:51:00 2011 Info: wbrs acquired download lock
Mon Nov 14 14:51:00 2011 Info: wbrs released download lock
Mon Nov 14 14:51:00 2011 Info: wbrs successfully downloaded file "http://updates.ironport.com/wbrs/ip/1321071901.inc"
Mon Nov 14 14:51:00 2011 Info: wbrs beginning download of remote file "http://updates.ironport.com/wbrs/ip/1321072452.inc"
Mon Nov 14 14:51:00 2011 Info: wbrs waiting on download lock
Mon Nov 14 14:51:00 2011 Info: wbrs acquired download lock
Mon Nov 14 14:51:00 2011 Info: wbrs released download lock
Mon Nov 14 14:51:00 2011 Info: wbrs successfully downloaded file "http://updates.ironport.com/wbrs/ip/1321072452.inc"
Mon Nov 14 14:51:00 2011 Info: wbrs beginning download of remote file "http://updates.ironport.com/wbrs/ip/1321072766.inc"
Mon Nov 14 14:51:00 2011 Info: wbrs waiting on download lock
Mon Nov 14 14:51:00 2011 Info: wbrs acquired download lock
Mon Nov 14 14:51:00 2011 Info: wbrs released download lock
Mon Nov 14 14:51:00 2011 Info: wbrs successfully downloaded file "http://updates.ironport.com/wbrs/ip/1321072766.inc"
Mon Nov 14 14:51:00 2011 Info: wbrs beginning download of remote file "http://updates.ironport.com/wbrs/ip/1321073089.inc"
Mon Nov 14 14:51:00 2011 Info: wbrs waiting on download lock
Mon Nov 14 14:51:00 2011 Info: wbrs acquired download lock
Mon Nov 14 14:51:00 2011 Info: wbrs released download lock
Mon Nov 14 14:51:00 2011 Info: wbrs successfully downloaded file "http://updates.ironport.com/wbrs/ip/1321073089.inc"
Mon Nov 14 14:51:00 2011 Info: wbrs beginning download of remote file "http://updates.ironport.com/wbrs/ip/1321073407.inc"
Mon Nov 14 14:51:00 2011 Info: wbrs waiting on download lock
Mon Nov 14 14:51:00 2011 Info: wbrs acquired download lock
Mon Nov 14 14:51:01 2011 Info: wbrs released download lock
Mon Nov 14 14:51:01 2011 Info: wbrs successfully downloaded file "http://updates.ironport.com/wbrs/ip/1321073407.inc"
Mon Nov 14 14:51:01 2011 Info: wbrs beginning download of remote file "http://updates.ironport.com/wbrs/ip/1321074165.inc"
Mon Nov 14 14:51:01 2011 Info: wbrs waiting on download lock
Mon Nov 14 14:51:01 2011 Info: wbrs acquired download lock
Mon Nov 14 14:51:01 2011 Info: wbrs released download lock
Mon Nov 14 14:51:01 2011 Info: wbrs successfully downloaded file "http://updates.ironport.com/wbrs/ip/1321074165.inc"
Mon Nov 14 14:51:01 2011 Info: wbrs beginning download of remote file "http://updates.ironport.com/wbrs/ip/1321075094.inc"
Mon Nov 14 14:51:01 2011 Info: wbrs waiting on download lock
Mon Nov 14 14:51:01 2011 Info: wbrs acquired download lock
Mon Nov 14 14:51:01 2011 Info: wbrs released download lock
Mon Nov 14 14:51:01 2011 Info: wbrs successfully downloaded file "http://updates.ironport.com/wbrs/ip/1321075094.inc"
Mon Nov 14 14:51:01 2011 Info: wbrs beginning download of remote file "http://updates.ironport.com/wbrs/ip/1321075449.inc"
Mon Nov 14 14:51:01 2011 Info: wbrs waiting on download lock
Mon Nov 14 14:51:01 2011 Info: wbrs acquired download lock
Mon Nov 14 14:51:01 2011 Info: wbrs released download lock
Mon Nov 14 14:51:01 2011 Info: wbrs successfully downloaded file "http://updates.ironport.com/wbrs/ip/1321075449.inc"
Mon Nov 14 14:51:01 2011 Info: wbrs beginning download of remote file "http://updates.ironport.com/wbrs/ip/1321075769.inc"
Mon Nov 14 14:51:01 2011 Info: wbrs waiting on download lock
Mon Nov 14 14:51:01 2011 Info: wbrs acquired download lock

I think this happens occasionally, its not a big deal.
Your box tried again, and eventually got update 5 min later.
You may want to extend the time on this a bit to help performance... every 5 min does add some load.
Support had me set mine at 8 hours...

Verizon Wireless is excited to introduce a New $50 Prepaid Unlimited Talk, Text and Web offer!

The new $50 Unlimited nationwide offer will round out the Verizon Wireless Prepaid portfolio, allowing us to offer a Monthly Unlimited price plan to current and new customers with a new or previously purchased basic prepaid PIB device (Phone-in-the-Box).
Customers can choose from a large selection of incredible basic devices such as:
Samsung Gusto, LG Revere, Pantech Caper, ZTE Salute, LG Accolade, Pantech Jest and the Samsung Intensity II, pending channels eligibility.
Now, more than ever, Verizon Wireless Prepaid customers have more choices in plans and devices on America’s most reliable network!
For more information on the $50 Unlimited Talk, Text and Web prepaid plan, click http://www.verizonwireless.com/b2c/plans/?page=prepaid

Go to Launching Mobile Web from the home screen nad press up on the Directional Key to laucnh your phones brower. The My Verizon screen will appear,9 I know on the Daily plan there is a 99 cdent WEB charge per day0 so it might be free with the monthly plan. Press to select WEB 99 cents. The VZW Today screen will appear and then your phone will be online. This method does not include Data (that part I'm not really sure about, maybe someone on this site with a 50.00 plan can help with that part. Are you using a Basic Phone? This is what it says on the information page.
Per-Minute Rate After Allowance: If you have sufficient balance for your $50 Monthly Access, get unlimited calling, messaging and
Mobile Web for 30 days. If you don’t have the enough funds to cover the monthly access, you will be charged 25¢ per minute, 20¢
per text, 25¢ per picture or video message, and 99¢ per day for Mobile Web.

TMG and Symantec DLP web filter

Is anyone here using TMG with Symantec's Network Prevent product that utilizes the Network Prevent web filter capture traffic?
The Symantec web filter will crash randomly and there seems to be no resolution in the future.
Just reaching out to the community to see if anyone has seen the same and what resolution, if any, exists.

Hi,
Based on your description, it is not enough for us to locate the issue.We suggest you provide more detailed information and how do you judge the issue is related to TMG. You also can contact Symantec engineer to assist to locate the issue.
Best Regards
Quan Gu

What is a web filter and why is it prevetning me from using firefox?

Firefox allows me to search on google but as soon as i click the next link/to go on the page i want is doesnt work. Instead it talks about a web filter saying that the page i tried to visit could not be checked by web filter. This also happens when i use internet explorer. How do i fix this?

A web filter can be a piece of software installed on your computer, or on a network you are connected to that checks the content of the sites you are trying to visit. Talk to the owner of the network you are trying use, or the owner of the computer.
It's also possible you have malware, try scanning for malware with the directions at [[Troubleshoot Firefox issues caused by malware]]

Problem with my company's web filter, Barracuda when I try to access the internet

I'm having problems accessing the internet on my tour. Ever since my company put me on their BlackBerry Enterprise Server it appears that when accessing certain web sites the Barracuda web filter comes on. It's so frustrating... on top of it my company doesn't pay for my phone at all. Therefore, I do use my BlackBerry for personal as well as business.
I spoke with the IT guy and he initially thought it was the Desktop Software I downloaded to my computer, but we have uninstalled it and re-booted my phone and it's still happening. I called Verizon Wireless and they tell me that it's because I'm on the company's enterprise server and that I am tied to their internet service and that's why I'm getting the Barracuda access denied on certain sites that they have restricted. I am incredibly frustrated and don't know what to do...  I want to stay on their server because of the push email and the synchronization for all my contacts and calendar. Any help is much appreciated...
Thanks.
TinaMarie

mabbas wrote:
The blackberries are designed to send everything through the corporate network, when using an Enterprise Server.
Hi and Welcome to the Forums!
Just to be sure that this is clear -- they are not "designed" as you state...rather, the BES admins can force all Internet traffic through BES (and thereby apply filters) or they can allow it to go direct through the carrier network. The IT Policy placed onto the device at BES activation is in control of how the traffic flows.
Cheers!
Occam's Razor nearly always applies when troubleshooting technology issues!
If anyone has been helpful to you, please show your appreciation by clicking the button inside of their post. Please click here and read, along with the threads to which it links, for helpful information to guide you as you proceed. I always recommend that you treat your BlackBerry like any other computing device, including using a regular backup schedule...click here for an article with instructions.
Join our BBM Channels
BSCF General Channel
PIN: C0001B7B4   Display/Scan Bar Code
Knowledge Base Updates
PIN: C0005A9AA   Display/Scan Bar Code

Web Filter Recommendations

Hi All,I have a couple of computers that are in need of some kind of web filtering. They run 24/7 and are out in the boonies somewhere where the nights are long and boring. Thus the night shift likes to surf the web to pass the time. This is causing issues, such as a crypto locker variant that has now rendered one of the machines useless. This is costing money as operating out there without a computer causes major production problems. To that end, I am looking for a web filter that I can use on these machines that wont necessarily require a huge amount of trial and testing, talking to sales people, getting quotes, etc. While an enterprise solution would be nice, for now I just need to put something on these 2 machines, quickly and relatively inexpensively that will allow me to block traffic to all web sites except those deemed...
This topic first appeared in the Spiceworks Community

Josh,
I have 10,000 wireless devices. I call BS. You are right some vendor / dept yelled loud enough .. I feel for you.. It will be a up hill battle.
I would do this . Create a standard that will get most devices to conform to. Some older medical devices wont be able to do AES. So you may be stuck with a WPA/TKIP security.
Good luck .. hit me up on my blog my80211.com if you have specific questions. Ill see what I can do to help .. We likely run the same equipment and apps and have good relationships with some of the vendors.
"Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin
‎"I'm in a serious relationship with my Wi-Fi. You could say we have a connection."

ISA500 Web Filter

Hi All,
would be possible to create a specific web filter profile for a given IP address (or user) of a zone?
Eg. the LAN zone [192.168.75.0 /24] has the "Restaurants" category blocked, but only the IP address 192.168.75.123 /32 (the boss with his PC in LAN zone) has the "Restaurants" category permitted?
Thanks.
Massimo

ISA500 is a zone based firewall. While the ability of "creating an exception for Web URL filtering within a zone" is in a roadmap, one can consider to use ISA500's zone based firewall to achieve the need of having different Web URL filtering policies for different user groups.
For example, an admin wants to allow "manager" user group to access everything but prevents employee" user group from accessing "game" category. The admin can create two zones - one "manager" zone and the other "employee" zone. Each zone then has its own Web URL filtering policy.
To place a user group to a specific zone, admin put the target users to the VLAN associating with the target zone.
In the case of wireless, admin can take advantages of multiple SSIDs ability of ISA500. For example, admin can create two SSIDs - one SSID is "manager" and the other is "employee". Each of the SSID is then associated to a VLAN beloing to the target zone.
While this approach has scalability limitation, it should easily support 2 or 3 different Web URL policies (or more if wired is used).
Hopefully this helps.
Richard

Wireless and network printing transcript for Meet the Experts

On March 16th, HP hosted its first online chat event on wireless and network printing. Below is a transcript of that session.
I am in the process of planning the next chat event. I would love to hear what topics would interest you, what day of the week and time is best for you, and if you think an hour is too long.
So, if you get a minute, please let me know.
Here's the transcript:
SiobhanF-HP: Welcome! Cameron, Craig, David, and Jim are ready to tackle your questions.
SiobhanF-HP: Just to remind you if you want to ask a question, you must be a member of the HP Support Forums. If you want to join, go here https://passport2.hp.com/hppcf/createuser.do
nc256: Do I need a wireless router to hook up my wireless printer?
CameronL-HP: No, but most people will want to do it this way. You can use a feature called an ad hoc connection to avoid using a router, but it is only covered under an older standard that is slower and less secure. Also, without something to route traffic between the local network and the internet, you cannot get an internet connection. Using a wireless router makes setting up a wireless network easier, and it will generally make the network work better too.
jest1: I've seen some hardware in stores for a "print server" hardware device that attaches to a network. Is this something that I need in order to run a printer over a network?
CraigB--HP: Not if you have a printer that has a network connection built in. Many models of HP computers are ready to be connected directly to your wired or wireless network.
katiepage: How can I print when I am using a VPN?
DavidH-HP: VPN connections generally hide the rest of your home network to increase the security of the VPN connection. A printer on the network isn’t a security threat but the VPN doesn’t know that. It just hides everything just to be sure. That means that when a VPN is active you need some way to connect to the printer other than your home network. Bluetooth, USB, and even printing to a thumb drive and plugging that into the printer are all ways of getting your print job to the printer that don’t go through your home network.
SiobhanF-HP: If you have specific product questions, the more information you give us the better we will be able to help you. Getting your exact model number; any error messages; a description of your wireless network including what kind of security you have, what wireless-devices are connected to your network, and your IP address will go a long way to helping us answer your question.
MelissaP: Why would I want a wireless printer?
CraigB--HP: The main advantage of a wireless printer is the ability to place the printer somewhere in your home or office even if this is not near your router or computer.
Deltan: What is the maximum distance I can have between my router and my printer?
CameronL-HP: It does depend on your environment. Without interference about 25 feet. Walls and floors and other objects can reduce this. The types of walls are important. For example, mirrors and outdoor walls will greatly reduce the indoor range.
jest1: Is there a preferred wireless router type or brand for wireless printing compatibility? We are using a Linksys 802.11g router in my home.
JimB-HP: In general, any wireless-router from a name brand manufacturer that has been Wi-Fi certified is compatible with our printers (look for the Wi-Fi logo). We use Linksys in our lab with great success.
nc256: Are there any digital cameras that can send directly to an HP wireless printer for photo printing?
DavidH-HP: Many printers support a feature called Pictbridge. If the camera and printer both supports this feature, the camera can be plugged directly into the printer to print photos. Or are you asking about printing over a network connection?
KevinW: I keep hearing that you shouldn’t use default settings for a network. Why?
CraigB--HP: There are three reasons not use default settings: First, wireless-routers do not have any wireless security enabled by default. Second, you will be using a common network name in which case you may connect accidentally to your neighbor’s network. Third, your wireless-router is accessible by inadvertent guests who may change the configuration of your wireless-router without your knowledge or use your internet connection without your permission.
Bodie08: I have an HP Lan attached printer and Windows XP on my home network. Is there a known setting (Firewall/port/other) or patch to address the issue of hpqtra08.exe hanging on Windows XP Shutdown? A number of us in the forum have identified this issue. Thanks!
DavidH-HP: This problem has been seen in the past but there were attempts to address it. Have you checked to see if there is a later release of software available on the web? (hp.com)
ZhuLee3: How old is wireless printing technology? I noticed all the experts have around 20 years of experience with it, was there wireless 20 years ago?
JimB-HP: Wireless printing first appeared with the introduction of the 802.11 standard in late 1990's. HP has been making wireless printers since 2003.
lpeterson123: What makes wireless so flaky at times?
CameronL-HP: There are lots of reasons. Wireless signals are affected by distance, walls, metal objects, and other wireless devices like cordless phones. However, most of the problems seem to be from how the network or how security software is configured, and these can also cause things to fail only occasionally or in certain situations. Having a good wireless connection between a PC and printer involves several hardware devices and lots of software made by different companies that all have to work together; if something is not quite right in any of these things then the whole solution looks flaky.
Bowman16: I use a Mac, are there any features that would not work if I was to set it up for wireless use
DavidH-HP: All the features will work on a Mac if you install the full HP software solution.
jest1: Thanks for the answer on the router question. The next question, then, is to ask what would be a recommended consumer-grade wireless-enabled printer (or series) just so I can start my research.
JimB-HP: Any of our Photosmart or Officejet wireless printers will work with Wi-Fi certified wireless-routers. Our price points really have more to do with how much printing you do. In general, our more expensive printers cost less per page than our less expensive models.
Bodie08: Why would I choose "spooling" on my PC over "direct connect”?
CraigB--HP: In general, spooling allows you to use your program sooner than printing directly.
ZhuLee3: Jim: What is it like to be an "HP Printing Expert"? What kind of stuff do you get to work on, on a day to day basis?
JimB-HP: I really like my job -- I've always been a radio enthusiast so working on 802.11 technology is really a dream job for me. I'm also fortunate to work with a great team here in Vancouver, WA. More importantly, I like designing equipment that people use in their everyday lives.
TEACHER1: Recently I changed routers, now I am unable to print wirelessly, even though the SES and wireless network light are steady on my Deskjet 6980 printer. What is the solution? Thanks.
DavidH-HP: The wireless light indicates that the radio is on but does not indicate that the printer is connected to the network. First check that the printer is connected to the network by printing a network configuration page from the printer.
AgentRed: I get my internet with a Verizon wireless broadband card. Someone told me that wouldn't work with a wireless printer. Is that true?
CameronL-HP: Our wireless printers use the 802.11 b, g or n standard which is not compatible with the wireless cellular standard. It would be like trying to connect to a wireless network using Bluetooth. They are different wireless technologies.
DavidH-HP: Regarding the Verizon card, it is true that you cannot connect the printer over the Verizon connection, but as long as your laptop has Wife you can print to the printer over WiFi at the same time that the Verizon connection is active. This should not be a problem.
jest1: Is there a "minimum" internet connection that is recommended for wireless printing? We live a bit far from the DSL CO so our connection is sometimes flaky. I would guess that incoming speed shouldn't affect my local wireless LAN but I want to ask it anyway
CameronL-HP: There are 2 parts to your home network. 1 is your wireless router which manages your local network equipment, then your network connection to the world wide web which your DSL provider gives you. The connection speed of your local network is not affected by your internet connection speed.
Bowman16: Are any HP printers 802.11n? I do not want to add an 802.11b,g to my network and cause it to slow down.
JimB-HP: Currently, our printers comply with the 802.11g standard. We are investigation the emerging 802.11n standard.
ZhuLee3: Will there be a transcript of all the questions and answers from this chat available for viewing after the session? I think I missed some questions at the start.
SiobhanF-HP: The chat event begins when you joined. Sorry that you can't see what was said before you joined. I hope to have transcript posted tomorrow or on Wednesday at the latest.
nc256: Where is the future of printers headed? Does HP have any interesting plans with printing technology? And what’s your opinion on whether or not color laser printing will ever approachthe photo realism of ink jet color?
JimB-HP: The future of HP printing will be characterized by wireless connectivity to not only computers but to mobile internet devices. In fact, as mobile devices become smaller (think phone or netbooks), the need to print from your mobile device might become more relevant.
jest1: Am I able to print from my iphone to a wireless printer?
CraigB--HP: You can print photos from your iPhone to HP wireless printers and it works great in my experience. Go to http://www.hp.com/go/iprintphoto to get the details.
TEACHER1: Thank you. I printed a page. It shows that wireless is disconnected.
DavidH-HP: Then you just need to input the wireless settings from your new router into the printer. If your printer does not let you input the settings from the front panel, you can use the CD that came with the printer or downloaded from hp.com to configure the printer again ( look for the option to "add a device" ).
ZhuLee3: Question about security... if I get a wireless printer, what’s to prevent other people within range of my printer, from adding it and printing documents? How is this configured on the actual printer?
JimB-HP: The simplest way to secure your printer is to enable WPA-PSK security for your wireless network and to use a security pass-phrase that is at least 12 characters long. This configuration is very safe from intruders for the foreseeable future.
CameronL-HP: It' is also a good idea to use a unique network name, also called an SSID.
carolj: I have a photosmart C7180 and I have it hooked up to my laptop (windows vista) when the setup completed the printer was put in networking instead of printers and I cannot access it or move it out of there. What do you suggest?
CraigB--HP: You might need to uninstall and reinstall. Before doing this, make sure your get the latest driver from the HP support at: http://h10025.www1.hp.com/ewfrf/wc/softwareCategory?product=1153754&lc=en&cc=us&dlc=en&lang=en&cc=us This is also where you can get a copy of the instruction book.
wizll: Hi, I haven't done much research in wireless printing, but I'm interested as I currently have my printer set up the old fashioned way where it's connected to a networked PC, but if the PC is off I can no longer print, which is obviously inconvenient. Do hp wireless printers have a web gui you can connect to once it's on the home network, or is it simply all done from the printer's interface. I've seen some old wired network printers that only use the printer's ui and that seems like a clunky use.
DavidH-HP: Yes, the HP printers which have networking built-in have what we call an "embedded" web server which allow you to configure settings, check status, and have many other features; on some models you can even scan using the embedded web server.
nc256: Jim: Will color laser printing ever reach ink jet quality for photos?
JimB-HP: While never is a long time, inkjet printers will, for the near future, output higher quality photos.
katiepage: If I'm at home, connected to my office network via VPN, can I access my office networked printers?
CraigB--HP: Yes, when you are connected to the office VPN, you can print to your office printers. However, you will not be able to print to your home networked printers while you are connected to the VPN.
jest1: If a friend comes over to my house with their laptop and needs to print something, are they able to do this just by authenticating with my wireless LAN (assuming I have a wireless printer set up)?
CraigB--HP: In addition to authenticating to your network, you friend will also need to install the printer driver for your printer.
jpszambelan: Is there a wireless USB device of some kind I can connect to my printer if there is no network connection already built in?
JimB-HP: HP sells an accessory that adds Wi-Fi capability to your USB printer (see http://www.shopping.hp.com/product/printer/inkjet/wireless/4/accessories/Q6236A%2523A2L) Also, many higher-end wireless-routers allows USB printers to be connected to them to allow sharing of the printer from the network. Note that this solution often limits you to just printing and not scanning from the network.
rockwoodchev: It seems that my computer can find my printer, but my printer can't find the computer, so that "Scan to computer" won't work. What do I need to do in order to fix that?
DavidH-HP: This can be blocked by security software running on the PC (such as a personal firewall). Make sure that your firewall is configured to allow communication on your local network. You can also unblock specific ports, but the easiest way is often just to allow communication on the local home network. The specific setting varies from firewall to firewall.
SiobhanF-HP: We are nearing the end of our chat session. We only have time for 3 more questions. If we did not get to your question, please post it on the Networking and Wireless board in the Printers and All-in-Ones forum. http://h30434.www3.hp.com/psg/board?board.id=Networking
SSPatrick: Is it possible to print wirelessly to the same HP printer using both a PC and a Mac?
JimB-HP: Yes -- I do this in my home. I have both Macs and PCs on my network without any trouble.
Bowman16: Any plans to do this again?
SiobhanF-HP: Yes we are.
ZhuLee3: Do all of the experts hang out on the HP community? Will we see you posting there after this?
DavidH-HP: Oh yes, whenever time permits. In addition to trying to help people, I learn things too.
JimB-HP: I'm known as Wi-Fi-Guy on the support forums. I hang out there often helping where I can. It helps me be a better designer.
CraigB--HP: I monitor the forums looking for problems to take back to the development lab for investigation. To date, I have only posted one reply.
CameronL-HP: I haven't been involved in the past but expect to be more involved in the future.
SiobhanF-HP: We only have time for one more question. If we did not get to your question, please post it on the Networking and Wireless board in the Printers and All-in-Ones forum. http://h30434.www3.hp.com/psg/board?board.id=Networking
ZhuLee3: Thanks for setting this up!
SiobhanF-HP: The transcript will be posted on http://h30434.www3.hp.com/psg/board?board.id=Networking
TEACHER1: Thank you all for conducting this session !!!!
jest1: Is there an OS limitation to print wirelessly?
JimB-HP: All the OS versions supported by the printer as supported wirelessly. In general, we are compatible with Macs, Windows and Linux.
SiobhanF-HP: We are ending the chat event. Thank you for coming. We hope you found it worthwhile. I will be posting a transcript of the event in the Networking and Wireless board in the Printers and All-in-Ones forum. We will be hosting future Meet the Experts chat sessions on a variety of topics, so please tell us what you thought of the event and how it could be improved. http://h30434.www3.hp.com/psg/board/message?board.id=Feedback&thread.id=525
Live Forum Closed
Message Edited by timhsu on 03-18-2009 05:39 PM
Message Edited by timhsu on 03-18-2009 05:43 PM
I work for HP, supporting the HP Experts who volunteer their time and technical knowledge to help others.

I expected this to be released quite earlier. But now that it's in process, I'll wait patiently.
Make it easier for other people to find solutions, by marking my answer with \'Accept as Solution\' if it solves your problem.
Click on the BLUE KUDOS button on the left to say "Thanks"
I am an ex-HP Employee.

How to get user 'logged in' to ironport web filter without launching IE

We have an issue with some employees who use third party programs that traverse the Internet. These programs are 100% allowed by the organization as they are required for day to day business. Some programs go over the Internet to communicate for certain reasons, such as a live chat help support, or ordering products, etc..
The problem is that some of these users log in and never even touch Internet Explorer for awhile. They will go on and start working right away. Well if they don't try to access an Internet site via IE, then the Ironport does not 'log them in', and they are known as unauthenticated. Of course this doesn't happen with everyone. There's nothing wrong with people coming in a little early and checking the local news online.
We were thinking up if it's possible to have each user 'touch' the ironport web filter in some way during a logon script, unbeknown to the end user, so that they are 'signed in' and whatever Internet connected application they launch has access through to the Internet. Right now they need to at least launch IE and go to some site (say Google or MSN) and via NTLM credentials transparently passed through IE7, 8 or 9, they can simply close the page and go about their business. Note: they MUST go to an external site.... not an internally hosted one (such as our Intranet, time clock or HR self service pages).
So is there any commands we can put in via kix or bat or something that will say "Hey Ironport, %username% just logged in at 10.x.x.x". Then maybe to make it more advanced, a logoff script that says "Hey Ironport, %username% just logged OFF of 10.x.x.x". This way when our hourly timeout happens, they aren't immediately booted from their Internet applications (if they don't keep an IE window open that is).
Right now our ASA Firewall uses WCCP to forward port 80 to the ironport web filter. The Ironport is a transparent proxy.
Thanks!

So it looks like you are moving the authentication from the Ironport S160 to the ASA5500 series firewall?
I guess we are looking at something simpler, like a way to 'touch' the internet and pass NTLM credentials, because then the Ironport knows who the user is.
If the user does not 'touch' the internet with IE, and say they use some other program that does not pass NTLM credentials (say Firefox or live chat program, or an ftp program, etc...) They are likely to be blocked, because the Ironport doesn't know who they are.
Your link seems to lead to a complicated setup for something that seems so simple. I'm not sure how that relates to an Ironport S160.. it seems to focus on the ASA5500. Also we want it to be completely 100% transparent to the end user.
This is how it worked with a Barracuda web filter appliance...
A DCAgent program sat on each domain controller. As users logged in or out of the domain, this agent passed this current activity to the Barracuda web filter appliance.
The Barracuda appliance knew exactly who was logged in because of this little program on the domain controller(s) that kept it updated. Based on this, policies could be assigned based on Active Directory group memberships. ie) HR and Marketing can access Facebook, while others cannot.
I guess I'm looking for similar functionality with the Ironport S160. If there's any way the domain controller, or even the client PC can say "Hey Ironport, %username% is logged on here at %ip_address%". That way the Ironport would know who they are, and there would be no unnecessary authentication boxes (besides the user logging into the windows domain). They could use internet connected apps that do not pass NTLM authentication. I guess the client PC or the domain controller would also have to tell the IronPort when they signed off, just so we don't have to deal with authentication timeouts. This way, say they are in our internet chat help program... after an hour, it will cut out and disconnect them - because the IronPort forgets who they are (unless they are actively using the internet with IE).
So for now, we just use the bypass option for the affected internet services. The default browser is IE, so the reality is that we are not suffering any tremendous inconvienence. It's just that we want to ensure we have the best robust solution, and we can handle these types of situations with programs other than IE accessing internet resources.

Adobe Acrobat 8 and I Filter Question

Hello,
I have Adobe Acrobat 8 and I Filter 6.0 installed on a WinXP machine. I am also using Windows Search 4.0. My question is on how to create an embedded index of PDF files so that I may search with a keyword through 100 PDF files as an example. This is actually my last resort after searching thoroughly on the web. I have read articles ranging from editing the registry to how to create a single index within Adobe Acrobat for a single PDF file. Again I am looking to create one index that consists of multiple PDF files. If any can help me I would very much appreciate it. I just say to myself that at some point in time some programmer must have said to himself, can I search for a keyword through 20 PDF files on a desktop system or server?
Thank you,
Peter

Hey john,
Please try downloading Acrobat 8 from the following link:
Download Acrobat products | 9, 8
Regards,
Anubha

Guest WLAN and Web Auth?

Hi Guys,
Maybe someone can help me out?
I just finished setting up a trial "Cisco Virtual Wireless Controller" with nearly the same configuration as our Physical
"Cisco Wireless Controller" with the exception of having 2 ports. Anyhow, I managed to get everything working except for the WEB AUTH on the Guest WLAN. When a client connects, he gets a DHCP address from our ASA but when we try to get to a website, we never reach the WEB AUTH page.
What I tried so far is..
add a DNS Host Name to the virtual interface and assign it to our internal DNS server.dns name was resolving but we were unable to ping 1.1.1.1
changed the virtual ip from 1.1.1.1 to 2.2.2.2 and modified the DNS entrydns name resoved but still could not ping 2.2.2.2(I think this is normal)
changed the virtual IP to a private address of 192.168.102.1 and modified the dns entrysame result
I've attached some screenshots of our configuration.

Troubleshooting Web Authentication
After you configure web authentication, if the feature does not work as expected, complete these
troubleshooting steps:
Check if the client gets an IP address. If not, users can uncheck
DHCP Required
on the WLAN and
give the wireless client a static IP address. This assumes association with the access point. Refer to
the
IP addressing issues
section of
Troubleshooting Client Issues in the Cisco Unified Wireless
Network for troubleshooting DHCP related issues
1.
On WLC versions earlier than 3.2.150.10, you must manually enter
https://1.1.1.1/login.html
in
order to navigate to the web authentication window.
The next step in the process is DNS resolution of the URL in the web browser. When a WLAN client
connects to a WLAN configured for web authentication, the client obtains an IP address from the
DHCP server. The user opens a web browser and enters a website address. The client then performs
the DNS resolution to obtain the IP address of the website. Now, when the client tries to reach the
website, the WLC intercepts the HTTP Get session of the client and redirects the user to the web
authentication login page.
2.
Therefore, ensure that the client is able to perform DNS resolution for the redirection to work. On
Windows, choose
Start > Run
, enter
CMD
in order to open a command window, and do a nslookup
www.cisco.com" and see if the IP address comes back.
On Macs/Linux: open a terminal window and do a nslookup www.cisco.com" and see if the IP
address comes back.
If you believe the client is not getting DNS resolution, you can either:
Enter either the IP address of the URL (for example, http://www.cisco.com is
http://198.133.219.25)
♦
Try to directly reach the controller's webauth page with
https:///login.html. Typically this is http://1.1.1.1/login.html.
♦
Does entering this URL bring up the web page? If yes, it is most likely a DNS problem. It might also
be a certificate problem. The controller, by default, uses a self−signed certificate and most web
browsers warn against using them.
3.
For web authentication using customized web page, ensure that the HTML code for the customized
web page is appropriate.
You can download a sample Web Authentication script from Cisco Software Downloads. For
example, for the 4400 controllers, choose
Products > Wireless > Wireless LAN Controller >
Standalone Controllers > Cisco 4400 Series Wireless LAN Controllers > Cisco 4404 Wireless
LAN Controller > Software on Chassis > Wireless Lan Controller Web Authentication
Bundle−1.0.1
and download the
webauth_bundle.zip
file.
These parameters are added to the URL when the user's Internet browser is redirected to the
customized login page:
4.
ap_mac The MAC address of the access point to which the wireless user is associated.
♦
switch_url The URL of the controller to which the user credentials should be posted.
♦
redirect The URL to which the user is redirected after authentication is successful.
♦
statusCode The status code returned from the controller's web authentication server.
♦
wlan The WLAN SSID to which the wireless user is associated.
♦
These are the available status codes:
Status Code 1: "You are already logged in. No further action is required on your part."
♦
Status Code 2: "You are not configured to authenticate against web portal. No further action
is required on your part."
♦
Status Code 3: "The username specified cannot be used at this time. Perhaps the username is
already logged into the system?"
♦
Status Code 4: "You have been excluded."
♦
Status Code 5: "The User Name and Password combination you have entered is invalid.
Please try again."
♦
All the files and pictures that need to appear on the Customized web page should be bundled into a
.tar file before uploading to the WLC. Ensure that one of the files included in the tar bundle is
login.html. You receive this error message if you do not include the login.html file:
Refer to the Guidelines for Customized Web Authentication section of Wireless LAN Controller Web
Authentication Configuration Example for more information on how to create a customized web
authentication window.
Note:
Files that are large and files that have long names will result in an extraction error. It is
recommended that pictures are in .jpg format.
5.
Internet Explorer 6.0 SP1 or later is the browser recommended for the use of web authentication.
Other browsers may or may not work.
6.
Ensure that the
Scripting
option is not blocked on the client browser as the customized web page on
the WLC is basically an HTML script. On IE 6.0, this is disabled by default for security purposes.
7.
Note:
The Pop Up blocker needs to be disabled on the browser if you have configured any Pop Up
messages for the user.
Note:
If you browse to an
https
site, redirection does not work. Refer to Cisco bug ID CSCar04580
(registered customers only) for more information.
If you have a
host name
configured for the
virtual interface
of the WLC, make sure that the DNS
resolution is available for the host name of the virtual interface.
Note:
Navigate to the
Controller > Interfaces
menu from the WLC GUI in order to assign a
DNS
hostname
to the virtual interface.
8.
Sometimes the firewall installed on the client computer blocks the web authentication login page.
Disable the firewall before you try to access the login page. The firewall can be enabled again once
the web authentication is completed.
9.
Topology/solution firewall can be placed between the client and web−auth server, which depends on
the network. As for each network design/solution implemented, the end user should make sure these
ports are allowed on the network firewall.
Protocol
Port
HTTP/HTTPS Traffic
TCP port 80/443
CAPWAP Data/Control Traffic
UDP port 5247/5246
LWAPP Data/Control Traffic
(before rel 5.0)
UDP port 12222/12223
EOIP packets
IP protocol 97
Mobility
UDP port 16666 (non
secured) UDP port 16667
(secured IPSEC tunnel)
10.
For web authentication to occur, the client should first associate to the appropriate WLAN on the
WLC. Navigate to the
Monitor > Clients
menu on the WLC GUI in order to see if the client is
associated to the WLC. Check if the client has a valid IP address.
11.
Disable the Proxy Settings on the client browser until web authentication is completed.
12.
The default web authentication method is PAP. Ensure that PAP authentication is allowed on the
RADIUS server for this to work. In order to check the status of client authentication, check the
debugs and log messages from the RADIUS server. You can use the
debug aaa all
command on the
WLC to view the debugs from the RADIUS server.
13.
Update the hardware driver on the computer to the latest code from manufacturer's website.
14.
Verify settings in the supplicant (program on laptop).
15.
When you use the Windows Zero Config supplicant built into Windows:
Verify user has latest patches installed.
♦
Run debugs on supplicant.
♦
16.
On the client, turn on the EAPOL (WPA+WPA2) and RASTLS logs from a command window, Start
> Run > CMD:
netsh ras set tracing eapol enable
netsh ras set tracing rastls enable
In order to disable the logs, run the same command but replace enable with disable. For XP, all logs
will be located in C:\Windows\tracing.
17.
If you still have no login web page, collect and analyze this output from a single client:
debug client
debug dhcp message enable
18.
debug aaa all enable
debug dot1x aaa enable
debug mobility handoff enable
If the issue is not resolved after you complete these steps, collect these debugs and use the TAC
Service Request Tool (registered customers only) in order to open a Service Request.
debug pm ssh−appgw enable
debug pm ssh−tcp enable
debug pm rules enable
debug emweb server enable
debug pm ssh−engine enable packet

Wireless and web filter

Similar Messages

Maybe you are looking for