If you use the Smoothwall Filter and Firewall, you might experience some connectivity issues when starting up Classroom Manager.
You need to place 'Smoothwall Products' into a Do not inspect policy and also into an Allow policy.
Procedure
- Create a HTTPS Inspection policy with these settings, see our help topic, Creating HTTPS inspection policies:
- Who: Everyone*
- What: Smoothwall Products
- Where: Everywhere*
- When: Always*
- Action: Do not inspect
*Please change as necessary
- Move the policy to above the Decrypt and Inspect policy in the HTTPS inspection policies table, see our help topic, Managing HTTPS inspection policies:
- Put the category into an Allow policy, see our help topic, Creating web filter policies:
- Who: Everyone*
- What: Smoothwall Products
- Where: Everywhere*
- When: Always*
- Action: Allow
*Please change as necessary
- Move the new policy to the top of the Web Filter policies table, see our help topic, Managing web filter policies:
- Allow access to TCP/UDP port 5349 & 3478 and UDP on 19302 by creating a new service object manager with these settings, see our help topic, Creating service objects or groups:
- Name: Classroom Manager
- Add new service: "TCP&UDP"
- Add number:
- 5349
- 3478
*Click Add after entering each number.
- Add new service: "UDP"
- Add number: 19302
- Create a firewall rule with these settings at the top of the table, see our help topic, Adding new Smoothwall Firewall rules:
- Name: Classroom Manager
- Source IP addresses: Any*
- Inbound interfaces: Select "All internal interfaces" or a specific LAN interface(s)*
- Destination IP addresses: Any*
- Outbound interfaces: Select "All external interfaces" or a specific external connection/IP*
- Services: Classroom Manager
- Applications: Do not select anything
- Groups: Any*
- Action: Accept
*Please change as necessary. Leaving the setting blank lets any address or interface through.
NOTE: When the Smoothwall Filter and Firewall is also in use as a router between internal networks and teacher devices are on a separate internal subnet from student devices, we recommend that you add an additional rule which allows the Classroom manager service ports to be accessed between the subnets. Same steps as above but select the specific internal interfaces as inbound and outbound.