FHC + 881w + Filtering Problem

In one of the buildings there is an official FHC and two wards all behind a (verified to function) 881w.

Tivoli for FHC will not install
Sophos 10 for FHC will not install

These two have the validate function built in and checks for the firewall (881w) to be in place and filtering. BOTH come up and state that these systems must be on and filtered by the churches firewall, and they are.

When I goto to firewall.lds.org it states the filter is working GCH is at a loss on this issue.

So I go over to the two clerk computers and notice that Tivoli is not present on either one of them. So I go to MLS.LDS.ORG and re-download Tivoli for the Clerk computers - still a no show. Both task mgr and services do not show it running.

I am kinda puzzled here.

This was all discovered because I went out to fix a FHC printer and noticed the blue icon was missing on the computer.

CHQ is able to control the 881 (send and receive commands including a reset)

By any chance, is this firewall also supporting some kind of office for a LDS Employee, such as Institute, FM Group or Family Services? That may result in some different scripting for the firewall that may be confusing the software.

No, two wards and a FHC. Its really odd, i think I will request a hard rest and start over.

I've flagged someone who knows about the deployments to have a look.

rolandc wrote:No, two wards and a FHC. Its really odd, i think I will request a hard rest and start over.

Roland. Can you send me the 881w serial number?

Thanks

Brad

Building number: 5294584-01
2300-2499 9th St
HAINES CITY, FLORIDA
UNITED STATES

Firewall Model: 881W
Firewall Serial Number: FTX15508101


Internet Service Provider (ISP): BrightHouse
Support Phone:
Account Number:
Circuit ID:
Connection Type: CABLE
Upload Speed: 4
Download Speed: 7

bradhokanson wrote:Roland. Can you send me the 881w serial number?

Thanks

Brad

Lynn stated last week that he was turning support back over to L3,

He may not respond to your post there.

RussellHltn wrote:I've flagged someone who knows about the deployments to have a look.

rolandc wrote:Lynn stated last week that he was turning support back over to L3,

Yes, the response I got back was to call FamilySearch support and work with a tier 3 person.

But in a separate message, it looks like he may have turned off that check. So I'd re-download the install package and try again first.

RussellHltn wrote:Yes, the response I got back was to call FamilySearch support and work with a tier 3 person.

But in a separate message, it looks like he may have turned off that check. So I'd re-download the install package and try again first.

I have already called them, twice now. I will try it again. However if it is fixed, landesk will install it on its own. After replacing 7 computers in the other FHC, landesk will install it.

ronaldc, do you find solution?

I have the same issue. I'm trying to install Tivoli for FHC and Sophos 10 for FHC, but neither first nor second package can't proseed to installtions. "This is computer is not web filtered." Is call to GSC only one option?

Make sure that you have the most recent download from FamilySearch for those files. They keep changing them in response to problems found.

bronislav wrote:ronaldc, do you find solution?

I have the same issue. I'm trying to install Tivoli for FHC and Sophos 10 for FHC, but neither first nor second package can't proseed to installtions. "This is computer is not web filtered." Is call to GSC only one option?

I have a partial solution, that only applies to the FHC computers. Also will have a limited affect on any church connected computers. Main problem was a recent small update sent out to the 881w's, if you try to access a blocked page and get a screen that says "Session Timeout" then that 881 is affected. All you have to do is call CHQ and ask them to change the filter level in your 881 from "General to Legacy" wait one minute and change it back. I have had three of our 881's affected by this and it does work.

After fixing the web filter both Tivoli and Sophos install as they should.

RussellHltn wrote:Make sure that you have the most recent download from FamilySearch for those files. They keep changing them in response to problems found.

Tried that right before calling again, did not help.

Saw the workarond, and that indicates to me something is still out there that is related to the 5505's as I've seen that 'session timeout' message appear on an FHC network at a standalone FHC that still has a 5505.

The blocked site was a Youtube video embedded using standard embed code from Youtube itself is on the billiongraves.com website (BillionGraves is a FamilySearch affiliate). Sometimes I see the proper filtering message, sometimes I see the 'session timeout' message where that embedded Youtube video would appear when I work on the site at home (they have an indexing-type page on the site where you transcribe headstone inscriptions).

So I think the filtering may actually still be there, but something else is going on, and if so is it something that makes the other security software overall think it's still on an ASA 5505?