Hi all. I have been using UTM for several years (going back to version 6) in a K-12 school district. We have both eDirectory and AD domains (not ideal, but we manage). Several years a go we switched from standard mode with eDir SSO authentication to transparent mode for various reasons (eDir issues, and to more easily facilitate ipads). To control different user levels, we simply created separate VLANs for students/faculty/administrators and filter accordingly. We even have the student networks subdivided into elementary, middle, and high to accommodate different filtering levels. It has been working great and we simply segregate the devices to the appropriate vlan (student network, faculty network, etc...)
Enter 1:1 ipad deployment and the administrations desire to force the ipads through our proxy even when the students take them home. The only way I know of doing this is to force a profile on the ipads that locks safari to use a proxy setting (which we can do). However, That would require a need for standard mode all the time as there is no method to change settings on the ipad for internal vs external access (either it is set to use a proxy, or it isn't) Which means all other devices on the same VLAN internally will now have to be changed to use proxy settings and standard mode, correct?
OR, can I have two profiles that allow the same network - one transparent, one standard? Leave the existing internal machines using transparent, and the ipads pointing to proxy using 8080 using a standard mode proxy profile. I don't think I can get away with that, can I? I suppose we could simply create yet another vlan just for the ipads and move them to that... or just change our entire infrastructure back to standard mode, but that would be a LOT of work.
Am I overthinking this? is there an easier solution?
This thread was automatically locked due to age.
