Financial Audit Internet Filter Test Failed

Discussions about Internet service providers (ISPs), the Meetinghouse Firewall, wired and wireless networking, usage, management, and support of Meetinghouse Internet
rssatterfield
New Member
Posts: 9
Joined: Sun Jun 29, 2008 4:36 pm

Financial Audit Internet Filter Test Failed

Postby rssatterfield » Wed Feb 05, 2014 2:24 pm

I received a call from a bishop last night during a financial audit saying the filter.lds.org test had failed. The auditor stopped the audit and has left it open until the problem can be resolved. This ward (and two others in our stake) are housed in an institute building where the network was overhauled last month (wireless beefed up, some Ethernet ports added, perhaps a new firewall). My understanding, in discussion with our FM Group manager, is that institute firewalls differ from meetinghouse firewalls. He does not know the details on those differences, however. Would an institute firewall give a failed result to a filter.lds.org test or has something been configured incorrectly at this building?

russellhltn
Community Administrator
Posts: 20778
Joined: Sat Jan 20, 2007 2:53 pm
Location: U.S.

Re: Financial Audit Internet Filter Test Failed

Postby russellhltn » Wed Feb 05, 2014 2:36 pm

rssatterfield wrote:My understanding, in discussion with our FM Group manager, is that institute firewalls differ from meetinghouse firewalls.

That would be correct, but I'd still expect some level of filtering to be in place.

You might try the old test of gambling.com. If that gets though, then clearly something is wrong.

Also be aware that if anyone has bookmarked the site incorrectly, you'll get a misleading result. (You have to be careful to bookmark the test site itself and not save the result page. Otherwise you can get a false positive.)
Have you searched the Wiki?
Try using a Google search by adding "site:tech.lds.org/wiki" to the search criteria.

lajackson
Community Moderators
Posts: 6148
Joined: Mon Mar 17, 2008 9:27 pm
Location: US

Re: Financial Audit Internet Filter Test Failed

Postby lajackson » Wed Feb 05, 2014 8:27 pm

And in the meantime, the auditor should mark the item No, make the proper notification (contact the STS, I think it says) and press on with the audit. There is no reason to stop the audit, especially when no one in the room has any ability to do anything about it.

rssatterfield
New Member
Posts: 9
Joined: Sun Jun 29, 2008 4:36 pm

Re: Financial Audit Internet Filter Test Failed

Postby rssatterfield » Wed Feb 05, 2014 11:13 pm

I spoke with an operator at the Global Service Center and he indicated that the institutes and seminaries have more permissive firewalls (called Legacy) that permit YouTube and Facebook, for example, than the meetinghouse firewalls (called Standard). I'm certain our institute building had a standard firewall before the big upgrade last month, which is why we did not experience the problem before. He said that for the purposes of the audit, it was correct to mark the computer as properly filtered. I did test gambling.com, which was blocked. YouTube was permitted. Thank you, everyone!

aclawson
Senior Member
Posts: 712
Joined: Fri Jan 19, 2007 6:28 pm
Location: Commerce Twp, MI

Re: Financial Audit Internet Filter Test Failed

Postby aclawson » Tue Mar 04, 2014 7:47 am

Same thing happened with me (I'm a ward finance clerk in addition to being the STS).

All firewall filtering passes through a gateway in SLC. Every simultaneous connection requires a separate license for the filtering system. There are only a finite number of these licenses. During the middle of the day on Sunday sometimes the number of simultaneous connections exceeds the number of licenses available. When this happens rather than deny internet access the filtering software fails open and allows unfiltered access to the internet. Until the lack of licenses is resolved in SLC the solution is to wait until later in the day and allow for the number of connections to drop at which point the firewall will start to work again without any intervention.

russellhltn
Community Administrator
Posts: 20778
Joined: Sat Jan 20, 2007 2:53 pm
Location: U.S.

Re: Financial Audit Internet Filter Test Failed

Postby russellhltn » Tue Mar 04, 2014 11:01 am

aclawson wrote:Same thing happened with me (I'm a ward finance clerk in addition to being the STS).

All firewall filtering passes through a gateway in SLC. Every simultaneous connection requires a separate license for the filtering system. There are only a finite number of these licenses. During the middle of the day on Sunday sometimes the number of simultaneous connections exceeds the number of licenses available. When this happens rather than deny internet access the filtering software fails open and allows unfiltered access to the internet. Until the lack of licenses is resolved in SLC the solution is to wait until later in the day and allow for the number of connections to drop at which point the firewall will start to work again without any intervention.

That certainly was the case, but I'm not sure as that's accurate with the new zFilter system. Right now, the important thing is to make sure any machines on a static IP have the correct DNS entered. Systems running DHCP should automatically be set.
Have you searched the Wiki?

Try using a Google search by adding "site:tech.lds.org/wiki" to the search criteria.


Return to “Meetinghouse Internet”

Who is online

Users browsing this forum: No registered users and 1 guest