>but see if we can route the web traffic through our on-prem mx250 and ...   I would not personally do this.  And I would also not use a firewall to protect the website.  I would look at using a WAF.  In your case, I would look at Azure WAF or maybe CloudFlare.   https://azure.microsoft.com/en-us/products/web-application-firewall   https://www.cloudflare.com/lp/ppc/waf-x/   ... View more

Looks like wiping the chromebooks worked for us. Ultimately getting the latest OS may be what it needed. ... View more