+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 16
Internet Related/Filtering/Firewall Thread, Unfilter <SITE> for <USERS> without staffproxy in Technical; Hello all, This may seem like I'm going 'full r3t4rd man.. never go full r3t4rd' &lt; 1337 speak never gets ...
  1. #1
    Fleetwood's Avatar
    Join Date
    Feb 2012
    Posts
    757
    Thank Post
    189
    Thanked 107 Times in 58 Posts
    Rep Power
    44

    Unfilter <SITE> for <USERS> without staffproxy

    Hello all,

    This may seem like I'm going 'full r3t4rd man.. never go full r3t4rd' < 1337 speak never gets old, but back to the topic. I've been asked if YouTube can be unblocked for specific staff members as well as for a specific PC. They're adamant that logging in with the staff proxy (SWGfL) isn't feasable and would like it to be automatic.

    Can anybody shed some light if it'd be at all possible to unfilter YouTube without the need for authentication, but only for specific users? I know full well the whole point of the staff proxy and I'm not agreeing with what I'm asking here but I'm doing it out of curiousity, can't really be bothered with grumpy SMT this week!

    Cheers.
    Last edited by Fleetwood; 13th November 2012 at 10:50 AM.

  2. #2

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,689
    Thank Post
    756
    Thanked 1,715 Times in 1,526 Posts
    Rep Power
    438
    Without some form of authentication to a service somewhere then no it's not possible.

    It could be more seamless if you had on site filtering supporting ntlm/kerberos but doesn't sound like you do.

    Ben

  3. Thanks to plexer from:

    Fleetwood (13th November 2012)

  4. #3
    Fleetwood's Avatar
    Join Date
    Feb 2012
    Posts
    757
    Thank Post
    189
    Thanked 107 Times in 58 Posts
    Rep Power
    44
    Unfortunately on-site filtering won't happen here.. we're cheapskates ;D I already had the Staff Proxy setup anyway as I knew it'd most likely be the only method, but curiosity to ask never hurts!

    Thanks for your quick reply Ben time to go and be the bearer of bad news to already-grumpy SMT. Highway To The Danger Zone?

  5. #4

    Join Date
    Dec 2009
    Posts
    914
    Thank Post
    98
    Thanked 185 Times in 160 Posts
    Rep Power
    55
    Quote Originally Posted by TBlax View Post
    Unfortunately on-site filtering won't happen here.. we're cheapskates ;D I already had the Staff Proxy setup anyway as I knew it'd most likely be the only method, but curiosity to ask never hurts!

    Thanks for your quick reply Ben time to go and be the bearer of bad news to already-grumpy SMT. Highway To The Danger Zone?
    No point them being grumpy about this, tell them to put their hand in their pockets and get you the tools onsite to do the job they are asking you to do. If not its tough if something can't be done

  6. #5
    eddyc's Avatar
    Join Date
    Aug 2008
    Location
    Bristol
    Posts
    445
    Thank Post
    105
    Thanked 49 Times in 45 Posts
    Rep Power
    22
    If you have an EES agreement you can use Forefront TMG as an internal proxy.
    Allow YouTube at SWGFL for eveyone - then filter it for all bar certain users \ machines on the TMG box.
    That's how we have it set up. The logs you can pull off from the TMG box per user \ site are really good for audit purposes too!

    :-)

  7. Thanks to eddyc from:

    Fleetwood (13th November 2012)

  8. #6

    Join Date
    Dec 2009
    Posts
    914
    Thank Post
    98
    Thanked 185 Times in 160 Posts
    Rep Power
    55
    Quote Originally Posted by eddyc View Post
    If you have an EES agreement you can use Forefront TMG as an internal proxy.
    Allow YouTube at SWGFL for eveyone - then filter it for all bar certain users \ machines on the TMG box.
    That's how we have it set up. The logs you can pull off from the TMG box per user \ site are really good for audit purposes too!

    :-)
    Then why not go the extra step and get a clean feed from SWGFL and filter yourself entirely? Just curious your thoughts on it

    Having never used Forefront TMG would you rely on that to do 100% of your filtering or is it not as advanced as a Smoothwall box, for example?

  9. #7

    Oaktech's Avatar
    Join Date
    Jul 2011
    Location
    Bournemouth
    Posts
    3,216
    Thank Post
    943
    Thanked 644 Times in 503 Posts
    Rep Power
    288
    Quote Originally Posted by RTFM View Post
    Then why not go the extra step and get a clean feed from SWGFL and filter yourself entirely? Just curious your thoughts on it


    Having never used Forefront TMG would you rely on that to do 100% of your filtering or is it not as advanced as a Smoothwall box, for example?
    because love or hate swgfl their education based block lists are worth their weight in gold... we only filter really tricky things on our isa/tmg boxes.

  10. Thanks to Oaktech from:

    Fleetwood (13th November 2012)

  11. #8

    Join Date
    Dec 2009
    Posts
    914
    Thank Post
    98
    Thanked 185 Times in 160 Posts
    Rep Power
    55
    Quote Originally Posted by Oaktech View Post
    because love or hate swgfl their education based block lists are worth their weight in gold... we only filter really tricky things on our isa/tmg boxes.
    Fair enough, we arent an SWGFL school anyway but we stepped out of our LEA offering and went with BT

  12. #9
    Fleetwood's Avatar
    Join Date
    Feb 2012
    Posts
    757
    Thank Post
    189
    Thanked 107 Times in 58 Posts
    Rep Power
    44
    Quote Originally Posted by eddyc View Post
    If you have an EES agreement you can use Forefront TMG as an internal proxy.
    Allow YouTube at SWGFL for eveyone - then filter it for all bar certain users \ machines on the TMG box.
    That's how we have it set up. The logs you can pull off from the TMG box per user \ site are really good for audit purposes too!

    :-)
    I have no idea if we've got an EES Agreement or not, how does one obtain it? (Sorry for the silly question, 'PFY' here!) - Boss isn't in until Thursday so I'll ask him if we have one. I've heard of Forefront before but never realised it could be used as that, that's brilliant whether we could convince them to pay for the tools is another story. It's a pain in the arce really, they complain and demand to have things put in place - we give them a solution and unless it has the word 'FREE' stamped on it they won't bother. Vicious cycle!

    As what @Oaktech said, @RTFM. SWGfL have a few uses. Albeit a few, but the filtering service does make life easier and credit due to them, they do have everything covered - one less thing to be responsible for!
    Last edited by Fleetwood; 13th November 2012 at 03:09 PM.

  13. #10

    Join Date
    Oct 2010
    Location
    Dorset
    Posts
    31
    Thank Post
    14
    Thanked 2 Times in 1 Post
    Rep Power
    9
    Quote Originally Posted by eddyc View Post
    If you have an EES agreement you can use Forefront TMG as an internal proxy.
    Allow YouTube at SWGFL for eveyone - then filter it for all bar certain users \ machines on the TMG box.
    That's how we have it set up. The logs you can pull off from the TMG box per user \ site are really good for audit purposes too!

    :-)
    Hi,

    We are looking to do the same (no staff proxy, configure youtube access though an ISA type box), I have youtube edu with ISA 2006 / header redirection working BUT enabling youtube via swgfl also enables the https connection to all of youtube, which I can't seem to block unless I enter an IP range ... which causes more problems as they are shared with Google.... Does TMG enable you to block https traffic to the https youtube url ? (without the need to install a firewall client?). How have you got this working for your school ?

    Many thanks in advance for any tips ! (Before I commit to a Smoothwall demo!)

  14. #11

    Steve21's Avatar
    Join Date
    Feb 2011
    Location
    Swindon
    Posts
    2,824
    Thank Post
    372
    Thanked 544 Times in 507 Posts
    Rep Power
    184
    Quote Originally Posted by drdos256 View Post
    Hi,

    We are looking to do the same (no staff proxy, configure youtube access though an ISA type box), I have youtube edu with ISA 2006 / header redirection working BUT enabling youtube via swgfl also enables the https connection to all of youtube, which I can't seem to block unless I enter an IP range ... which causes more problems as they are shared with Google.... Does TMG enable you to block https traffic to the https youtube url ? (without the need to install a firewall client?). How have you got this working for your school ?

    Many thanks in advance for any tips ! (Before I commit to a Smoothwall demo!)
    We've been playing with YouTube Edu recently, and you can block HTTPS access via TMG while allowing http, however this will stop you logging into YouTubeEdu settings, so you can't allow teachers to request videos etc, but you can still do this via normal staffproxy etc for yourselves etc etc.

    Steve

  15. Thanks to Steve21 from:

    drdos256 (4th January 2013)

  16. #12
    TheScarfedOne's Avatar
    Join Date
    Apr 2007
    Location
    Plymouth, Devon
    Posts
    1,121
    Thank Post
    753
    Thanked 176 Times in 159 Posts
    Blog Entries
    78
    Rep Power
    86
    Yes to the above. Im using the URL categorisation to allow and block categories of websites. You can also allow an "override" to staff users on some of the category rules in tmg. One small problem is that TMG is now an end of life project so unless you are already using it - I would suggest smoothwall, which I will also be moving to at some point in the future (when it can do the same sso that tmg can do with sharepoint, exchange etc all via one url... which is supposed to be coming soon).

  17. Thanks to TheScarfedOne from:

    drdos256 (4th January 2013)

  18. #13

    Join Date
    Oct 2010
    Location
    Dorset
    Posts
    31
    Thank Post
    14
    Thanked 2 Times in 1 Post
    Rep Power
    9
    Quote Originally Posted by Steve21 View Post
    We've been playing with YouTube Edu recently, and you can block HTTPS access via TMG while allowing http, however this will stop you logging into YouTubeEdu settings, so you can't allow teachers to request videos etc, but you can still do this via normal staffproxy etc for yourselves etc etc.

    Steve
    Excellent - many thanks

  19. #14

    Join Date
    Oct 2010
    Location
    Dorset
    Posts
    31
    Thank Post
    14
    Thanked 2 Times in 1 Post
    Rep Power
    9
    Quote Originally Posted by TheScarfedOne View Post
    Yes to the above. Im using the URL categorisation to allow and block categories of websites. You can also allow an "override" to staff users on some of the category rules in tmg. One small problem is that TMG is now an end of life project so unless you are already using it - I would suggest smoothwall, which I will also be moving to at some point in the future (when it can do the same sso that tmg can do with sharepoint, exchange etc all via one url... which is supposed to be coming soon).
    We have had the option to use TMG, but have not had the inclination to implement it..... until now ! Appreciate that it's "discontinued", but I need something before justifying the cost of purchasing Smoothwall in next years budget. Many thanks for the info, I will do a test install next week !

  20. #15
    TheScarfedOne's Avatar
    Join Date
    Apr 2007
    Location
    Plymouth, Devon
    Posts
    1,121
    Thank Post
    753
    Thanked 176 Times in 159 Posts
    Blog Entries
    78
    Rep Power
    86
    no prob, if you need any help on the config, feel free to drop me a line



SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Replies: 6
    Last Post: 11th December 2009, 10:25 AM
  2. Replies: 8
    Last Post: 12th February 2009, 04:54 PM
  3. Sharepoint - Hide search for certain users/groups
    By bmdixon in forum Virtual Learning Platforms
    Replies: 1
    Last Post: 3rd December 2008, 01:07 PM
  4. Replies: 13
    Last Post: 18th October 2007, 02:09 PM
  5. Replies: 1
    Last Post: 16th February 2006, 10:57 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •