Google safe search...stopped working again!

[Dilbert]

To add to this, we have just found a problem with both our Fortigate units, they are both now allowing images in that are not what we would like, safe search had stopped. Is anyone else getting this problem? I have been in touch with another school who use SonicWall and they are getting the same. It only appears to be google...

[AngryTechnician]

No problems with Google Safesearch here on our Smoothwall, either on image search or otherwise.

[mattysmith80]

Have you checked if your connecting to a https or http google session.

If its https then it won't be able to inspect the packets properly

[Dilbert]

Matty, thanks its on the HTTPS side of google, but it worked a few weeks ago and we've changed nothing!

I can use the FG to do deep packet inspection, but thats a bit over kill!

[Arthur]

If you use Google Chrome, you can force 'Safe Search' via the following policy (or through the ADM/ADMXs).

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome]
"ForceSafeSearch"=dword:00000001

We force Safe Search on our Smoothwall proxy, but it's good to have a backup.

[Dilbert]

Thanks Arthur, but our school management system only works on IE so that's our default browser.... The Fortigate has the option for safe search, but as i've said it just stopped forcing it!

Does anyone on here have a FortiGate that can confirm or deny the problem?

[grant_girdwood]

Have you tried denying access to HTTPS and forcing them to go through the HTTP side of Google?

You'll need to create a CNAME entry for Google to redirect to nosslsearch.google.com

To utilize the no SSL option for your network, configure the DNS entry for Google to be a CNAME for nosslsearch.google.com.

We will not serve SSL search results for requests that we receive on this VIP. If we receive a search request over port 443, the certificate handshake will complete successfully, but we will then redirect the user to a non-SSL search experience along with an initial message explaining so.

All customization and personalization is dependent on SSL availability, thus some features may be absent. Utilizing the non-SSL address will not affect other Google services outside of Search. Signing into Gmail, Google Apps and authenticating to different services will continue to work (and will occur over SSL).
Utilizing the NoSSLSearch VIP will not affect other Google services outside of Search. Logging into Google Apps and authenticating to different services will continue to work (and will occur over SSL).

Blocking access

When students search using https://encrypted.google.com, content filtering systems in place on your network may not be able to read their searches or Google’s response. If this is problematic for your school, you can block https://encrypted.google.com. When students continue to search using Google, your content filtering will work as it always has in the past.

Google SafeSearch and SSL Search for Schools - Web Search Help

[mats]

RM Smartcache is blocking all safesearch and bing images and yahoo image results now. Call logged. Expectations low.