Blocking Google SSL Search for Schools

[purkle_turkle]

Google SafeSearch and SSL Search for Schools

Has anyone had any experience of blocking https / 443 / SSL / Google either using ISA / TMG 2010 or SWGFL?

I just phoned SWGFL and they said it wasn't something they could do though the "Web Access Policy".

When I try and add a rule in TMG using the below format it does not work (TMG states URLs included in this set (applicable for HTTP traffic only))

http://www.google.co.uk:443

[rob_f]

Processing domain name sets and URL sets suggests that the only way you can block HTTPS sites by domain is to provide it in a Domain Name and URL Set without protocol and a slash at the end, e.g. rather than "https://www.google.co.uk/" just put "google.co.uk". Which will of course then block plain HTTP google...

Essentially what's saying is that as soon as you stick a slash on the end or protocol in front, it is then a URL and can only be matched against HTTP. The only way a proxy/filter can block HTTPS by URL is using HTTPS Inspection/SSL Decryption.

You can try blocking "encrypted.google.com" but I don't know if that covers 100% of the secure search angles.