+ Post New Thread
Results 1 to 4 of 4
Internet Related/Filtering/Firewall Thread, Blocking Google SSL Search for Schools in Technical; Google SafeSearch and SSL Search for Schools Has anyone had any experience of blocking https / 443 / SSL / ...
  1. #1

    Join Date
    Feb 2012
    Posts
    13
    Thank Post
    2
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Blocking Google SSL Search for Schools

    Google SafeSearch and SSL Search for Schools

    Has anyone had any experience of blocking https / 443 / SSL / Google either using ISA / TMG 2010 or SWGFL?

    I just phoned SWGFL and they said it wasn't something they could do though the "Web Access Policy".

    When I try and add a rule in TMG using the below format it does not work (TMG states URLs included in this set (applicable for HTTP traffic only))

    Code:
    http://www.google.co.uk:443

  2. #2

    rob_f's Avatar
    Join Date
    May 2008
    Location
    Leeds
    Posts
    224
    Thank Post
    15
    Thanked 73 Times in 56 Posts
    Rep Power
    25
    Processing domain name sets and URL sets suggests that the only way you can block HTTPS sites by domain is to provide it in a Domain Name and URL Set without protocol and a slash at the end, e.g. rather than "https://www.google.co.uk/" just put "google.co.uk". Which will of course then block plain HTTP google...

    Essentially what's saying is that as soon as you stick a slash on the end or protocol in front, it is then a URL and can only be matched against HTTP. The only way a proxy/filter can block HTTPS by URL is using HTTPS Inspection/SSL Decryption.

    You can try blocking "encrypted.google.com" but I don't know if that covers 100% of the secure search angles.

  3. #3

    Join Date
    Dec 2011
    Location
    henselkp2001
    Posts
    10
    Thank Post
    1
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    A modify URL regex filter
    "^https://www(.google.com.*$)"->"https://nosslsearch\1"

    and blocking encrypted.google.com

    fixed the ssl issue for me.

  4. #4

    Join Date
    Dec 2011
    Location
    henselkp2001
    Posts
    10
    Thank Post
    1
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    I ended up changing the regex slightly to this.

    "^https://www(\.google\..*)"->"https://nosslsearch\1"
    "(^http://[^/]*www\.google.*\?.*)"->"\1&safe=vss"
    "(^http://[^/]*bing.*\?.*)"->"\1&adlt=strict"
    "(^http://[^/]*yahoo.*\?.*)"->"\1&vm=r"

    Quote Originally Posted by henselkp2001 View Post
    A modify URL regex filter
    "^https://www(.google.com.*$)"->"https://nosslsearch\1"

    and blocking encrypted.google.com

    fixed the ssl issue for me.

SHARE:
+ Post New Thread

Similar Threads

  1. Free SSL Certificates for JANET connected schools
    By Dos_Box in forum Wireless Networks
    Replies: 25
    Last Post: 29th April 2013, 03:26 PM
  2. Free SSL Certificates for schools!!
    By matt40k in forum Wireless Networks
    Replies: 17
    Last Post: 16th January 2012, 08:28 PM
  3. Replies: 17
    Last Post: 29th September 2011, 02:39 PM
  4. Google Earth plus for schools
    By Dos_Box in forum Educational Software
    Replies: 4
    Last Post: 23rd January 2008, 11:28 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •