chekmate1984 Posted March 7, 2014 Posted March 7, 2014 Has anyone noticed chrome allows you to website where as internet explorer denies? I just saw a kid on facebook on chrome but its blocked in IE anyone had similar issues?
localzuk Posted March 7, 2014 Posted March 7, 2014 Never had that issue, as blocking is done by a proxy upstream - so it can't be the browser. Are you sure it was actually facebook.com or was it a proxied version of facebook?
chekmate1984 Posted March 7, 2014 Author Posted March 7, 2014 i saw the Facebook login screen didn't see them log in and also it was facebook.com nothing else in the address bar so got confused! unless they clicked on cached site
localzuk Posted March 7, 2014 Posted March 7, 2014 How do you enforce filtering there? Can students change the proxy server? Is it enforced in Chrome etc...?
chekmate1984 Posted March 7, 2014 Author Posted March 7, 2014 theres no proxy, ive left it blank as we dont have proxy server here. i dont think they can change proxy settings not tested in chrome but if we dont have proxy even if they can change the proxy would that bypass things?
Gibson335 Posted March 7, 2014 Posted March 7, 2014 Make sure they haven't added the Zen**** extension - allowing them to bypass everything. I can't type the word because the thread will be filtered out otherwise.
rickypike Posted March 7, 2014 Posted March 7, 2014 We had some kids here who were running 'Chrome Portable' off a memory stick which bypassed our web filtering / proxy. Made some network changes and implemented Applocker to stop them.
Oaktech Posted March 7, 2014 Posted March 7, 2014 If you want to be double sure, block the address in the blacklist in the Chrome GPO. I've found it to be more effective on certain google sites than the filtering!
BromleyTech Posted March 7, 2014 Posted March 7, 2014 I would recommend blocking facebook.com & https://173.252.64.0-173.252.127.255 through WebScreen. If Chrome presents an IP address to the filtering system, Facebook may be accessible. Particularly if the categories social networking & host is an IP are allowed for the relevant policy. 1
JPElectron Posted March 7, 2014 Posted March 7, 2014 Could be a chrome extension... In any case, blocking by DNS eliminates the problem of "is the proxy set or not" or "is the site HTTPS or not"
techy32 Posted March 8, 2014 Posted March 8, 2014 We are also informed that chrome bypass websites which are blocked by IE.
localzuk Posted March 8, 2014 Posted March 8, 2014 As I said earlier - how is your blocking being performed? In my experience, blocking is usually done 'upstream' from the client - ie. via a proxy (be it transparent or non-transparent to the end user). What kind of filtering system only works via IE?
techy32 Posted March 8, 2014 Posted March 8, 2014 We are on LGFL network but using our own filtering system Websense internally which works fine with IE and Firefox. We are using proxy server ISA 2006.
psydii Posted March 8, 2014 Posted March 8, 2014 Is there a chrome plugin that acts as a local proxy which tunnels out on 443 to a hitherto unknown proxy service?
techy32 Posted March 8, 2014 Posted March 8, 2014 This is what I am also thinking ... I have already blocked Firefox addons.... I will keep an eye on kids and watch their screen and find out more about it.
mattysmith80 Posted March 8, 2014 Posted March 8, 2014 Had the same problem here.... Figured out kids were installing chrome extensions and bypassing the filtering... Quick import of the latest ADMX files and then blocked all extensions by putting a * in the blacklist.... Job done
techy32 Posted March 9, 2014 Posted March 9, 2014 Can you please explain further about ADMX? How and which one? Any guide available to do this?
RichS Posted March 10, 2014 Posted March 10, 2014 I would recommend blocking facebook.com & https://173.252.64.0-173.252.127.255 through WebScreen. If Chrome presents an IP address to the filtering system, Facebook may be accessible. Particularly if the categories social networking & host is an IP are allowed for the relevant policy. Just to add to this, I've done this locally and it stops all requests to Facebook, so thanks BromleyTech. Unless they have a browser extension added then this is as much as you can do really. Do you have the category host is an ip allowed at all?
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now