Best filtering solution to stop pesky students!

[JJanisch]

Hi guys,

 

We're using SWGFL filtering here and the idea of unblocking YouTube/Twitter for staff is now being pushed on me, reluctantly, however of course I don't want to have all hell break loose when the kids figure out that it will also be unblocked for them. What is the best (as in cheapest/free and easiest!) solution you would use in this case, to filter based on AD group or location? I really don't need much control or feedback etc, just a blacklist and that's it I see some big software around but it' a little OTT for the sake of two websites!

[Steve21]

Johan, Depends how much access you want them to have to it, but can just stick it in the students internet settings group as a Restricted site, so it'll block all addons/scripts running aka flash etc, or re-route the DNS for them to a fake IP

 

If you want 100% blocked of it, can add it to the content advisor settings too, and never allow access. Will restrict it for them unless they enter supervisor password etc

 

Steve

[bobt]

Do you guys not have Staff Proxy access?

 

http://esi.swgfl.org.uk/support/technicalarticle.asp?cref=tec2299554

[Steve21]

Do you guys not have Staff Proxy access (CS Error Page

 

We do But we don't give it out to teachers

 

Steve

[bobt]

Haha, fair enough.

Well it's a very dirty solution, but I've seen another school allow Youtube and then in the student GPO's, added *.youtube.com and all related youtube URL to the proxy exception list so it never hits the internet. However, as soon as you have BYOD, it fails.

 

Realistically though, you need to investigate what your ISP can offer and the alternatives on the market as I know SafetyNet is very basic.

[Steve21]

Aye, but the school in question is only a junior so they aren't running ISA/TMG/UTMG etc and knowing their spending habits they wouldn't just for YouTube, would just unblock it for everyone

 

Steve

[witch]

I'm not sure I understand. If you want to unblock YouTube and Twitter then why not let them use the staff proxy?

[localzuk]

If the OP is anything like us, giving out staff proxy details isn't done because a) its a faff to set up and manage yet another system and b) we don't want them to have completely unfettered access to the web, but we want them to have a slightly higher level of access than pupils.

 

I do it here by unfiltering the sites in Safetynet Plus, then having an intermediary proxy server running Squid, which is connected to our AD which looks at group membership of people using the server, to filter further for pupils.

 

Only issue is that it a) requires a server running Squid and b) its a faff to configure in the first place!

[Boredguy]

We provide our staff with the SWGfL Staff Proxy details. Only takes a minute to set the account up when a new member of staff starts.

However we already have youTube and Twitter unfiltered on Safetynet as LT previously insisted classes could access youTube unhindered (this was before the days of the Educational YouTube). Last year they wanted staff to be able to access Twitter to post information and for it to be visible to students. We spent ages with SWGfL trying to just get a specific thread unblocked, but they failed so we had to open the lot up.

But as we run Impero, all our student workstation have a rule to prevent the main Twitter website from being loaded, which means our main website that has embedded Tweets displays happily.

 

Putting a squid box in that the students would go though before hitting the SWGfL filter is the cheapest solution, as you can just use the GPO to point their accounts to that box, and only takes about 2 hours to setup from scratch.

[JJanisch]

Johan, Depends how much access you want them to have to it, but can just stick it in the students internet settings group as a Restricted site, so it'll block all addons/scripts running aka flash etc, or re-route the DNS for them to a fake IP

 

If you want 100% blocked of it, can add it to the content advisor settings too, and never allow access. Will restrict it for them unless they enter supervisor password etc

 

Steve

 

I used content ratings to block the URLs, might have to look into a better solution later but while there is no BYOD and I can add the deny list to apple configurator to deal with the iPads, that's all bases covered.

 

Cheers Stephanie.

 

Edit: Subway on me?

Edited September 23, 2014 by JJanisch

[witch]

SLT are just debating whether to unlock the staff proxy for all.

Do you have to have a separate account for each person or is that just for monitoring purposes?

[Steve21]

I used content ratings to block the URLs, might have to look into a better solution later but while there is no BYOD and I can add the deny list to apple configurator to deal with the iPads, that's all bases covered.

 

Cheers Stephanie.

 

Edit: Subway on me?

 

None near me anymore *cries*

 

Will have to visit soon, you owe me one!

 

Steve

[JJanisch]

SLT are just debating whether to unlock the staff proxy for all.

Do you have to have a separate account for each person or is that just for monitoring purposes?

 

I would recommend one per staff member so that they are fully responsible for any content that they view - it works as a good scare tactic when you read the logged on message and they should be a lot more responsible with unfiltered net. I would want each user to be responsible and encourage that they do not share accounts (and thus their password should NEVER reach another person), plus you may not want certain staff members to have access to staff proxy (especially if they abuse it) but with a shared account there's no reason why another staff member wouldn't give them (or a snooping student) access.

Edited September 23, 2014 by JJanisch

[JJanisch]

None near me anymore *cries*

 

Will have to visit soon, you owe me one!

 

Steve

 

Let's do it. What time do you finish work on a Friday? Can't do this Friday but jw. Ah still need to view your house as well, you best have moved in already. Also BMT £2 noms!

[Boredguy]

Yes there is Steve, you just need to drive into Old Town.

[Boredguy]

SLT are just debating whether to unlock the staff proxy for all.

Do you have to have a separate account for each person or is that just for monitoring purposes?

 

I give each member of staff their own username and let it generate the password when it e-mails them.