edie209 Posted October 20, 2014 Posted October 20, 2014 Has anyone had this problem we are unable to block this site https://sites.google.com/site/punblockedgames/home. We use Lightspeed via Talk Straight and at this moment in time there seems to be no solution. Has anyone else had this issue have you got around it? if so how?
Manny-Tech Posted October 20, 2014 Posted October 20, 2014 We had a similar problem with another games URL, we ended up just blocking sites.google.com for students.
plexer Posted October 20, 2014 Posted October 20, 2014 You can't use url filtering when the base site is https as your filter will just see the domain site.google.com and nothing else Ben
FN-GM Posted October 20, 2014 Posted October 20, 2014 Does lightspeed have the https inspection like smoothwall has?
Sam_Brown Posted October 20, 2014 Posted October 20, 2014 Like Ben says it's because they've recently made google sites secure across the board so you can block site.google.com and end up blocking everything under it or nothing. Also worth nothing it's not just a lightspeed issue. I think all filters will have the same issue with the change. One solution is that you can create a PAC file to force google traffic to go through lightspeed as a proxy. How to Create a PAC File to Route google.com Requests to the Proxy Server | Lightspeed Systems Community Site We've just used impero to ban the sites but probably not an option unless you have it.
FN-GM Posted October 20, 2014 Posted October 20, 2014 I think all filters will have the same issue with the change. Smoothwall doesn't!
plexer Posted October 20, 2014 Posted October 20, 2014 (edited) Smoothwall doesn't! Smoothwall does as long as you enable https inspection but by default would have the same issue. Ben Edited October 20, 2014 by plexer
rad Posted October 20, 2014 Posted October 20, 2014 I cant block this on London GFL (Atomwide) so have given up now.... same with the other one with Mills in the title
FN-GM Posted October 20, 2014 Posted October 20, 2014 Smoothwall doesn't as long as you enable https inspection but by default would have the same issue. Ben With any product it will need configuration to get it working the way you want it to. Would you use Lightspeed with all its defaults?
plexer Posted October 20, 2014 Posted October 20, 2014 No but you may not necessarily be implementing ssl decryption for various reasons The Smoothwall Blog: 7 Ways To Deal With HTTPS traffic Ben 1
edie209 Posted October 21, 2014 Author Posted October 21, 2014 Thanks for the replies it seems we are even having problems blocking sites.google.com I have put it as a globally blocked site and it just doesn't seem to be blocking I have escalated the issue to Talk Straight (our suppliers) who have in turn escalated it to LightSpeed
FN-GM Posted October 21, 2014 Posted October 21, 2014 No but you may not necessarily be implementing ssl decryption for various reasons The Smoothwall Blog: 7 Ways To Deal With HTTPS traffic Ben You might not but lots of people are. Better to have the option than not.
plexer Posted October 21, 2014 Posted October 21, 2014 You might not but lots of people are. Better to have the option than not. I agree with you there and hopefully if nothing else this thread will make people aware that they can do this type of filtering with smoothwall, other filters that can do it are also probably available , but it will have to be configured along with pushing out the SW certificate. Ben
SovietRussia Posted October 21, 2014 Posted October 21, 2014 We just blocked sites.google - that will stop em'
FN-GM Posted October 21, 2014 Posted October 21, 2014 along with pushing out the SW certificate. Not if you use a trusted CA like we do.
plexer Posted October 21, 2014 Posted October 21, 2014 Great if they now made this easier than it used to be as using a proper CA cert with Smoothwall was a fudge. Ben
SchoolsBroadband Posted October 21, 2014 Posted October 21, 2014 Has anyone had this problem we are unable to block this site https://sites.google.com/site/punblockedgames/home. We use Lightspeed via Talk Straight and at this moment in time there seems to be no solution. Has anyone else had this issue have you got around it? if so how? Hi, can you pm me the ticket number and I'll personally check it out for you. Thanks Dave
Wubbalubbadub Posted November 25, 2014 Posted November 25, 2014 Hi, can you pm me the ticket number and I'll personally check it out for you. Thanks Dave Still an issue for me as well...
edie209 Posted November 25, 2014 Author Posted November 25, 2014 I never heard from Dave and now all sites under sites.google.com/ are blocked which of course is going to be a problem sooner or later, but there is no referance in url patterns. Also another gothcha I can't block Vodlocker with out turning off "General Sites" under custom categories.
Sam_Brown Posted November 25, 2014 Posted November 25, 2014 I never heard from Dave and now all sites under sites.google.com/ are blocked which of course is going to be a problem sooner or later, but there is no referance in url patterns. Also another gothcha I can't block Vodlocker with out turning off "General Sites" under custom categories. With Google Sites being HTTPS now the filter can't see anything beyond the https://sites.google.com unless you use some kind of "man in the middle" functionality.
edie209 Posted November 25, 2014 Author Posted November 25, 2014 I have spoken to someone from Lightspeed and they have told me it could be achieved by proxying google sites and then using a pac file. Apparently they are working with Schools Broadband to achieve this fingers crossed.
mattprice Posted November 26, 2014 Posted November 26, 2014 edie209 this is correct, we can filter Google HTTPS traffic by using the proxy / PAC file. Full details on how to do this can be found here: How to Create a PAC File to Route google.com Requests to the Proxy Server | Lightspeed Systems Community Site Disclaimer - I am a Sales Engineer with Lightspeed Systems
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now