Can't filter punblockedgames with Lightspeed

[edie209]

Has anyone had this problem we are unable to block this site https://sites.google.com/site/punblockedgames/home.

 

We use Lightspeed via Talk Straight and at this moment in time there seems to be no solution. Has anyone else had this issue have you got around it? if so how?

[Manny-Tech]

We had a similar problem with another games URL, we ended up just blocking sites.google.com for students.

[plexer]

You can't use url filtering when the base site is https as your filter will just see the domain site.google.com and nothing else

 

Ben

[FN-GM]

Does lightspeed have the https inspection like smoothwall has?

[Sam_Brown]

Like Ben says it's because they've recently made google sites secure across the board so you can block site.google.com and end up blocking everything under it or nothing. Also worth nothing it's not just a lightspeed issue. I think all filters will have the same issue with the change.

 

One solution is that you can create a PAC file to force google traffic to go through lightspeed as a proxy.

 

How to Create a PAC File to Route google.com Requests to the Proxy Server | Lightspeed Systems Community Site

 

We've just used impero to ban the sites but probably not an option unless you have it.

[FN-GM]

I think all filters will have the same issue with the change.

 

Smoothwall doesn't!

[plexer]

Smoothwall doesn't!

 

Smoothwall does as long as you enable https inspection but by default would have the same issue.

 

Ben

Edited October 20, 2014 by plexer

[rad]

I cant block this on London GFL (Atomwide) so have given up now.... same with the other one with Mills in the title

[FN-GM]

Smoothwall doesn't as long as you enable https inspection but by default would have the same issue.

 

Ben

 

With any product it will need configuration to get it working the way you want it to. Would you use Lightspeed with all its defaults?

[plexer]

No but you may not necessarily be implementing ssl decryption for various reasons The Smoothwall Blog: 7 Ways To Deal With HTTPS traffic

 

Ben

[edie209]

Thanks for the replies it seems we are even having problems blocking sites.google.com I have put it as a globally blocked site and it just doesn't seem to be blocking I have escalated the issue to Talk Straight (our suppliers) who have in turn escalated it to LightSpeed

 

[FN-GM]

No but you may not necessarily be implementing ssl decryption for various reasons The Smoothwall Blog: 7 Ways To Deal With HTTPS traffic

 

Ben

 

You might not but lots of people are. Better to have the option than not.

[plexer]

You might not but lots of people are. Better to have the option than not.

 

I agree with you there and hopefully if nothing else this thread will make people aware that they can do this type of filtering with smoothwall, other filters that can do it are also probably available , but it will have to be configured along with pushing out the SW certificate.

 

Ben

[SovietRussia]

We just blocked sites.google - that will stop em'

[FN-GM]

along with pushing out the SW certificate.

Not if you use a trusted CA like we do.

[plexer]

Great if they now made this easier than it used to be as using a proper CA cert with Smoothwall was a fudge.

 

Ben

[SchoolsBroadband]

Has anyone had this problem we are unable to block this site https://sites.google.com/site/punblockedgames/home.

 

We use Lightspeed via Talk Straight and at this moment in time there seems to be no solution. Has anyone else had this issue have you got around it? if so how?

 

 

Hi, can you pm me the ticket number and I'll personally check it out for you.

 

Thanks

 

Dave

[Wubbalubbadub]

Hi, can you pm me the ticket number and I'll personally check it out for you.

 

Thanks

 

Dave

 

Still an issue for me as well...

[edie209]

I never heard from Dave and now all sites under sites.google.com/ are blocked which of course is going to be a problem sooner or later, but there is no referance in url patterns.

 

Also another gothcha I can't block Vodlocker with out turning off "General Sites" under custom categories.

[Sam_Brown]

I never heard from Dave and now all sites under sites.google.com/ are blocked which of course is going to be a problem sooner or later, but there is no referance in url patterns.

 

Also another gothcha I can't block Vodlocker with out turning off "General Sites" under custom categories.

 

With Google Sites being HTTPS now the filter can't see anything beyond the https://sites.google.com unless you use some kind of "man in the middle" functionality.

[edie209]

I have spoken to someone from Lightspeed and they have told me it could be achieved by proxying google sites and then using a pac file. Apparently they are working with Schools Broadband to achieve this fingers crossed.

[mattprice]

edie209 this is correct, we can filter Google HTTPS traffic by using the proxy / PAC file. Full details on how to do this can be found here: How to Create a PAC File to Route google.com Requests to the Proxy Server | Lightspeed Systems Community Site

 

Disclaimer - I am a Sales Engineer with Lightspeed Systems