Bagpuss66 Posted July 20, 2015 Posted July 20, 2015 We have recently found that the students are using Google translate to get round our URL filtering on our Palo Alto Firewall. The students must be still able to use translate google for its real use. The manual is as clear as mud on how to set up https filtering. Short of blocking the site itself we are a bit stuck on what to do . Anyone out there know how to add this type of filtering ?
Arreks Posted July 20, 2015 Posted July 20, 2015 If you type "Translate" into google you'll get in an instant-search style translation tool. We block *.translate.google.* here and let them use the instant translation instead.
Bagpuss66 Posted July 20, 2015 Author Posted July 20, 2015 If you type "Translate" into google you'll get in an instant-search style translation tool. We block *.translate.google.* here and let them use the instant translation instead. Thank you, we will try that.
Bagpuss66 Posted July 24, 2015 Author Posted July 24, 2015 Still no luck We add it to the objects/Security Profiles/Url filtering the add to the block list. Do we have to set up a separate policy for https site ?
bob_uk2k Posted July 26, 2015 Posted July 26, 2015 Hi, Palo Alto are advertising they can take care of this in PANOS 6: https://www.paloaltonetworks.com/documentation/60/pan-os/newfeaturesguide/content-inspection-features/url-filtering-translation-site-filtering-enhancement.html#45310 https://live.paloaltonetworks.com/docs/DOC-7281 It looks like you will also need to SSL decrypt as everyone's turning SSL on these days you've got to pull it apart to take a look inside. Robert
Bagpuss66 Posted August 5, 2015 Author Posted August 5, 2015 Still struggling to get our heads around this ! Does anyone have an easy explanation on how to do this. Or has the latest version of the software have this already implemented? It is a pain as bob_uk2k has pointed out as a lot of are now using https. Luckily it seems only a few of the kids have realised that you can use google translate to get round our firewall. We used to use SWGFL and they handled all the website filtering. The Palo alto was purchased before I came to work at the school and I'm pretty much learning on how to use it as I go along!
grant_girdwood Posted August 7, 2015 Posted August 7, 2015 If you deny translate.googleusercontent.com - this will block the page translations but allow them to use the text translations.
Bagpuss66 Posted August 7, 2015 Author Posted August 7, 2015 Hi Grant_girdwood Thank you we will try that
Bagpuss66 Posted August 27, 2015 Author Posted August 27, 2015 Hi Grant_girdwood Thank you we will try that Tried that still no luck As the firewall is supplied by Virgin media they have disabled a few of the Palo alto features including updating the Firmware. Looks like we will have to ask them to do this and block the site for us. Thank you for the suggestions so far.
Bagpuss66 Posted September 15, 2015 Author Posted September 15, 2015 It's a pity there isn't an easy way to block this site. Luckily the students seem to be only using it to watch you tube. Does anyone have a link that explains how to block this on the palo alto firewall . The official website is over complicated for this poor I.T. Tech !!
Bagpuss66 Posted September 15, 2015 Author Posted September 15, 2015 How exactly are the kids doing this? They are using https://translate.google.com/ typing in a website address then translating to Spanish or Arabic.
Bagpuss66 Posted October 16, 2015 Author Posted October 16, 2015 Contacted our internet supplier, Virgin Media and they enabled SSL decryption. All sorted now, lots of upset students!
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now