Allowing use of school Google domain whilst removing access to personal e-mails

[dunc]

Afternoon all,

 

Our school's Acceptable Use Policy and E-Safety Policy both dictate that students are not allowed to access personal e-mails unless given express permission.

 

As such, the usual suspects (Google, Hotmail/Live, Yahoo etc.) are blocked by category on our Smoothwall proxy.

 

However, we now want to start using Google Apps for Education on our school domain.

 

Is there a way that I can unblock the relevant URLs but then stop students from logging in with any domain other than @ourschool.org?

 

Thanks in advance.

[grdrager]

If your content filter can do content modification and you have SSL inspection setup for Google sites, then you can append domain restrictions to Google services to prevent login to alternate domains.

 

https://support.google.com/a/answer/1668854?hl=en

 

This covers their main services; however, some of Google's peripheral services do not honor the X-GoogApps-Allowed-Domains header and may need to be completely blocked.

[dunc]

That couldn't be any more perfect. Thank you

[AlexB]

Sorry to hijack, but I figure future searcher like me might be after both....

 

The best I could find for the equivalent on Office 365 was https://community.office365.com/en-us/f/156/t/228632

 

I've implemented and it seems fine so far, but I'll update if it goes wrong.

[IKMHS]

AlexB, I'm looking at doing the same with regards to Hotmail and Office365 but the link you posted now doesn't work. Do you have an alternative link? Thanks, Ian

[AlexB]

Hi @IKMHS

 

I can't see a link anymore, but I found the Smoothwall category I created. Assuming it is still valid I have:

 

Name: Custom consumer live.com

Comment: These URLs should only be for consumer live.com accounts, not Office 365 accounts

Domains:

mail.live.com

login.live.com

onedrive.live.com

[AlexB]

Oh, Smoothwall users should watch out for the "Software Update" category overriding this.