HTTPS Inspection / Web filtering and Chromebooks

[RichardWhitelaw]

Hello. Trying to work out how to get more secure web-filtering via LGFL in place without having to resort to Impero (or similar) on a large estate of Chromebooks. Keep getting directed back to "transparent proxies" issue - when it's surely not beyond reason to get web filtering in place rather than having to go per-device installs for Chromebooks? Help...any ideas, greatly appreciated.

[localzuk]

We decided to go with Securly for this. Can deploy it via G Suite, and it is enforced centrally then.

[EssentialRug]

+1 for Securly. We use it across 2 of our schools, free and works really well

[PrimaryNetMan]

another +1 for Securly.

[rogerdnixon]

We use Securly for all our filtering (so the paid-for product). Works great Trust-wide and good reporting.

[SchoolsBroadband]

Netsweeper have a Chrome agent which can sit on Chromebooks and do all the auth and filtering you need. I know we use this as standard for our customers but I'm not sure about LGFL. Best ask their helpdesk but the functionality definitely exists in Netsweeper.

 

Dave

[DavidYoung]

Hi Richard,

 

The current version of WebScreen HTTPS decryption is not compatible with Chromebooks. The LGfL option would be to sign up for Freedom2Filter which is the native Netsweeper implementation and is fully compatible with Chromebooks via an explicit proxy setting. If you want to get that set up then PM me and I can give you some hints from our experiance.

 

To be honest, if you just want basic monitoring of traffic then Securly might be more simple.

 

David

Edited November 18, 2019 by DavidYoung
Grammar

[TronXP]

Like the others, we went Securly for Chromebooks

[RichardWhitelaw]

HI Dave, is this included in your broadband package or an add-on? Have you any clients using it across a Chromebook estate currently? Thanks.

[SchoolsBroadband]

Hi @RichardWhitelaw,

 

yes we include the Chrome agent FOC in our package and we've quite a few clients using it. Send me a PM if you need some case studies.

 

Dave

[Wave9_Lee]

Slightly different approach is to take out the upstream services and go on-premise with a UTM (i.e. Sophos) which would give you that functionality as well as bunch of other stuff. I'm aware that LGfL were offering direct internet access options of customers who wanted their own firewall, if you're still in contract.

[Opendium_Steve]

Netsweeper have a Chrome agent which can sit on Chromebooks and do all the auth and filtering you need.

For what its worth, we've been using the 802.1x passthrough auth on chromebooks with success since it was introduced (802.1x for wired devices seems to be broken though).