Netsweeper - Youtube restricted mode

[themightymrp]

Forgive me if this is a duplicate thread (please point me to an existing one if so), but is it still possible to enforce Youtube restricted mode? And if so, how do you do it using Netsweeper?

 

I have followed the guidance here:

 

https://www.netsweeper.com/education-web-filtering/schools-enforce-youtube-restricted-mode

 

Which seems to be the obvious answer. But I've tried it and it doesn't do anything. Schools Broadband say this is what they would expect and that they can't do anything regarding the filtering of videos. But surely we can force restricted mode? We don't use Google Workspace so I can't set it through there, we are a 365 school.

 

Cheers

[sigma]

I use that technique for enforcing safe search in DuckDuckgo in an SBB config.

 

Which of your lists did you add the entry to?

 

Which of their lists do you use?

Edited June 25, 2024 by sigma

[themightymrp]

I've added it to our KS4 filtering group using Local List just for testing purposes and it doesn't appear to do anything. If it picks up, do you expect that filtering to apply across all types of devices i.e. PC's and iPads?

 

I can see boat load of SBB's shared lists but assuming I would add it to a local one? We have ones set for KS3, KS4, KS5, Staff, Administrators, No filtering

[sigma]

Would it be better done in Group Policies?

https://www.thewindowsclub.com/how-to-enforce-youtube-restricted-mode-in-chrome

[sigma]

For Youtube it would need to be a local List because if you have their Global or Master lists applied they have already messed about with YouTube.

 

You have decryption on?

[sigma]

I've added it to our KS4 filtering group using Local List just for testing purposes and it doesn't appear to do anything. If it picks up, do you expect that filtering to apply across all types of devices i.e. PC's and iPads?

 

I can see boat load of SBB's shared lists but assuming I would add it to a local one? We have ones set for KS3, KS4, KS5, Staff, Administrators, No filtering

 

It would apply to all urls going through that filter regardless of the device type.

[themightymrp]

Doing it via Group Policy would certainly help! Didn't realise they had a policy for that in there. That would sort out my PC's and laptops, but I'm still stuck when it comes to iPads. We have a few used in the library and I'll like to be able to lock those too if I can.

 

I've just had a response from SBB which states:

 

I have had a further look in and it appears there may be some more options we need to change to get it to work. I am talking to a senior engineer about the feasibility of this.

[sigma]

From here: https://support.google.com/a/answer/6214622?hl=en

 

You need to apply to additional domains:

Option 2: HTTP headers

 

Insert an HTTP header into requests to the following domains:

 

http://www.youtube.com

m.youtube.com

youtubei.googleapis.com

youtube.googleapis.com

http://www.youtube-nocookie.com

 

To set strict restricted access, insert YouTube-Restrict: Strict.

 

To set moderate restricted access, insert YouTube-Restrict: Moderate.

 

Note: HTTP header filtering is not supported for native mobile applications.

[themightymrp]

Oooh! Thanks! I'll give that a bash after lunch and see if that sorts it. Greatly appreciated

[themightymrp]

Wonderful - whatever SBB are doing to try fixing my Youtube problem, they've managed to remove my permissions to add or edit local lists

 

I've sent them a message

[sigma]

Par for the course with that supplier it seems. They've broken my ability to do category lookups. I notifed them last week and it's still broken.

[themightymrp]

Looks to be working again this morning. So I'll try these header rules...

[themightymrp]

That seems to have worked!!! Thank you @sigma

[themightymrp]

So... it worked first thing when I tried it. Just tested again and it's no longer applying? I've changed nothing and have all the same URL's listed as you've shown above.

 

Doing my head in!

[sigma]

There's always the SBB factor. They may have changed something...

 

In the Netsweeper Portal, look in Logs, Webadmin log and sort in date order (newest first) and see if there's any changes other than what you have made.

[themightymrp]

It seems to be working again now after a little email to support I don't have Webadmin Log as an option? Just Request logs

[sigma]

Ask for it. If you don't have it, you can't audit changes - which is a requirement of KCSIE 2023.

You should also have Category lookup (in Tools) - I had to ask for that.

[themightymrp]

Category lookup I do have. I'll request the Webadmin logs now. Cheers

[psydii]

FWIW Our Google Apps For Education exists only to enable us to have restricted mode by default and provide a mechanism for staff to review and authorise videos that might otherwise be blocked. (our GAFE uses 365 for its authentication)

[themightymrp]

It seems to be working again now after a little email to support I don't have Webadmin Log as an option? Just Request logs

 

Would you mind clarifying where you get to the Webadmin logs? SBB have got back to me and, according to a senior engineer, they are unable to give us access to the Webadmin logs?

 

Cheers

[sigma]

This is what I get in Webadmin:

 

 

I can see what changes we've made and when SBB make them without asking!

 

From filtering responses from Saferinternet.org who are referenced in KCSIE 2023 with regard to appropriate filtering an monitoring : https://saferinternet.org.uk/guide-and-resource/teachers-and-school-staff/appropriate-filtering-and-monitoring/filtering-provider-responses

 

The SBB latest published response:https://d1xsi6mgo67kia.cloudfront.net/uploads/2020/09/Talk-Straight-Appropriate-Filtering-Provider-Response-2023.pdf

 

This bit:

 

All changes are not fully auditable by all parties. They nearly are but you have to scratch about.

 

Their whole response is quite "creative".

[themightymrp]

Thanks for the links here - very useful. I'm going to go back to them with the info