mrbios Posted December 13, 2011 Posted December 13, 2011 (edited) {Caveat: ISA expert I am not} It looks like you are trying to *modify* a header here - you need to be able to *add* the header, as it won't already exist. dansguardian users may find the same limitation applies. Ah, well that's a slight problem then changed it now, just going to do some testing.... Does anyone know exactly what i need to be using out of these 4 selections: Raw request header Raw response header Processed request header Processed response header ? EDIT: Raw request headers are headers received from the client, but not yet processed by Microsoft ISA Server (Forefront TMG). These headers come from the client browser to ISA Server (Forefront TMG). Processed request headers are headers received from the client and processed by Microsoft ISA Server (Forefront TMG). These headers are passed to the remote web server that will process the request. Raw response headers are headers received from the remote web server and not yet processed by ISA Server (Forefront TMG). Processed response headers are headers processed by ISA Server (Forefront TMG) and sent to the client browser. Found that, i'd assume that i needed the processed request header going by that, but i just don't really know. EDIT: Also where i'm asked for "Header Name:" in one box and "Header Value:" In another, do i split up the "X-YouTube-Edu-Filter:###########" so that the "X-YouTube-Edu-Filter" bit is in the name and the "#######" in the other or is the name not important and i just need to put the whole thing in to the value field. Edited December 13, 2011 by mrbios
sister_annex Posted December 13, 2011 Posted December 13, 2011 someone else with ISA come and start setting yours up so you can find what i'm doing wrong! hmmm... will do once we move to TMG (we're still on ISA 2006)
mrbios Posted December 13, 2011 Posted December 13, 2011 hmmm... will do once we move to TMG (we're still on ISA 2006) ISA2006 is what i'm using here, this header modifier program works on all versions 1
mrbios Posted December 13, 2011 Posted December 13, 2011 (edited) Ok everyone using ISA/TMG i can help you! 1) Install this program: http://www.redline-software.com/pub/tkSetup.exe - Run that on your ISA server installing just the "Headers modifier" section (requires the firewall service to restart during install, so 60 seconds loss of internet connection!) 2) Go to Configuration > Add-ins > Web filters and go to the properties of "Headers Modifier" > Parameters > Add 3) Name the rule whatever you want and select "applies to: Processed request headers" 4) Click Add at the bottom, leave action set to "add header", set header name to "X-YouTube-Edu-Filter" and Header value to whatever the set of letters and numbers is assigned to you on your school profile 5) Go to Conditions, set the first condition to be a "policy rule" and have it "Equal" with the value of your outbound web access policy. Now add a second condition with the following settings: "AND" "Web Site Name" "Contains" "youtube" That should do it. And that should hopefully work Quite a rough set of instructions. Here's a screenshot of my settings to give you a better idea.... (IGNORE THE FIRST SET OF CONDITIONS, THEY'RE WRONG, SEE CORRECTED SECOND IMAGE) Edited December 13, 2011 by mrbios 4
GREED Posted December 13, 2011 Posted December 13, 2011 Late to the party: it has taken them long enough to realise this is needed huh?
mrbios Posted December 13, 2011 Posted December 13, 2011 @AngryTechnician could you edit the OP with a link to my previous post for instructions on setting up ISA/TMG for this please?
tom_newton Posted December 13, 2011 Posted December 13, 2011 couldnt they just use a subdomain? No - the idea is you get a personalised portal, so staff can add videos they think are suitable. That's the key part here - youtube need to be able to identify a group of users. The http header is the best way, as URL mangling is a bit hit & miss.
rvdmast Posted December 13, 2011 Posted December 13, 2011 So...is this (http://www.redline-software.com/pub/tkSetup.exe) a free tool? or a 40 day trial, like it says on the download page
zag Posted December 13, 2011 Posted December 13, 2011 Sophos says no Thank you for your support request. I am sorry the appliance does not support HTTP header modification. Sorry I could not be of more help. Regards, Philip Finucane Sophos Technical Support Sophos Technical Support -providing help 24/7 1
sister_annex Posted December 13, 2011 Posted December 13, 2011 @MrBios; any idea what we should be looking at once the infor (for ISA) is out in? Thanks Mark
mrbios Posted December 13, 2011 Posted December 13, 2011 So...is this (http://www.redline-software.com/pub/tkSetup.exe) a free tool? or a 40 day trial, like it says on the download page The toolkit part which is what i've linked to in my post with the details is free. They have quite a bit of software on that site, some which does require you to buy. @MrBios; any idea what we should be looking at once the infor (for ISA) is out in? Thanks Mark If it's worked typing youtube.com or http://www.youtube.com should automatically redirect people to http://www.youtube.com/education and not allow access to other access of the site.
sister_annex Posted December 13, 2011 Posted December 13, 2011 If it's worked typing youtube.com or www.youtube.com should automatically redirect people to www.youtube.com/education and not allow access to other access of the site. hmm, in which case it didn't... Do you need to put an access rule as the first entry? Apologies for my apparent denseness...
mrbios Posted December 13, 2011 Posted December 13, 2011 hmm, in which case it didn't... Do you need to put an access rule as the first entry? Apologies for my apparent denseness... I'm not certain but in my 101 attempts of various different settings what i've given is what worked, so it's possible you need to set your web access rule as the first selection in the conditions in order for it to work correctly.
GrumbleDook Posted December 13, 2011 Posted December 13, 2011 Sophos says no Did you explain why and was it a case of then aren't willing to look at it, or just a case of them not doing it right now?
mrbios Posted December 13, 2011 Posted December 13, 2011 (edited) I've just noticed a mistake in my settings...this is annoying! If you look at my screenshot on the previous page all conditions below the policy condition are set to "OR" the second should have been "AND" but when i do this the policy stops working. So currently it's applying that header to all outgoing traffic and not specifically to youtube.com, this is most annoying, luckily it's causing no problems currently but still seems i have some work to do... Edited December 13, 2011 by mrbios
clareq Posted December 13, 2011 Posted December 13, 2011 I've just been in touch with Bloxx and hope to have some instructions from them this week.
mrbios Posted December 13, 2011 Posted December 13, 2011 @MrBios; any idea what we should be looking at once the infor (for ISA) is out in? Thanks Mark Ok i've just revised my list of conditions, website URL and website request don't appear to work but this does - see screenshot: Not exactly ideal but it's the best i can come up with at the moment.
rvdmast Posted December 13, 2011 Posted December 13, 2011 too bad...ISA server toolkit doesn't install on Forefront TMG 7 on Windows 2008 R2 Servicepack 1 The latest version (1.4) is from July 2009...somehow i doubt it'll be updated anytime soon...
mrbios Posted December 13, 2011 Posted December 13, 2011 (edited) too bad...ISA server toolkit doesn't install on Forefront TMG 7 on Windows 2008 R2 Servicepack 1 The latest version (1.4) is from July 2009...somehow i doubt it'll be updated anytime soon... Ah that's unfortunate, states support for TMG but i wonder what version that goes up to? Must admit i didn't realise there were different versions of TMG (How old is 7?). My ISA 2006 server is on 2008R2 w/SP1 so can't be that part causing the issue. EDIT: No i lie! I'm telling porkies there, my ISA server is on 2003R2, the only 2003 server left on my network! That took me by surprise haha. This is one of those very rare occasions where i'm glad i didn't upgrade Edited December 13, 2011 by mrbios
tmleafs Posted December 13, 2011 Posted December 13, 2011 Anybody managed to implement this with Dansguardian/Squid? Have you or anyone had any luck???
soapyfish Posted December 13, 2011 Posted December 13, 2011 Anybody managed to implement this with Dansguardian/Squid? If there any news about Squid support either version 2.7 or 3.?
siuko Posted December 13, 2011 Posted December 13, 2011 Have you or anyone had any luck??? I'm still looking hehe Don't think it will be possible adding a HTTP Header (well its beyond me anyways) I'm looking at the dansguardian urlregexplist config at the moment to see if its possible to rewrite the youtube.com to the It definitely looks like it should work but again looking at the examples already in there for google safe search its a bit beyond me at the moment lol!
sister_annex Posted December 13, 2011 Posted December 13, 2011 OK I finally got it to work!!! Now we seem to be having issues with authorising videos... @mrbios how are you getting on? Mark
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now