Blocking Google SSL Search for Schools

[purkleturkle]

Google SafeSearch and SSL Search for Schools

 

Has anyone had any experience of blocking https / 443 / SSL / Google either using ISA / TMG 2010 or SWGFL?

 

I just phoned SWGFL and they said it wasn't something they could do though the "Web Access Policy".

 

When I try and add a rule in TMG using the below format it does not work (TMG states URLs included in this set (applicable for HTTP traffic only))

 

http://www.google.co.uk:443

[rob_f]

Processing domain name sets and URL sets suggests that the only way you can block HTTPS sites by domain is to provide it in a Domain Name and URL Set without protocol and a slash at the end, e.g. rather than "https://www.google.co.uk/" just put "google.co.uk". Which will of course then block plain HTTP google...

 

Essentially what's saying is that as soon as you stick a slash on the end or protocol in front, it is then a URL and can only be matched against HTTP. The only way a proxy/filter can block HTTPS by URL is using HTTPS Inspection/SSL Decryption.

 

You can try blocking "encrypted.google.com" but I don't know if that covers 100% of the secure search angles.

[henselkp2001]

A modify URL regex filter

"^https://www(.google.com.*$)"->"https://nosslsearch\1"

 

and blocking encrypted.google.com

 

fixed the ssl issue for me.

[henselkp2001]

"^https://www(\.google\..*)"->"https://nosslsearch\1"

"(^http://[^/]*www\.google.*\?.*)"->"\1&safe=vss"

"(^http://[^/]*bing.*\?.*)"->"\1&adlt=strict"

"(^http://[^/]*yahoo.*\?.*)"->"\1&vm=r"

 

A modify URL regex filter

"^https://www(.google.com.*$)"->"https://nosslsearch\1"

 

and blocking encrypted.google.com

 

fixed the ssl issue for me.