OB1

Not really. We try to keep up but we're not prescient! The pacman style ones live under google.com/doodles, so you could block that but then you'll end up with a broken looking google most of the time, as that's where they put the non-gamey ones too. If you are with Smoothwall we've got then under Online Games, so just block that.

This issue was definitely resolved. Just to clarify, are you using smoothwall? If so drop me a PM, I'll see what I can do.

I'd be very wary of crowd sourced content aggregators like this, especially for that age group. It's the kind of thing that's not 'full of bad stuff', but sooner or later something will appear that might make you wince.

Those Youtube generated playlists are different to user generated playlists. It seems you can't like directly to them without specifying a video. I think they're intended to be like a 'radio' button. You start with a song, and it generates a list of stuff you might like. The link you've already got is as close as you're going to get to a static link.

This thread might help.

There are a few background requests to cloudfront.net and amazonaws.com, which serve the stylesheets. Have a look through your Smoothie's logs for these to make sure something isn't going wrong with them. Also, is your Smoothie up to date? There have been a few fixes for some HTTPS sites recently. I don't think they're related to this but it's something else to rule out.

Tes.co.uk is secure. Are you decrypting and inspecting it?

Google searches are conducted over https now, so you'll probably need to be doing some kind of man in the middle to view anything after the domain (i.e. https://www.google.co.uk) as the path and parameters will be encrypted.

I wouldn't worry too much about this. Linux has always been designed as a multi-user system.

Sounds like you've got safetymode enforced by your filter. You'd have to disable it there. It's probably on for a reason though.

No Yes. It used to be fine, but it appears the moderation has become a bit lax of late. It's fairly easy to find naughty pictures on there.

Not sure if you've seen this. PSN itself uses 80, 443 and 5223 TCP. In/outbound is unspecified, I would assume outbound as it's effectively a pretty webmail / updates service. Games are wont to use whatever ports the developer has seen fit, and it varies from game to game. I had all sorts of fun getting online play on Gran Turismo 5 working... Bear in mind, Destiny was only launched last week. PSN is going to be under a lot of stress, so it could just be dropouts from their end.

PM me your youtube for schools ID (the 23 character string at youtube.com/account_school). I don't need anything else to test it. We've had a similar issue with another customer this week so I suspect this feature has gone all Beta again.

If you sign in as the admin account associated with your Youtube Education ID and add a video to a playlist, it should then become visible to everyone who is filtered under that ID.

Link

Or Bruce Schneier's take.

Have a look at your realtime logs and see if there are any issues there (recommend filtering by IP). Which domains have you added authentication exceptions for?

Google Logins are done over https. IIRC you're not using Decrypt and Inspect. (This may have changed). If you're not, that's your problem. If you are, then there's a policy issue, probably something in a Whitelist that shouldn't be.

They do, but mainly on high ports. If you've got services that use high ports you can restrict those ports to specific IPs or ranges. PM me some examples of the apps you've seen if you want to. We'll have a look into onavo but generally take a 'broad strokes' approach to specific apps, and improving firewall policy is usually the first port of call.

That's down to firewall policy. Close ports you don't need, that's your best bet.

The iPads shouldn't work unless they're the 3G versions. If you're having trouble with those over WiFi we can look deeper. The phones will just fall back to 3G, there's not much anyone can do about that I'm afraid.

Does that include mobile phones?

Are they installing and using this on school equipment? If so there's a case for some kind of Mobile Device Management. Decrypt and inspect breaks most apps unless you make specific allowances for them. Also make sure you're blocking Social Networking Sites and / or Instant Messaging sites.

If it's been going on for more than a couple of hours, try removing all your cookies from google.com, youtube.com and all of their subdomains. Clear the browser cache as well. You'll have to log in again.

Have you tried again since then? I've had this error before setting this up. Try again later.™