mattprice

Hello Please allow me to clarify our support for HTTPS inspection. We have had full support for this for several years now. HTTPS inspection will allow you to see Google search queries both now and after the upcoming changes to Google's services, which will force all Google traffic to become encrypted after around June 2015. Additionally, it gives us the ability to inspect and filter HTTPS traffic to all sites. It allows us to view not just the full URL that someone is accessing, but also all of the links and images within that page too. The only way to view any kind of encrypted web traffic is by acting as a 'man in the middle' trusted proxy. I fully appreciate that this can be time consuming for schools to set up initially, but this is actually a very good thing; if this was not the case, then no-one would be able to trust secure services such as online banking. Due to the design of HTTPS traffic, having a system that can act as a trusted proxy really is the only way this traffic can be decrypted. Again, we have been able to do this for several years. We have made this as easy as possible for schools to implement, using methods such as Proxy Auto Configuration (PAC) files and through WCCP, which can be thought of as an automatic proxy, as clients joining the network do not have to enter any proxy settings. This has proven particularly useful for BYOD scenarios, where asking visitors to manually enter proxy settings can be unfeasible. To summarise - Lightspeed Systems Web Filter can fully analyse, inspect and block HTTPS traffic, and this is not a new feature for us. Please feel free to DM me with any questions. Matt Price Engineer - Lightspeed Systems

edie209 this is correct, we can filter Google HTTPS traffic by using the proxy / PAC file. Full details on how to do this can be found here: How to Create a PAC File to Route google.com Requests to the Proxy Server | Lightspeed Systems Community Site Disclaimer - I am a Sales Engineer with Lightspeed Systems

Hello OP, Sam Unless you still have Windows XP machines on your network, there should not be an issue with disabling the Google fail-safe. All the failsafe does is to block Google HTTPS connections when we are unsure of the Google service that the user is trying to access. This is only a risk on operating systems that do not support SNI, such as Windows XP. Disclaimer – I am a Sales Engineer for Lightspeed Systems Please feel free to raise a support ticket ([email protected]) or PM me if you wish to discuss in more detail