Safe Serach

HI Yasin , 

If you have enabled Safe Search as Suggested by LUK , you may need to enable Malware Scanning Http and HTTPS (Especially) in order to work . Also Create a Rule on the Top position and Drop Port UDP:443 so the Google in your network would not operate in QUIC protocol and would switch to Standardized TCP:443 connection.

Hi Aditya,

I think The malware scanning http and https is enough for block and SafeSearch. Previously I configured only http scanning and when I configured for the https scanning there are some certificates error . I create a new certificate and enable the malware scanning http and https. Now It runs seamlessly.

Additionally I add the drop policy as you said . There is no connection on this policy. So I think It's not necessary.

Thanks ... 

Hi Aditya,

I think The malware scanning http and https is enough for block and SafeSearch. Previously I configured only http scanning and when I configured for the https scanning there are some certificates error . I create a new certificate and enable the malware scanning http and https. Now It runs seamlessly.

Additionally I add the drop policy as you said . There is no connection on this policy. So I think It's not necessary.

Thanks ... 

Yasin,

If you have created an allow rule where you allow only http/https services, the drop rule is not needed.

Google chrome uses udp 443 and then fails back to tcp 443. So if you allow only https and your last rule is a drop rule (any, any, any), your are ok.

Regards

Hello lferrara,

Is there any setting about the exclude to android and ios device? The android and ios devices are in the same lan with pcs .

I don't want to separate this devices group. I want to all device in the same lan?