Safe Serach

HI Yasin , 

If you have enabled Safe Search as Suggested by LUK , you may need to enable Malware Scanning Http and HTTPS (Especially) in order to work . Also Create a Rule on the Top position and Drop Port UDP:443 so the Google in your network would not operate in QUIC protocol and would switch to Standardized TCP:443 connection.

Hello Aditya,

Is there any safe search  setting about the exclude to android and ios device? The android and ios devices are in the same lan with pcs .

I don't want to separate this devices group. I want to all device in the same lan.

I don't want to install a certificate on the android and ios devices.

Hi Yasin, 

You may need to import the certificate onto our IOS and Android. If you are using authentication you may log in to your User portal using your Mobile Web Browser and click to download the CA certificate. This will allow you to import the certificate directly. Or simply mail to your employees the CA certificate they would open the attachment and get it installed. 

The certificate format is .PEM you may change to .crt by simply changing the extension and mail to your clients. Otherwise, you may need to create a seperate rule for your IP/MAC host associated to your mobile devices and remove HTTPS decryption. This was you do not need to install certificate . Downside is that Safe search Would not work .

Hi Aditya,

As I said before , I don't want to install certificate on ios and android devices. The customer may not want to install on their personal or mobile devices.

IP/MAC host associated can be problem for the customers who have 250 or more people  etc.

Thanks for response..

Hi Aditya,

As I said before , I don't want to install certificate on ios and android devices. The customer may not want to install on their personal or mobile devices.

IP/MAC host associated can be problem for the customers who have 250 or more people  etc.

Thanks for response..

Hi Yasin, 

I have presented both options, there is no other workaround for the issue you have faced.

Hi

in my case this workaround only works for the desktop browser. On my Android devices I can't see a fall back to TCP. They just don't work anymore.

Youtube for example. I need to block outgoing UDP 443 to enforce safe search, but also Youtube stops working on Android devices.

Is there a way to block outgoing UDP and have the android devices do a fallback to TCP?

Till now I couldn't find anything.

Thanks

Stefan

StefanBoldt said:

Hi

in my case this workaround only works for the desktop browser. Notre site en ligne On my Android devices I can't see a fall back to TCP. They just don't work anymore.

Youtube for example. I need to block outgoing UDP 443 to enforce safe search, but also Youtube stops working on Android devices.

Is there a way to block outgoing UDP and have the android devices do a fallback to TCP?

Till now I couldn't find anything.

 

Thanks

Stefan

 

It worked for me :D!

Thanks

On my tests I found out, that with Android 5 and 6 it falls back to TCP. But not on Android 7.

So the UDP thing is something called QUIC protocol. AFAIK blocking UDP or 80 and 443 is the standard mechanism to force is to normal HTTPS.

groups.google.com/.../

Secondly, SFOS v17 has safesearch enforcement without HTTPS decryption.  It is in beta now.  Note that you'll still need to shut down QUIC.