Hot!DNS Filter: Enable Safe search for Google, but don't restrict YouTube

Author
aley
New Member
  • Total Posts : 2
  • Scores: 0
  • Reward points: 0
  • Joined: 2017/11/03 01:41:05
  • Status: offline
2017/11/03 01:44:35 (permalink)
0

DNS Filter: Enable Safe search for Google, but don't restrict YouTube

We're using a few FortiGate 50E with FortiOS 5.6.2 and DNS filtering, which works great (properly enforces SafeSearch over SSL/TLS without requiring a local certificate to be installed).
 
However, when Safe search is enforced, YouTube restrictions must be set to "strict" or "moderate". Even moderate YouTube restriction blocks LOTS of videos that aren't in any way problematic for a school.
 
Is there a way to have Safe search enabled for search engines (Google, Bing, etc.) but not restrict YouTube?
post edited by aley - 2018/07/20 07:18:01
#1

4 Replies Related Threads

    sub7even
    New Member
    • Total Posts : 13
    • Scores: 0
    • Reward points: 0
    • Joined: 2012/01/05 23:39:41
    • Status: offline
    Re: DNS Filter: Enable Safe search for Google, but don't restrict YouTube 2017/11/06 16:22:35 (permalink)
    0
    looking forward to get updated reply from this as well..
    #2
    gabriel
    New Member
    • Total Posts : 1
    • Scores: 0
    • Reward points: 0
    • Joined: 2018/10/02 10:13:41
    • Status: offline
    Re: DNS Filter: Enable Safe search for Google, but don't restrict YouTube 2018/10/02 10:14:19 (permalink)
    0
    Hi, anyone have solved this?
    #3
    blackhole_route
    New Member
    • Total Posts : 13
    • Scores: 0
    • Reward points: 0
    • Joined: 2016/05/17 18:00:23
    • Status: offline
    Re: DNS Filter: Enable Safe search for Google, but don't restrict YouTube 2018/10/13 16:31:56 (permalink)
    0
    It looks like this is possible at the CLI, at least on FortiOS 6.0.2. You can set safe-search enable on the dnsfilter profile, but not set youtube restricted.
    config dnsfilter profile
    edit profilename
    set safe-search enable
    unset youtube-restrict
    end
     
     
    Another option which requires a bit of work is to set up an internal recursive DNS server to do this. Rewrite the documented google.com domains (using something like BIND RPZ's) to forcesafesearch.google.com (https://support.google.com/websearch/answer/186669?hl=en) , and depending on internal client address, rewrite www.youtube.com (and other associated domains) to restrict.youtube.com or restrictmoderate.youtube.com. Google use to publish the list of domains to rewrite publicly but now apparently have restricted access to that information only to GSuite Admin accounts. If you need it, I can dig it up from config files I'm running currently....
    #4
    golemb
    New Member
    • Total Posts : 2
    • Scores: 0
    • Reward points: 0
    • Joined: 2018/10/15 08:52:37
    • Status: offline
    Re: DNS Filter: Enable Safe search for Google, but don't restrict YouTube 2018/10/15 09:08:51 (permalink)
    0
    I would love a easy built in solution for this, educational environment.   The Enforce Safe Search works great for Google / Bing search engines, users can't turn it off via the browser.   Works on every device.   My users hate it so I know its working
     
    The YouTube filter is way to restrictive even on moderate, this is where the problem is for my users.   I tried the above CLI commands on one of my FortiGates firewalls as were running FortiOS 6.02.  They do execute without error in the CLI but when browsing to YouTube after making the changes via the CLI YouTube still in restricted mode.   I don't know if someone else can confirm this.
     
    If there was an option via DNS filtering to leave YouTube unfiltered that would be super.   Three options for YouTube  Strict, Moderate, Unfiltered.   Could this be a feature request?
     
    I have looked at the cookbook for the internal recursive DNS setup, don't really want to go down that path if I don't have too.
    post edited by golemb - 2018/10/15 09:48:28
    #5
    Jump to:
    © 2018 APG vNext Commercial Version 5.5