topic Re: Block pornographic Google images. in General Topics

Block pornographic Google images.

JeffC_ — Wed, 13 Mar 2013 20:34:31 GMT

I have URL filtering configured that blocks pornography, but if I search in Google for pornography and then click on images, pornographic images are accessible. I know that I can block these in Chrome browser, but how do I block them as a policy via the firewall?

Re: Block pornographic Google images.

wesa — Wed, 13 Mar 2013 22:07:39 GMT

Here is how you can do it.

Re: Block pornographic Google images.

JeffC_ — Wed, 13 Mar 2013 22:25:37 GMT

Thank you, will safesearch 4.1 work with PAN-OS 5.0?

Re: Block pornographic Google images.

wesa — Thu, 14 Mar 2013 13:17:07 GMT

Yes it works with 5.0

Re: Block pornographic Google images.

JeffC_ — Thu, 14 Mar 2013 20:48:02 GMT

It appears that the safesearch files are working, but... when I go to Google and type a search for something explicit, it does the search via https: and goes through, if I search again by stripping the S off of https: the policy is in affect. If I lock safesearch in chrome the policy still works. The policy also disables the ability to unlock safesearch, but I can bypass that by closing the browser, cleaning out cashed pages and starting all over again, I can again reach explicit images bypassing my URL filter. What am I doing wrong and what else can I do, so that this control is effective. First step is google, next will be Bing and Yahoo, but I first want to understand what I'm doing wrong with Google.

Re: Block pornographic Google images.

murphyj — Sat, 16 Mar 2013 21:32:14 GMT

Ya, I looking at the same thing, what I notice is if you set your PA as a Cert authority on your network you can set it to decrypt the search traffic only. This should allow you to block that traffic in theory. I have not had a chance to test it out yet. As for Bing I have been looking into that myself and noticed a couple of things. You don’t have to worry about the https with Bing it doesn’t really search that way. As for the filter:

adlt=off is when safesearch is set to off

adlt=moderate is when moderate search is turned on

adlt=strict is for Strict searching

I have not had time to create and application for it to test yet.

Re: Block pornographic Google images.

Sobolenko — Fri, 24 Apr 2015 16:34:38 GMT

JeffC, true, google search uses SSL, so you would need also to configure Decryption Policy. Page 361 of PAN-OS 6.1 Admin Guide, has basic information on it.

Re: Block pornographic Google images.

hvcomputech — Mon, 27 Apr 2015 13:32:53 GMT

Without ssl decryption the PaloAlto won't be able to see what is traversing in https.