topic Re: URL Rewrite - any update in new PanOS 4.1? in General Topics

URL Rewrite - any update in new PanOS 4.1?

keklund — Tue, 13 Dec 2011 15:29:12 GMT

We are increasingly seeing the need for a URL rewrite feature - we had hoped to use it for one of the ways to force Google SafeSearch (vs. the existing option of blocking searches using an app signature)

We now would like to use YouTube for Schools, which depends on URL modification:

http://support.google.com/youtube/bin/answer.py?hl=en&answer=1686318

A) Add new HTTP header rule
Modify your hardware filter or proxy server settings so that all outgoing traffic to youtube.com contains the following custom HTTP header. The ID to use in the HTTP header configuration, written below, is an example of a unique ID for your school’s network only. If your school is blocked at the district level, this HTTP header is then unique to the district network.
Example:
X-YouTube-Edu-Filter:ABCD1234567890abcdefField Name: X-YouTube-Edu-Filter
Description: When YouTube sees this header and an accompanying valid school ID in the incoming traffic, YouTube will serve a limited EDU-only site to all computers behind the school hardware filter.
Field Value Format: alphanumeric [a-z][A-Z][0-9]
Field Value Length: up to 44 characters
B) Create URL parameter rewrite rule
If your hardware filter not support HTTP header modification, please rewrite all outgoing URLs to youtube.com by appending the parameter “edufilter” at the end. Exclude the &edufilter parameter from these file types: .css, .gif, .png, .js, .xml
Example:
http://youtube.com/?edufilter=ABCD1234567890abcdef
http://youtube.com/watch?v=gM95HHI4gLk&edufilter=ABCD1234567890afbcdef

Is/will there be any way to do this in PanOS 4.1? We are upgrading over the holiday break.

Re: URL Rewrite - any update in new PanOS 4.1?

dyang — Fri, 16 Dec 2011 19:44:27 GMT

Hello,

Thank you for your feedback! PAN-OS 4.1 does not support the ability to do "URL Rewrites" as you describe, but we are currently looking into YouTube for Schools and what it would mean to support it.

If you haven't already, please have your rep file a feature request on your behalf so that we may properly gauge customer need for this feature.

Thanks,

Doris

Re: URL Rewrite - any update in new PanOS 4.1?

ashley_young — Wed, 14 Mar 2012 10:52:54 GMT

Hi,

Any news on this one? YouTube for Schools & enforcing safe search are key features that we're after. Certainly the safe search has been logged as a feature request with our supplier for about 12 months.

Thanks,

Ashley

Re: URL Rewrite - any update in new PanOS 4.1?

dyang — Wed, 14 Mar 2012 19:23:35 GMT

Hi Ashley,

These are still items that we're looking into, so no updates at the moment.

Thanks,

Doris

Re: URL Rewrite - any update in new PanOS 4.1?

mikand — Wed, 14 Mar 2012 19:43:00 GMT

Will the following work as a workaround for you (until PA fixed ability to inject code into streams)?

https://live.paloaltonetworks.com/docs/DOC-1399

https://live.paloaltonetworks.com/docs/DOC-1657

This way you can at least mostly block users from accessing safesearch=off or whatever you prefer.

Re: URL Rewrite - any update in new PanOS 4.1?

ashley_young — Thu, 15 Mar 2012 10:25:41 GMT

Thanks Doris,

I was asking for news, rather than a specific update, a poor choice of words on my part but I can infer that its still a little way off.

Very useful links Mikand, Many thanks

I'll see if I can work out how to do similar in PanOS 4.1, there's no better way to learn a new piece of kit than jumping right in!

Re: URL Rewrite - any update in new PanOS 4.1?

jott — Fri, 10 Aug 2012 19:53:07 GMT

How does this look? Do we have any updates?

Re: URL Rewrite - any update in new PanOS 4.1?

dyang — Fri, 10 Aug 2012 21:17:14 GMT

Unfortunately, no updates to report at the moment. We'll keep you posted.

Re: URL Rewrite - any update in new PanOS 4.1?

bjackson — Mon, 13 Aug 2012 01:25:08 GMT

Is this feature at least on the road map moving forward?

Re: URL Rewrite - any update in new PanOS 4.1?

jgraves — Mon, 24 Sep 2012 13:54:29 GMT

I also need the ability for URL rewrites for Google safesearch and YouTube. Is this on the roadmap? Do you have any kind of ETA? We just implemented Palo Alto and lacking the ability for us to do this is crippling. Thank you for any update you can provide.

Re: URL Rewrite - any update in new PanOS 4.1?

mlaporte — Tue, 02 Oct 2012 16:06:27 GMT

I will echo Mr Graves post, I also need this as the redirect to a block page may work but is not a solution for the age range we have.

Re: URL Rewrite - any update in new PanOS 4.1?

AaronJCCU1 — Tue, 11 Dec 2012 20:54:16 GMT

I'm looking for this feature too. I was really hopeful for this in v.5, but it doesn't look like it's there, unless I missed something.

Re: URL Rewrite - any update in new PanOS 4.1?

SCASDNetwork — Fri, 01 Mar 2013 14:33:23 GMT

I also need this feature; Either a URL rewrite or a way to redirect google, bing and youtube searches to the "safe" versions of these systems through applications or other methods.

Re: URL Rewrite - any update in new PanOS 4.1?

forfarj — Fri, 01 Mar 2013 19:49:33 GMT

I am also in need of URL rewrite to address the YoutubeEDU issue. Come on guys, at least provide an update to why you are not providing this feature.

Re: URL Rewrite - any update in new PanOS 4.1?

epstech — Mon, 18 Mar 2013 20:18:54 GMT

Also in need of rewrite and encouraged other school districts in my vicinity to Request feature through SE. That was about a year ago...

Re: URL Rewrite - any update in new PanOS 4.1?

calbers — Mon, 22 Apr 2013 19:31:23 GMT

I am also in need of this for our School District.

Re: URL Rewrite - any update in new PanOS 4.1?

jrhjrh — Wed, 24 Apr 2013 11:20:33 GMT

I've been asking for this since we purchased our PA-2020. Is this actually on a road map? Are there any ballpark ETAs?

This is a large issue for us since Google decided to default to safe search being off, and without naming them, other companies are much quicker to add support for forcing safesearch and youtube for schools (with many already having the feature in the first place!).

Re: URL Rewrite - any update in new PanOS 4.1?

mikand — Wed, 24 Apr 2013 11:30:55 GMT

Have you tried contacting the appid team and what was their response?

http://researchcenter.paloaltonetworks.com/tools/

Even if PA doesnt support rewriting then it should still be possible to use appid to handle these safesearches. Specially with PANOS 5.0 who have done some work regarding appid dependencies (that is lets say you have a "google-safesearch" - instead of only looking at the url this appid could first allow a regular visit to google pages but then that the search result must be with safesearch in order to let through - the problem here might be on how to notify the users that they should enable safesearch before they can use the searchengine (since you can only have one blockpage today)).

Re: URL Rewrite - any update in new PanOS 4.1?

jrhjrh — Wed, 24 Apr 2013 11:38:36 GMT

There is a custom app, but having discussed this with SLT, it's not an option to block default searches until the user manually enables safe search (we have also enquired regarding different block pages!).

Re: URL Rewrite - any update in new PanOS 4.1?

polgarm — Wed, 24 Apr 2013 17:57:34 GMT

Still waiting for URL re-write feature, too. And I have placed the request with our rep.

topic Re: URL Rewrite - any update in new PanOS 4.1? in General Topics

URL Rewrite - any update in new PanOS 4.1?

A) Add new HTTP header rule

B) Create URL parameter rewrite rule

Re: URL Rewrite - any update in new PanOS 4.1?

Re: URL Rewrite - any update in new PanOS 4.1?

Re: URL Rewrite - any update in new PanOS 4.1?

Re: URL Rewrite - any update in new PanOS 4.1?

Re: URL Rewrite - any update in new PanOS 4.1?

Re: URL Rewrite - any update in new PanOS 4.1?

Re: URL Rewrite - any update in new PanOS 4.1?

Re: URL Rewrite - any update in new PanOS 4.1?

Re: URL Rewrite - any update in new PanOS 4.1?

Re: URL Rewrite - any update in new PanOS 4.1?

Re: URL Rewrite - any update in new PanOS 4.1?

Re: URL Rewrite - any update in new PanOS 4.1?

Re: URL Rewrite - any update in new PanOS 4.1?

Re: URL Rewrite - any update in new PanOS 4.1?

Re: URL Rewrite - any update in new PanOS 4.1?

Re: URL Rewrite - any update in new PanOS 4.1?

Re: URL Rewrite - any update in new PanOS 4.1?

Re: URL Rewrite - any update in new PanOS 4.1?

Re: URL Rewrite - any update in new PanOS 4.1?