URL Rewrite - any update in new PanOS 4.1?

Reply
L1 Bithead

URL Rewrite - any update in new PanOS 4.1?

We are increasingly seeing the need for a URL rewrite feature - we had hoped to use it for one of the ways to force Google SafeSearch (vs. the existing option of blocking searches using an app signature)

We now would like to use YouTube for Schools, which depends on URL modification:

http://support.google.com/youtube/bin/answer.py?hl=en&answer=1686318

  1. A)  Add new HTTP header rule

    Modify your hardware filter or proxy server settings so that all outgoing traffic to youtube.com contains the following custom HTTP header. The ID to use in the HTTP header configuration, written below, is an example of a unique ID for your school’s network only. If your school is blocked at the district level, this HTTP header is then unique to the district network.
    Example:
    X-YouTube-Edu-Filter:ABCD1234567890abcdefField Name: X-YouTube-Edu-Filter
    Description: When YouTube sees this header and an accompanying valid school ID in the incoming traffic, YouTube will serve a limited EDU-only site to all computers behind the school hardware filter.
    Field Value Format: alphanumeric [a-z][A-Z][0-9]
    Field Value Length: up to 44 characters
  2. B)  Create URL parameter rewrite rule

    If your hardware filter not support HTTP header modification, please rewrite all outgoing URLs to youtube.com by appending the parameter “edufilter” at the end. Exclude the &edufilter parameter from these file types: .css, .gif, .png, .js, .xml

    Example:
    http://youtube.com/?edufilter=ABCD1234567890abcdef
    http://youtube.com/watch?v=gM95HHI4gLk&edufilter=ABCD1234567890afbcdef

Is/will there be any way to do this in PanOS 4.1?  We are upgrading over the holiday break.

Tags (1)
L5 Sessionator

Re: URL Rewrite - any update in new PanOS 4.1?

Hello,

Thank you for your feedback!  PAN-OS 4.1 does not support the ability to do "URL Rewrites" as you describe, but we are currently looking into YouTube for Schools and what it would mean to support it.

If you haven't already, please have your rep file a feature request on your behalf so that we may properly gauge customer need for this feature.

Thanks,

Doris

Not applicable

Re: URL Rewrite - any update in new PanOS 4.1?

Hi,

Any news on this one? YouTube for Schools & enforcing safe search are key features that we're after. Certainly the safe search has been logged as a feature request with our supplier for about 12 months.

Thanks,

Ashley

L5 Sessionator

Re: URL Rewrite - any update in new PanOS 4.1?

Hi Ashley,

These are still items that we're looking into, so no updates at the moment.

Thanks,

Doris

L6 Presenter

Re: URL Rewrite - any update in new PanOS 4.1?

Will the following work as a workaround for you (until PA fixed ability to inject code into streams)?

https://live.paloaltonetworks.com/docs/DOC-1399

https://live.paloaltonetworks.com/docs/DOC-1657

This way you can at least mostly block users from accessing safesearch=off or whatever you prefer.

Not applicable

Re: URL Rewrite - any update in new PanOS 4.1?

Thanks Doris,

I was asking for news, rather than a specific update, a poor choice of words on my part but I can infer that its still a little way off.

Very useful links Mikand, Many thanks :smileyhappy:

I'll see if I can work out how to do similar in PanOS 4.1, there's no better way to learn a new piece of kit than jumping right in!

Not applicable

Re: URL Rewrite - any update in new PanOS 4.1?

How does this look?  Do we have any updates?

L5 Sessionator

Re: URL Rewrite - any update in new PanOS 4.1?

Unfortunately, no updates to report at the moment.  We'll keep you posted.  :smileyhappy:

Highlighted
L2 Linker

Re: URL Rewrite - any update in new PanOS 4.1?

Is this feature at least on the road map moving forward?

Not applicable

Re: URL Rewrite - any update in new PanOS 4.1?

I also need the ability for URL rewrites for Google safesearch and YouTube. Is this on the roadmap? Do you have any kind of ETA? We just implemented Palo Alto and lacking the ability for us to do this is crippling. Thank you for any update you can provide.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!