Just an FYI that PAN-OS 6.0, which was released last week, contains some functionality to accommodate Google SafeSearch. When the URL filtering profile setting "Enforce SafeSearch" is enabled, PAN-OS will look at all search queries for supported search engines (Google, Yahoo and Bing, for now) and check that they are at the strictest setting. If it is not, then a block page is displayed along with a link to the appropriate search engine's settings so that end-users can adjust their settings accordingly. This will ensure that only searches at the proper setting will go through, and will also educate end-users on what they need to do to remedy the situation.
As always, for those of you seeking an alternate solution or support for an alternate feature, please contact your SE so that your feedback is properly noted.
I have discussed this at length with mu account rep and both SE. Since there is not a resolution in place with PA they recommend posting on the groups. Whodathunk it?
So after 2 months, a few updates, and a version update, are we any closer to getting some help in the educational environment that other firewalls offer on this particular issue?
We are also another school who would love this feature.
Issue was discovered in version 4. Now we are onto version 6. with no end in site.
It would be nice to have an account rep or se to talk to but the company that sold us the product is no longer anything to do with PA.
Maybe one day we will all have a solution.
We just purchased a PA3050 to replace our Cisco ASA's and a BlueCoat Proxy. We have been doing a header rewrite for youtube for schools with the Bluecoat for over a year now and our staff and students will expect this functionality to continue. This is definitely going to cause some major issues for us if we are no longer able to achieve this with the PA firewall. I'm hoping we didn't make a bad choice going with PA but it's to late for us to turn back now. This was pretty much a standard feature in most of the firewalls we evaluated. I find it hard to believe that PA can't even do a simple url redirect. Hopefully PA addresses this oversight soon if they want to continue expanding sales into Education.
Hooked up with a SE from PA during ignite this year. His suggestion was to direct traffic for youtube to our local load balancer and have the load balancer do the rewrite. In the process of testing this. I'll post an update if it works.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!
The Live Community thanks you for your participation!