Brief Description
The K-12 Skillet is intended to help enable a safe and secure internet experience. The features and options are meant to help easily enable Safe Search features across the institution without having to manually configure and audit devices.
Target Audience
K-12 users or other entities that want to implement Safe Search features
Skillet Details
Documentation: https://github.com/PaloAltoNetworks/K12Skillet/blob/master/README.md
Github Location: https://github.com/PaloAltoNetworks/K12Skillet
Github Branches: master
PAN-OS Supported: 9.0, 9.1
Type of Skillet: panos/xml, python
Collections: Education
Purpose: enable a safe and security internet experience for K12 users
Features Included
Builds on the IronSkillet configurations
Dynamic configuration based on the desired Safe Search deployment:
- Transparent - SSL inspection with NGFW enforced Safe Search
- DNS-Proxy - NGFW responds to Google and Bing search engine requests with Safe Search only server IPs
- Local DNS CNAME - Limits outbound DNS requests to sanctioned internal DNS servers with Google and Bing Safe Search configurations
Additional Safe Search information can be found at: https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/url-filtering/safe-search-enforcement.html
Optional country block: Only allows IPs from US, Mexico, Canada, and cloud providers (based on EDL)
K-12 Reports
Targeted decryption policies to help enable SSL Decryption adoption and limit risk
Requirements
PAN-OS 9.X
Threat, URL, and WildFire subscriptions
Panhandler or other skillet-supported applications
How to use
The K-12 Skillet is intended to be used with Panhandler. Both configuration options can be found under the Education Skillet Collection once they are imported into Panhandler.
There are two different methods of deploying the configuration:
1) Full Workbook deployment - Single workflow that launches all three Skillet components
2) 3-Step deployment - Manually run through Step 1, Step 2, and Step 3
