I set up the Safe Search Enforcement option, as described in the documentation of Palo Alto Networks. But it still fails when it comes to blocking searches for porn on search engines.
Does anyone by chance have used this new option that is only available in version 6.0 PAN?
Thanks for everything.
Google have introduced a virtual IP to facilitate the enforcement of safesearch (:
I too have found PAN's safesearch enforcement feature buggy and unreliable, and Google's own solution has the added advantage that it requires no end-user configuration at all - safesearch gets forced on transparently. It's straightforward to set this up on our DNS servers using RPZ (we're already doing this for Google's nosslsearch virtual IP), but... we don't force users to use our DNS so they can easily bypass this by using Googles (or some other) DNS.
Is there some way to transparently proxy external DNS requests to our own servers - the DNS proxy feature seems to assume that requests are directed to the PAN firewall, so this isn't an option - maybe PBF or sinkholing could be used?
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!
The Live Community thanks you for your participation!