We are increasingly seeing the need for a URL rewrite feature - we had hoped to use it for one of the ways to force Google SafeSearch (vs. the existing option of blocking searches using an app signature)
We now would like to use YouTube for Schools, which depends on URL modification:
A) Add new HTTP header ruleModify your hardware filter or proxy server settings so that all outgoing traffic to youtube.com contains the following custom HTTP header. The ID to use in the HTTP header configuration, written below, is an example of a unique ID for your school’s network only. If your school is blocked at the district level, this HTTP header is then unique to the district network.Example:
X-YouTube-Edu-Filter:ABCD1234567890abcdefField Name: X-YouTube-Edu-Filter
Description: When YouTube sees this header and an accompanying valid school ID in the incoming traffic, YouTube will serve a limited EDU-only site to all computers behind the school hardware filter.
Field Value Format: alphanumeric [a-z][A-Z][0-9]
Field Value Length: up to 44 characters
B) Create URL parameter rewrite ruleIf your hardware filter not support HTTP header modification, please rewrite all outgoing URLs to youtube.com by appending the parameter “edufilter” at the end. Exclude the &edufilter parameter from these file types: .css, .gif, .png, .js, .xml
Is/will there be any way to do this in PanOS 4.1? We are upgrading over the holiday break.
Ryanlehms...There is a workaround using a squid proxy to perform the rewrite for safesearch & YouTube for Schools. The PA would use PBF to redirect these traffic to the squid proxy and the rewrite is done. if interested, you can contact your Palo Alto SE to obtain the VM/ESX version of the squid proxy. Thanks.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!