Content Filter - Mobile Devices

[khurram]

On mobile devices we use Content Filter payload set as Limit Adult Content. This gives students safe browsing off the school premises. Sometimes the teachers complain about some websites or pages on some websites as restricted so we add those sites/ pages to white-list under this payload. I have got two queries here as follows.

• if we add like www.bbc.com so would all the other pages on this website will be considered as unrestricted. For instance, would anyone be able to access www.bbc.com/adultcontent/ as well or would it be restricted.

• can we provide a facility where teachers (authorized) send an email to JJS with a website link and this link becomes part of the white-list because by the time we implement this request the teacher would have finished the lesson and we might not need it anymore.

[calumhunter]

would it not be better to instead utilise content filtering at a network level rather than client?

Perhaps install a dedicated content filter onsite and ensure all http/https traffic must route through it?

[bbelew]

Some schools use global proxy and their school content filter to accomplish it. I personally don't like that method. Why? Big reason - if I take the network down evenings or weekends for any reason it would take them down, and use our network bandwidth. Other reason I personally feel it's the students responsibility to use the device responsibly off network. Though sometimes the restrictions end up being requested by the community, if that is the case i'll cave and do it.

Also parents can turn on restrictions on the device if they so desire.

[khurram]

@bbelew Yes, that's a community request. We do have settings on the network but what happens after school. You already mentioned the limitations of Global proxy like Netbluebox, smoothwall etc.

[calumhunter]

@bbelew If the content filter is setup as transparent, then you don't define any proxy settings on the device.

@khurram But does your school really have a duty of care to the student when using a device at home via the family internet connection?? I would have thought not. So should be no problem to have no filtering when they are at home.

[bbelew]

@calumhunter inside the building, yes. But global proxy can also be used full time to force a user to go through your proxy server, at school or at home. A process I don't agree with because I personally feel once the device leaves our network it's the students responsibility to be responsible with that device.

[calumhunter]

Yep thats what I'm saying, surely there is no need or duty of care policy that extends to filtering content on a device once that device leaves the school?

[cdenesha]

A Community may care if the age level of the student is less than 13.

To answer the OP's first question, whatever is in the beginning part of the URL is what is allowed; sub-pages like www.bbc.com/adultcontent/ would be allowed. However if there is a sub-domain then that would need to be its own entry, i.e. adult.bbc.com. For the second question, No. And I would downvote a FR, as configuration profiles should not be deployed without careful checking.

chris