Install a web custom blacklist

[Stephen70]

Hello everyone,

I'm new here and i'm looking for a feature that it seems to not exist. I'm looking for a system that allows to install a fully custom blacklist. We want to block sites when students are at home. They always find new sites and it's impossible to manually blacklist them in a web content filtrer rule. Just taking the example of pornsites: there is plenty different sites from different countries and it's completely impossible to blacklist them all.
I found on internet an university in France that created and keep updating a huge blacklist that contains pornsites, game sites, extremist religion sites, and I'm asking if there is somewhere that I can "install" it.
An important point too: I'm just a site administrator.

There is the university's site if you want to check the content: http://dsi.ut-capitole.fr/blacklists/
I hope you will understand what i'm trying to explain. Thanks for your help.

Best regards, Stephen.

[KSchroeder]

I don't think there is any built-in functionality that can do what you're looking for. Your best bet (if you really need to restrict this stuff) would be a web proxy that uses categories. I know ForcePoint can do this; it has a client and server approach (not sure of other architecture models, like cloud-only), so basically all traffic flows through the proxy. Worth looking in to, or any of a myriad of other proxy products.

[Asnyder]

We use Iboss here but like KSchroeder mentioned It's just a proxy.

[Stephen70]

Thanks for your answers ! We are currently using a proxy, but it means that we can only restrict websites when they are at school but not at home. I wanted to guarantee to parents an enhanced security at home.
Do you think the integrated content filter is powerful enough to block the most pornsites?

[Asnyder]

I'm not quite sure how we do it, as its over my head a little. But we have our proxy setup with dns zoning (correct me if I'm saying this wrong). But basically when the kids are at school they go through our fortigate firewall like everyone at the school. Filters differ by vlan, teachers have a different filter than students. and the proxy part doesn't work unless they are off site. So they connect to their network at home but the proxy tells all content to go through the firewall at the school first, which causes it to get filtered when they're at home. The DNS zoning is what differentiates between being at home and being at school and toggles the proxy on when they're off the school network, and on off when they're on the school network because all traffic goes through the firewall at the school anyway. Again this is a bit over my head but that's a really bad explanation as to how ours is setup.

[Stephen70]

Ok, well, I think got it but in my case we can't access the proxy if we're not on school's network; anyway, it's interesting to see how different systems can be. I will try to know if we can manage to have something like you to use. Thanks for your help !