Image blocking for blocked URLs

[#1]

Hello! What is the correct method to block questionable images from sites that are currently blocked by Web content filtering? The Web site gets blocked if you try to access it directly, but if you do a Google image search, you can still view images from the ' blocked' site. Thanks!

[abelio]

Hello, if you don' t want/can block images.google.com, you could use your FTG IPS for " safe search" ; you have 2 signatures: Google.Safe.Search.Off and Yahoo.Safe.Search.Off to take care unless of those 2 search engines. I don' t know how to do the same thing for another engines with no explicit blocking or doing your own custom signatures. regards,

[lmuir]

Further from abelio suggestion, if the two primary image search engines used by your users is yahoo or google, you could enable the IPS signature for both the search engines, as well as blocking the category of " Image Search" but exempt yahoo and google. Since the safesearch filtering is done by IPS, it shouldn' t be bypassed by the exemption. Cheers, Lachlan.

[#4]

I' m having a problem with blocking images as well. Acutually it blocks them, but users are able to change the safe surf level on Google. How do I prevent them from doing that? Google.Safe.Search.Off was not enabled.

[#5]

I got it figured out. I enabled Google.Safe.Search.Off and set it to block. Now if anyone sets their Google preferences to have safe search off, then they can' t search.

[#6]

The Google Safe Search works fine, but I can' t get the Yahoo Safe Search to work. I enabled Yahoo.Safe.Search.Off and set it to block. I logged in with a user account to which this profile is applied. I went to Yahoo, turned off the search filter and was still able to search. I did not receive a message from the firewall (logging was enabled) stating that it was turned off.

[#7]

I opened up a TAC with Fortinet and they created custom signatures for Cuil and Live search engines. With these, you can detect and block searches if users turned off the safe search. I tested them out and they work great. Many thanks to the technicians at Fortinet! Cuil: F-SBID(--name Cuil.Safe.Search.Off; --protocol tcp; --service HTTP; --flow from_client; --pattern " Referer:" ; --no_case; --context header; --pattern " .cuil.com/" ; --no_case; --context header; --within 60; --pattern " Cookie: safe=0" ; --context header; --no_case; ) Live: F-SBID(--name Live.Safe.Search.Off; --protocol tcp; --service HTTP; --flow from_client; --pattern " Referer:" ; --no_case; --context header; --pattern " .live.com/" ; --no_case; --context header; --within 60; --pattern " &ADLT=OFF&" ; --context header; --no_case; --within 800; )

[p768]

In the protection profile, have you enabled the following option in the Fortigaurd Web Filtering section: Rate images by URL (blocked images will be replaced with blanks)