Solved

HTTPS image searches

  • 31 March 2014
  • 5 replies
  • 26 views

I am reviewing options for content filtering. Webroot cloud service appeals however I have a concern wrt to content filtering on an SSL connection. I have heard that HTTPS image searches cannot have content filtering/safe site filtering applied to them as Webroot cannont inspect SSL traffic. i.e. if someone went to e.g. https://www.google.co.uk and searched for adult-orientated images, the search can come back with content that would have been filtered if the search was from a non SSL site e.g.  http://www.google.co.uk ?
 
Is anyone able to confirm that the above is true and if so, what is the workaround?
icon

Best answer by shorTcircuiT 31 March 2014, 14:29

View original

5 replies

Userlevel 7
Hi DeepPurple
 
Welcome to the Community Forums...http://www.forumsextreme.com/images2/sSig_welcome4.gifhttp://www.forumsextreme.com/images2/sSig_welcome4.gifhttp://www.forumsextreme.com/images2/sSig_welcome4.gif
 
I believe that you are correct and that at present there is no 'workaround' to allow the image content to be filtered by WSA...but this is only from my testing...and one of the gurus here @ @ may know differently.
 
Hopefully one of them, now tagged, will come back on this for you.
 
Regards
 
 
Baldrick
Userlevel 7
Hello there :)
 
I am really not sure... The consumer product does not actually filter content for things such as x-rated pictures, it filters for malware, phishing threats and other security hazards.  X-rated pictures, while not pleasant, are not security hazards in and of themselves and so are not blocked by WSA.
 
If you need a solution that will block specific content types, WSA might not be the solution for you, but hopefully someone with more knowledge of the business solutions will reply here as well.  @ Can you give some guidance here?
 
 
Userlevel 7
Hi David
 
Thanks for the pick up.  Much appreciated...as always. :D
 
Regards
 
 
Baldrick
many thanks for the responses. I am looking for a solution that will be appropriate for school children.
Userlevel 7
Badge +6
@ Deep HTTPS inspection is an enterprise-grade feature with extreme pricing. Even then you need full administrative control of the computer to inject your own trusted SSL certificate.
 
You need a local agent that integrates directly into the browser installed on the computer to do what you're requesting. You are looking for local content filtering, not a security or cloud product.
 
Without going into a dissertation on varies aspects of your question I unfortunately don't have any further advice, nor do I have any experience in those kinds of products. 

Reply