View Cart
0 Items | Total: US$0.00
Welcome,      Register

You are here

SEC0245 - FTD 6.1 Safesearch and Youtube EDU (Part 1)

Rating: 
5
Average: 5 (1 vote)
Difficulty Level: 
0
Lab Document: 
<Please login to see the content>
The video looks at two methods to control online search on Cisco FTD 6.1 which are Safesearch and YouTube EDU. Safesearch is targeted to filter explicit content form supported search engine and we will implement this using access control rule with SSL decryption and DNS sinkhole. YouTube EDU on the other hand enforce users to only see allowed contents.
 
Part 1 of this video covers Safesearch with Access Control Rule
 
Topic:
  • Safesearch
    • Access Control Rule with SSL Decryption
    • DNS Sinkhole
  • SSL Decryption
  • YourTube EDU

About Author

Metha Chiewanichakorn, CCIE#23585 (Ent. Infra, Sec, SP), is a Cisco networking enthusiast with years of experience in the industry. He is currently working as a consulting engineer for a Cisco partner. As a founder of and an instructor at labminutes.com, Metha enjoys learning and challenges himself with new technologies.

6 comments

After configuring safesearch we get error message:

Connection is not private.

It is in google chrome but not in Microsoft Edge browser.

Could this be related to client not trusting the cert on FMC due to traffic decryption?

Hi there. Thank you very much for your video, very informative. I have a problem with opening Google using self-signed certificate and having the root certificate installed in Trusted Root Certificates folder. I get this error ERR_SSL_VERSION_INTERFERENCE. Bing seems to be working fine and Yahoo doesn't load the page correctly. This I get using Chrome and using Firefox I get this error while trying to use Google: SSL_ERROR_NO_CYPHER_OVERLAP. Do you know what could be causing this? I need some extra config on FMC?

Thank you in advance.

Please make sure your cert has signing capabilty for SSL decryption and that you trust the root/intermediate CA.

Another doubt. If I purchase a public certificate, I would need to go for Code Signing certificate correct?

Best regards,
Remy

No becuase you most likely will not be able to get a signing cert from public CA.