I have an MX65 with content filtering, youtube filtering etc. One of the teachers in school needs to have unfiltered access to youtube. I created a new group policy and applied that to my machine and the teachers one, both however don't work with the group policy assigned. I've tried clearing cache etc but has anyone else got any other ideas?
Internet - Modem (Bridged) - MX65 - Server - Clients
DG is set to the MX65, DNS settings and everything else pushed from the local server.
So I assume you blocked youtube with the L7 firewall rule in the MX firewall? Something like this:
And then in the new group policy you created you selected custom firewall rules:
And then you applied the policy to the clients like this:
I tested it and it works for me. It only blocks the actual video stream though, the website itself loads fine. During testing I gave it some time to sync the MX configuration and restarted my browser. Sometimes it took a little while to actually start doing what I configured it to do.
To upgrade the Firmware one should have "Organization Wide" admin Rights.
You will see "Firmware Upgrades" option under "Organization".
Screenshot attached for reference.
Also note if the client has accessed something recently and then you apply the group policy the client can continue to access it for a while until the MX expires the flow out of its cache.
Usually waiting 10 minutes (or rebooting the MX) is sufficient.
Thank you all for your help, basically I have just changed the Youtube settings under Content Filtering, so we have the following:
We have no firewall settings for youtube so surely it should be relatively simple if the group policy is applied?
When on site yesterday I tried rebooting the MX65 but no luck.
Just a quick update as I'm only on site once a week, I tried changing the DNS server address to Google's and OpenDNS, once I closed and reopened the browser the group policy setup on the MX65 worked as it should do :).
Is there any reason why my ISP DNS would be causing the issue? I'm going to contact them but was wondering if anyone had any thoughts on why changing the DNS address to OpenDNS would be a bad move?