Changes to SWGfL Internet Filtering

Google and SWGfL Internet Filtering Changes

Google searches utilise encryption technologies for added security and where this has previously been optional, it will be made mandatory by them in early February 2015.

In order for the RM SafetyNet Filtering service to perform filtering on all Google searches (such as images), there is a need to decrypt, analyse, and then re-encrypt all traffic using the RM SafetyNet security certificate.

The following changes are needed:

• A new certificate must be imported as a ‘Trusted Root Certificate’ to all computers and devices that browse via an RM SafetyNet protected Internet connection – most Devon schools
• This new certificate may be installed manually or automatically through a managed network
• Web browser settings need to be changed to point to a new proxy server

Schools are being contacted by South West Grid for Learning (SWGfL) by email or phone or they may have seen notifications on the RM website.  RM run the Internet service for SWGfL and have setup resources to aid schools in making the required changes.

If the changes are not carried out (as above) then although Google searches will still work, they will be not be completely unfiltered – for example, a Google image search may come up with inappropriate preview images, although a user would not be able to enter the website if clicked on.

RM have made information and instructions available at the following locations allowing schools to make the necessary changes, as well as providing a Technical Helpline on 01235 826263.

General notes and background information regarding the issue (all OS instructions listed on this page)
http://www.rm.com/shops/whatwedo/Product.aspx?cref=PD4214715

Quick links to Windows instructions

Deployment instructions for Windows PCs (Windows 7/8 etc.)
http://www.rm.com/_RMVirtual/Media/Downloads/RMEducationCA.crt – download the certificate

Deployment instructions for Windows network servers (Server 2008/2012, RM CC3/CC4) http://www.rm.com/_RMVirtual/Media/Downloads/RM_SafetyNet_Certificate_Deployment_-_Windows_Networks_v1-7.pdf

Instructions on deploying on a vanilla Windows networks and CC4 networks are covered.

The relevant sections in the deployment notes for admin/standalone are:

To import the Certificate see section 7.4

To change the Proxy Server settings see section 8.3.4

There is a table on pages 4 & 5 that covers what the new Proxy Server should be set to, e.g customers which currently use proxy.swgfl.org.uk need to switch to sslfilter.proxy.swgfl.org.uk.