Images in Google Search, business.google.com and other google domains are not being displayed when SafeSearch policy is enabled on the ProxySG or ASG

book

Article ID: 169033

calendar_today

Updated On:

Products

ProxySG Software - SGOS Advanced Secure Gateway Software - ASG

Issue/Introduction

If you install Google SafeSearch with the default policy you will not encounter this issue. However, if you change the following from:

;=====================================================================
;<proxy> url.category="Search Engines/Portals" condition=!BC_SafeSearch_all_Domains
;url.query.regex="" http.response.code=200..299 DENY("Denied: Safe Search not implemented.") 



to:


;=====================================================================
<proxy> url.category="Search Engines/Portals" condition=!BC_SafeSearch_all_Domains
url.query.regex="" http.response.code=200..299 DENY("Denied: Safe Search not implemented.") 


then you will see image display problems.
The above policy is required if you want to block searches using search engines such as the one on baidu.com which don't implement SafeSearch functionality.


The image display issue is known to occur with the following domains:

keep.google.com
contacts.google.com
business.google.com
Google Picture Search



 

Cause

When enabling the above rule it will match for various Google CDN's hosting the image files so they will get denied. You need to add extra policy for the affected domains to the BC_SafeSearch_all_Domains condition.

Resolution

Add gstatic.com and business.google.com and other Google domains exhibiting the issue to the BC_SafeSearch_all_Domains condition. For example:

define condition BC_SafeSearch_all_Domains
 url.domain=gstatic.com
 url.host=business.google.com
 condition=BC_SafeSearch_A9_Domains
 condition=BC_SafeSearch_Alltheweb_Domains
 condition=BC_SafeSearch_Altavista_Domains
 condition=BC_SafeSearch_Ask_Domains
 condition=BC_SafeSearch_Google_Domains
 condition=BC_SafeSearch_YouTube_Domains
 condition=BC_SafeSearch_Lycos_Domains
 condition=BC_SafeSearch_MSN_Live_Bing_Domains
 condition=BC_SafeSearch_Orange_Domains
 condition=BC_SafeSearch_Yahoo_Domains
end