How to use ProxySG policy to block DuckDuckgo search with keywords

Products

• Cloud Secure Web Gateway - Cloud SWG
• ISG Proxy
• ProxySG Software - SGOS

Issue/Introduction

Users want to  perform a DuckDuckgo web search and certain keywords has to be denied from search completely. 

Environment

DuckDuckgo websites defaults to HTTPS. As a result, for the solution to work, customer environment needs to meet the prerequisite:

1. SSL Intercept is enabled to intercept traffic.

2. Explicit Deployment: Detect Protocol is enabled to hand off the traffic to SSL Proxy

Resolution

The Edge SWG (ProxySG) and Cloud SWG can be configured to allow DuckDuckgo search for every other keyword  except the ones that are not allowed by Company's Acceptable Use Policy

Following example will deny search for any combination that contains "gamb" or gambling. 

<Proxy>  ;Block searching by keywords
url.domain=duckduckgo.com url.path.prefix="/?" condition=denied_keywords Deny


define condition denied_keywords
    url.substring=gamb 
end

NOTE: To deny more keywords  add a new line in the denied_keywords