3

I'm using a physical Stormshield Firewall to control connections of a private companies. There are rules to block some websites, like video games websites, Facebook, etc.

However, these websites can still be accessed. For this, you search the website on Google, right click-it and open the cached version of it, which bypass my restrictions.

Any idea about how to deal with this?

Improve this question
2
  • 1
    Sounds like a very good way to lose talented employees. Don't forget to glue any USB/Firewire ports as well, and make sure your hardware doesn't have Wi-Fi or other wireless capabilities. Also, some HDMI ports can carry Ethernet as well. Otherwise they'll be able to tether to their own mobile connection. You can also do software modem over audio jacks.
    – Lie Ryan
    Commented Dec 17, 2017 at 23:23
  • People will always find a way to bypass censorship. If Google cache is blocked, they can use an obscure CGI proxy which is unlikely to be blocked. They can use Google Translate (which acts like a proxy). They can use various archival websites. Hell, they can even browse the web through Microsoft Word if they want to badly enough.
    – forest
    Commented Dec 18, 2017 at 1:14

2 Answers 2

Reset to default
1

You can block access to "http://webcache.googleusercontent.com".

Although you have to ask yourself why you are blocking access to these sites? The cached version will not allow users to log in or navigate to new pages - it is effectively read only access.

In most cases where a block list is the preferred approach (as opposed to a system that blocks every domain that isn't white listed) read only access is fine.

Improve this answer
8
  • If he wants to prevent people from reading video game reviews (or whatever) at work, he must block read only access to do so. Hell, most webgames you can play on cached webpages.
    – Monica Apologists Get Out
    Commented Dec 14, 2017 at 15:24
  • @Adonalsium - sure. But he doesn't mention reviews specifically. As for webgames yes for many you can. But for anything complex its going to fail.
    – Hector
    Commented Dec 14, 2017 at 15:28
  • I think it's reasonable to assume that the poster wants to block video game reviews when he states he's working for a private company and explicitly mentions video game websites... I don't know why I'm really arguing about this. This is pure pedantry.
    – Monica Apologists Get Out
    Commented Dec 14, 2017 at 15:44
  • @Adonalsium - You're speculating. He could mean all manner of things from in browser games through to anything even game related. You can never hope to block every mirror. If you want that level of control move to a whitelist based system...
    – Hector
    Commented Dec 14, 2017 at 15:54
  • 1
    @BR.Hamza - OT but for what its worth where I work we leave it enabled on a trust principle. By allowing the web cache it saves a lot of support requests from users for bypass codes to view a single article. If they were seen abusing it we could always discipline them. IMAO you pay someone to do a job. Whether they waste time is irrelevant - either the work they do do is worth what you pay them or its not.
    – Hector
    Commented Dec 14, 2017 at 16:41
1

If google web cache is the only problem, could you simply parse the URL for webcache.googleusercontent.com, and block the request if the q parameter contains the name of a blocked site?

This way you don't have to block the google cache completely, if it is necessary for the company.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .