Content filtering?

[jasoncrcsd]

We use an extension based content filter on the chromebooks for the users. it works but we've found a flaw and was just asking around to see if there was any solution. Anyway we had some Kiosk apps various state testing ones etc. Well in them since they access them before logging in they don't get the extensions. Is there any way of doing content filtering when using one of the Kiosk apps?

I'm sure the answer is probably no.

[steve]

We use GoGuardian and yes, the extension only loads if a user logs in, not if you use a kiosk or guest session. Under those conditions we use the Google admin console to block all URLs except whatever the kiosk needs (usually just one or two domains).

[jasoncrcsd]

Yea but for us I'm not sure how we'd use the URL blocking considering we have over 10k devices and the schools don't want to tell us which devices are used for this testing asnd when

[gritisw]

We have the URL blocking enforced for all student devices. This way the students are protected when off your network. The blocking is only in force when they are using a kiosk app.  We have our devices in separate OUs from our users in google admin, and this setting is in Devices/Chrome/Settings/Device/URL blocking. We only apply this to devices, not users. We put in the https://* and http://* in the blocked URLs, and then the list below in the blocked exceptions, which should include some of the more common educational kiosk apps: Riverside DataManager, Secure Test Browser, TestNav, ACT Unity, Bluebook, DAC APP, and Performance Matters. The URLs to open for those kiosk apps are: 

performancematters.com

YOURSTATE2LetterAbbreviation.testnav.com

home.testnav.com

testnav.com

pearsontestcontent.com

chime.aws

adamexam.com

act.org

actdigitalservices.org

act-et.org

thawte.com

usertrust.com

comodoca.com

google-analytics.com

cowriter.dev

donjohnston.net

cw-ws.qadji.com

speechstream.net

rwgoogle-webservices-7.texthelp.com

testnav-congitive-auth.dev.texthelp.com

actaspire.org

studentportal.mdassessments.com

agora.com

ably.com

ably.io

ably-realtime.com

agora.io

sd-rtn.com

pearson.com

pearsonaccessnext.com

cambiumast.com

cambiumtds.com

starttest.com

riversideonlinetest.com

riversidedatamanager.com

programworkshop.com

riversideinsights.com

collegeboard.org

sentry.io

ibt2tc-ap.ets.org

For other apps, you will usually see in a block message from google what the URL would be that you need to add. Otherwise you will need to contact the kiosk app's support to find the blocked URLs.

[don_b_nashville]

Apps like DNSfilter.com work by redirecting DNS queries through their servers, allowing account holders to manage their own block/allow lists or borrow their categorized sets of interest areas. In kiosk mode there should be no way for anyone to re-redirect to 8.8.8.8 and open everything back up. DNSfilter also has the "roaming client" option for an OS install for Mac, Win, Chrome as well as iOS and Android extensions. We're very happy with it.  Just need to ensure all internet traffic out is directed by DNSfilter and/or the client install is done correctly for off premise applications.

[jasoncrcsd]

I'll take a look at this, thanks

[Justin_W]

DNS Filtering or any non-browser based filter (like an web filter appliance or other network hardware solution)

Linewize offers both appliance and browser-based filtering.