TABLE OF CONTENTS

Policies allow admin users to choose how users will be filtered.  Policies can be applied to different users with different settings.  Policies can be created in the Admin Console > Policy Manager.


Rule Hierarchy

  • The Default Rule is the rule that will be duplicated whenever one creates a new rule.

    The Default Rule is the rule that will be applied when all other rules fail to be applied. 
  • The rule that is listed at the top is the rule that will be applied. If the first rule fails, the next applicable rule in the list will be applied. When all rules fail to apply, the Default Rule will take effect.
  • To change the rule order, click on a rule and select the toggle/move arrow icon that will appear on the right side of the selected rule. The Default Rule's location cannot be toggled.
  • If a rule is disabled, the next rule (from the top of the list) that matches those OU's associated with the disabled one will be used.

Creating a Policy


Policies can be created in the Admin Console > Policy Manager.  To create a new policy, click 'Add New Rule'. 

Conditions


After entering a Rule Name, choose your "Conditions" for that rule.

  • Location

    • On Campus - Users who fall under the public facing IP address at the school.
    • At home - Any location outside of the school's public facing IP addresses.
    • All locations - The policy would be applied to the user no matter the location.
  • Org Unit - Policies can be assigned to organizational units.


  • Groups - Policies can be assigned to organizational units, if "Enforce policies based on Google Workspace groups and OUs instead of OUs" option is enabled on the Configuration -> Identity Provider page.


  • Users - Policies can be assigned to individual users.
    • For Cloud proxy solution users who share devices, a made-up email can be used to set up policy rules, if such email ID is being used in their cloud proxy PAC URL.


  • IP Ranges - Policies can be assigned to specific IP addresses for example a lab.


  • Time Range - A time range can be added so the policy will only be applied during certain times of the day


  • Repeat - Policies can be repeated everyday or certain days of the week


  • Date Range - Set a date range of when the policy would be applied.


Policies

In the policies section of the rule, admin users can choose different safety settings, add search keywords to be allowed or blocked, black out foul words, set the sensitivity of real-time analysis, and block certain categories that webpages are classified.  Policies will tell the AI technology how to filter the browser session.  


  • Policy Templates

    • Templates can be added to rules for special occasions when a user needs to allow or block certain categories or URL's.  With the "Policy template" enabled, the template will override the rule.
    • When creating a template you can choose what categories to be filtered and the ability to add URL's to the blocked or allowed list.
    • Allowed list in the rule can override blocked list of policy templates if that option is enabled

  • Wellness detection

  • With ActivePulse™ subscription, wellness detection can be turned on or off in policy rules


  • Privacy Protection

    • Block Ads
    • Allows ads for these sites - URL's can be added that need ads to access the webpage without unblocking all ads in the browser
    • Block third-party tracking
    • Block Google search tracking


  • Content Safety

  • YouTube restricted mode

When turned on, Moderate or Strict option is available:

  • Moderate Mode:
  • Blocks age-restricted adult content
  • Blocks videos with mature metadata flags from YouTube community
  • Allows video previews/thumbnails
  • Allows comments on videos
  • Allows live streams
  • Allows annotations, cards
  • Filters search suggestions but allows some non-age-restricted results

   

  • Strict Mode:
  • Blocks any age-restricted content (set as 18+ by uploader)
  • Blocks videos flagged as containing mature content by YouTube community
  • Disables video previews/thumbnails that could contain mature imagery
  • Disables comments on videos to avoid mature language
  • Blocks all live streams (as they can't be pre-screened)
  • Blocks annotations, cards that could link to mature content
  • Heavily filters and limits search suggestions
  • Blocks videos even if not age-restricted if deemed potentially mature


  • Remove Youtube suggestions


  • Google, Yahoo, Bing safe mode

Note: If both Google safe mode is enable in Google Admin and in the policy, this will create a conflict. 
 

  • Blocked and Allowed Search Keywords - Key words can be added to be either blocked or allowed.

    • Separate keywords by commas
    • The list can contain a maximum of 100K characters
    • Fuzzy match is used by default for blocked keywords. For exact match, place “keywords” in quotes (e.g. “fortnite” only blocks “fortnite” while fortnite blocks fortnite / fort nite / f o r t n i t e /fortnit*).
    • Fuzzy match is NOT used for allowed keywords. If a word is placed in quotes, only exact searches are allowed. Otherwise, searches containing those words are allowed (e.g. “drugs” would allow “drugs” search only while drugs would allow “buy drugs”).


  • Black out additional words

    • Inappropriate words can be blacked out.  A default list has been compiled and can be added to the list by clicking the “Add default List” button.


  • Real Time Analysis

    • Admin users can adjust the sensitivity level of the text, image, and video analysis.

  • Restrictive Mode 

When it is enabled, images will all be blurred when a webpage loads and unblurred after analysis is done

  • Modesty mode: When enabled, images with immodest clothing will be blurred

  • Analyze video conferencing

    • Analyze webcam video feeds and screen sharing during Zoom (Chromebook web client only) and Google Meet sessions. This could have some performance impact on slower computers.
  • Enable Deledao Discover
    • Revise search engine results to show only school-approved results.


  • Check the 'Filtering Categories' on the categories to be filtered.     

NOTE: If a “Filter Category” is not selected, then that category will not be filtered




Add URLs to the "Blocked List" and "Allowed List"


Our blocked and allowed lists offer you great flexibility in adding exceptions to your policy. In addition to host and domain names, URLs are also accepted. Below are some examples.
 

  • The wildcard * is usually not necessary as we automatically match the webpages hosted under the hostname or URL. For instance, "www.example.com" would match every webpage on www.example.com. However, it won't match videos.example.com.
  • "example.com" would match every webpage in the example.com domain, including www.example.com and videos.example.com.
  • "example.com/foo" would match every sub-webpage of example.com/foo (e.g. example.com/foo/bar), including itself.
  • "*" can be used in hostnames. Each * would match exactly a component in the hostname between the dots. For instance, "*.example.com" would match foo.example.com, but not foo.bar.example.com.
  • By default, AI analysis will be enabled for search engine, social networks and streaming media sites in the allowed list.
  • If a minus sign ("-") precedes a URL in the allowed list, automatic AI analysis will be disabled.

    For instance, if the customer puts "-youtube.com" in the allowed list, AI analysis will be disabled for the entire youtube.com.

  • If a plus sign ("+") precedes a URL in the allowed list,  AI will be enabled. 

For instance, "+wikipedia.com" would still enable AI analysis on wikipedia.com


  • Press "Save" in the upper right-hand side to apply any changes made to a rule.



© Deledao Education