This article is for IT support when managing devices using cloud-filtering and 24-7 filtering.
The Off School Manager Network configuration applies to:
- Linewize Connect Windows and macOS devices use the Off School Manager Network settings while on and off your school's physical network.
- Connect for Chrome - Education and Connect iOS for Education use your school’s filtering policies while devices connect to off-campus networks (like home or public WiFi).
Off School Manager Network does not apply to BYO Windows, macOS, Android or Chromebook devices running Family Zone Connect in Australia and New Zealand. The School Community Platform (SCP) settings and the student’s parent’s filtering rules monitor the device outside of school.
A. Filtering Enabled
Applies to all devices running Linewize Connect and Connect for Chrome.
You can enable on-device filtering to ensure your users’ devices are protected everywhere and all the time. The Off School Manager Network filtering enables Linewize Connect on Windows, macOS, and iOS/iPadOS to apply your filtering policies on the users’ local devices.
If your school uses cloud-only filtering, Off School Manager Network filtering is required to enforce your cloud policies and monitoring. The Filtering Mode balances performance on your users' local devices with the amount of scruitiny given to uncommon web traffic.
If your school network uses a School Manager physical appliance, enabling Off School Manager Network filtering lowers the processor load on your appliance. Your users’ devices do the filtering instead of your appliance. The local filtering will result in less traffic on your network and better processing on your appliance while devices are using your school network.
If you disable filtering Off School Manager Network and Linewize Connect is installed on the users’ devices, Fallback filtering remains active when devices are connected to networks outside of your school. Fallback filtering will ensure adult content is blocked to meet CIPA (Children's Internet Protection Act) and Online Safety Act protection requirements.
B. MITM Enabled
Applies to devices running Linewize Connect on Windows and macOS. It also applies to Linewize Connect for iOS/iPadOS when Web or Full Filtering Mode is active.
You may need to monitor students accessing mature topics like suicide, substance abuse or violence while their devices are not connected to your school’s network. By enabling "Man In The Middle" (MITM), Linewize Connect can decrypt and monitor search terms and YouTube content and apply your filtering policies.
MITM and Inspected domains allow you to use:
- View Bing, Google and YouTube search keywords (Cyber Safety > Search Reports)
- Inspect and monitor YouTube content (Cyber Safety > Video Reports)
- Search and video content risk indicators in reports (Cyber Safety > Red Flags and Cyber Safety > Blocked)
- Real-time alerts or weekly reports for risk indicators (Filtering > Alerts and Reports)
- Limit access to personal Gmail, Google Workspace, Microsoft Azure, or Outlook accounts when Connect is running on macOS or in a Chrome browser (Filtering > Content Filtering > Rule > Custom Header)
- Match custom lists of websites to block or keywords to filter (Configuration > Object > Pools > Website List)
As needed, you can add Groups, like teachers or school administrators, to MITM Exclude Groups devices running Linewize Connect.
MITM is always on in Connect for Chrome due to how the technology works in browser extensions. Unchecking MITM does not turn off search and video inspection in the Chrome extension.
BYO iOS/iPadOS devices running Family Zone Connect in Filter-only Mode (DNS filtering), do not support MITM.
C. Safe Search
Only applies to the Connect for Chrome - Education running in a browser.
Safe Search ensures your users see age-appropriate search results when Connect for Chrome - Education is installed in a web browser. If Connect for Chrome - Community is used on BYO Windows, macOS or Chromebook devices, the parent’s Family Zone Safe Search settings are applied.
Connect for Chrome enables Safe Search to omit explicit content from the results from Google Search, Bing, and YouTube search.
The Safe Search checkboxes do not enable Connect for Windows, macOS, and iOS/iPadOS. See Enforcing Safe Search to create a filtering rule and use MITM to inspect search engines.
Safe Search should be configured Google Workspace or School Manager, but not both to avoid conflicts that disable Safe Search.
Applies only to Linewize Connect, Family Zone Connect, and Connect for Chrome at schools using Classwize outside of school (like a home WiFi connection).
If your school uses Classwize, most of the Classwize features are available while Windows, macOS, and Chromebook devices are:
- Using cloud-filtering on-campus with no School Manager physical appliance.
- Connected to the internet outside of school (such as home or public WiFi).
E. DNS Filtering
Applies to devices running Linewize Connect on Windows, macOS, and iOS/iPadOS. Applies to Family Zone Connect for iOS/iPadOS when Web or Full Filtering Mode is active.
DNS Filtering can be used to exclude educational software tools, if your School Manager filtering prevents users from accessing the educational applications. These tools might include LDAP servers, Student Information Systems (SIS), assessment software or classroom management applications.
When Configuring Bypass Domains you can use a root domain or subdomain, but cannot use IP addresses. The configuration is applied on and off your School Manager network and Linewize Connect will not filter the applications in the DNS Filtering list.
Please sign in to leave a comment.