Possibilty of blocking URL?

Is there a way to block e.g.:

without blocking the whole sites.google.com?

Hi @edanpedragosa this cannot be done via a firewall. It requires a proxy or endpoint solution. This is because a firewall does not have visibility into the content of a domain that is being visited, only the address.
The path part after the domain name is part of the content.

It could be done with Plucky:ADAM.

Only on windows, Mac and Linux though. And it needs to be installed on each device.

1 Like

As they mentioned, blocking only a specific subdirectory within the sites.google.com domain without blocking all of sites.google.com, achieving this at the network level without using a proxy or reverse proxy can be challenging. Network-level blocking typically operates at the domain or IP level rather than at the subdirectory level.

In your case, blocking a specific subdirectory like “sites.google.com/sites/NAME,” which is hosted within the sites.google.com domain, a network-level solution might not be feasible with pfSense and adam alone.You’ll need a more advanced network infrastructure or additional tools beyond the capabilities of pfSense and adam.

I believe you’re going to require SSL interception to do this properly, which would involve a proxy/reverse proxy.

I feel bad for you man, kids are creative…

how do you get access to this?

It’s only available for MSS+ I believe.

It’s basically a modified version of this.

It’s a complex setup. Needs lots of reading the docs.

Yes, for now I set all student devices on Zero Trust policy.

To avoid doing the whack-a-mole game again, I also blocked sites.google.com and github.io too as it has a lot of domains offering unwanted non essential contents.

Kids are really techie nowadays and we should be at least one step ahead of them.

Yes, for MSS+ we include a version of https://www.pluckeye.net which is an endpoint solution as I mentioned in my first post. But anyone can use it directly from their web site.
There are a lot of endpoint solutions out there. To enforce them you do need some kind of enterprise device management system as well.

I’m familiar with their product. I was just interested in this version, which I read about elsewhere on this forum. Can’t afford the MSS subscription for just me haha. As far as “enterprise device management system,” if you’re talking about an MDM, I do have Intune. Maybe this will be available when the new pricing model comes out? Anyway, thanks @atw and @Victor

Hi, D.
You can find out more about the Plucky|ADAM version here:

This is a collaboration that we do with Plucky specifically for content protection of mixed content domains as mentioned above. And yes, currently it is only available in the MSS+ bundle.