Configure Safe Search
For supported software information, click here.
You can use safe search to restrict the types of links that appear in internet search results when using the Bing, Google, or YouTube search engines to filter mature or inappropriate content from search results and recommended videos. These search engines provide an option to override the domain name server (DNS) with a canonical name (CNAME) to enforce the safe search traffic flow across the network. You can control safe search in the search engine's settings and lock safe search to prevent users from turning it off using family controls or network-level filters.
Safe search works across websites, images, and videos to filter content. To identify and block inappropriate content, safe search uses keywords and image filtering for terms and content, and uses artifical intelligence and machine learning to classify text, images, and videos in to safe or unsafe categories. Safe search also reviews metadata, including titles, descriptions, and tags.
Safe search provides the following benefits:
- Helps parents and schools protect children from harmful material.
- Assists in maintaining an appropriate environment in workplaces.
- Supports a safer browsing experience.
You can configure safe search for traffic from certain users, user groups, or device groups, or that originates in certain source zones. You can configure safe search for tenants that use the Versa Secure Internet Access (VSIA) service or both the VSIA and Versa Secure Private Access (VSPA) services. You cannot configure safe search for tenants that use only the VSPA service.
The following table lists the search engines, their domain names, and their CNAME URLs used to enforce safe search.
| Search Engine Application | Domain Name | CNAME URL to Enforce Safe Search |
|---|---|---|
| Google Search | www.google.com | forcesafesearch.google.com |
| Bing | www.bing.com | strict.bing.com |
| YouTube |
www.youtube.com m.youtube.com youtubei.googleapis.com youtube.googleapis.com www.youtube-nocookie.com |
restrict.youtube.com
restrictmoderate.youtube.com
|
To configure safe search:
- Go to Configure > Security Service Edge > Real-Time Protection > Safe Search.

- Click the Enforce Safe Search slider to enable safe search. Enabling safe search automatically deploys the required configuration across all gateways.

- Select one or more zones in the Source Zone box.
- To restrict the safe search feature to specific users, user groups, or device groups:
- In the User Groups, Users, and Device Groups pane, select a group profile for users and user groups.
- In the User Groups tab, select one or more user groups.

- Select the Users tab and select one or more users.

- (For Releases 12.2.1 and later.) Select the Device Groups tab and select one or more device groups.

- Click Save.
Supported Software Information
Releases 11.3.2 and later support all content described in this article, except:
- Release 12.2.1 adds support for the Device Group tab.
