Enforcing safe search in web filter

To enforce safe search, you must use SSL deep inspection. See Certificate and deep inspection modes.

To enforce safe search in web filter:

1. Go to Configuration > Security.
2. Create a new profile group by clicking on the dropdown next to Profile Group and clicking the plus sign (+) or select an existing profile group.
3. Enable Web Filter With Inline-CASB.
4. Under Web Filter With Inline-CASB, click Customize.
5. Under the Settings tab, scroll down to the Options section and enable Enforce 'Safe Search' on Google, Yahoo!, Bing, Yandex.
6. Click OK.

For individual search engine safe search specifications, refer to the documentation for Google, Yahoo, Bing, and Yandex.

To validate safe search after enforcing it in web filter:

Safe search is still enforced from FortiSASE even if the individual search engine allows you to disable safe search from their search engine interface. In the examples below, safe search was disabled for each of the individual search engines (except for Google which does not allow any modification).

1. Go to a web browser, browse to Google and perform a search:
   1. Observe in the top-right corner that SafeSearch is enabled and cannot be modified.

      

   2. If you click on SafeSearch, then you will see the following message:

      

2. Go to a web browser, browse to Yahoo, perform a search, and observe that search results matching safe search criteria are blocked:

   

3. Go to a web browser, browse to Bing, perform a search, and observe that search results matching safe search criteria are blocked:

   

4. Go to a web browser, browse to Yandex, perform a search, and observe that search results matching safe search criteria are blocked: