Chromebook Webfilter and Logging

[it]

Hi there,

We are looking to roll out some Chromebooks into our Secondary School for shared use. I need a way of recording the use of the Chromebooks. At a minimum, I need to record Log on/off Time, Username, IP Address. Or, even better would be a log of all internet traffic and the username. We currently use a Fortigate for our internet filtering, but it doesn't have the option of single sign on for Chromebooks. So I can use it to filter and record usage, but without a username.

All Chromebooks are managed, any chance anyone knows if this information is stored in the Chrome Management?

What's everyone using for recording and internet filtering of Chromebooks. Keeping in mind that they're shared, not 1 to 1. 

James Smith

Parklands Christian College.

[Brad Heaton]

Hi James,

The Login audit log in the Google Admin suite will provide you with a log of login records for students showing IP address and date/time. It will only show the IP address of your WAN connection though, and not the individual IP address of the Chromebook. If you want more detailed logging and capabilities, then you will need to use something like GoGuardian. This will provide what you are looking for and much more. 

Since you are using Fortigate, you also have the option of installing the FortiClient on Chromebooks and combined with Google SSO might provide you with the information you need - https://www.fortinet.com/content/dam/fortinet/assets/solution-guides/forticlient-chromebook.pdf

Brad Heaton

ICT Manager, Bayside Christian College

--
You received this message because you are subscribed to the Google Groups "Google Chrome ANZ Education" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-chrome-anz-e...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Antony Street]

James,

We were and will be again, using GoGuardian to record all Internet activity on a Chromebook. Since deployment, we were able to retire our on-premise filtering solution. We also use OpenDNS as a backup for the most critical category.

https://www.goguardian.com/

Right now we're using Lightspeed Relay but we don't feel it's as good. They're quite a bit behind but do have some good features.

GoGuardian allows you to see all browser activity of the student logged against their user id. It can track on and off campus and includes location tracking abilities too. We chose to filter off-site but not log and we never activated location-based tracking. Felt a bit creepy but might be good if the school owned the Chromebooks.

As for who used a particular Chromebook, Brad hit the nail on that one.

Antony

Antony Street IT Manager IT Department Thornlie Christian College 19 Furley Road, Southern River WA 6110 P:+61 8 9455 1607

Wisdom
Proverbs 2:6 It is the Lord who gives wisdom; from Him come knowledge and understanding.

This email and any files transmitted with it are confidential and intended solely for the use of the addressee. If you have received this email in error, please notify the system manager. Please note that any views or opinions presented in this email are solely those of the author and do not necessarily represent those of the company. Finally, the recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email.

--

[James Smith]

Thanks Erin, Brad and Antony. This has given me some good directions to follow up. I've been wandering around in circles for a little bit on this one.

Erin - Securly looks too good to be true, I'll investigate it some more. I do have concerns for privacy. It's designed for Educational institutions, so at first glance, you would think it would be ok.

Brad - Thanks I'll have a look at the logs and see what's in them. I guess without the local IP it may not be useful.

Antony - Thanks for the review of Relay. I had just been looking at it after stumbling across an email advertising it from a while back. I wondered if it was worth a look. I'll check out Go-Guardian. 

James Smith

IT Manager

Parklands Christian College
www.parklands.qld.edu.au

11 Hillcrest Road
Park Ridge 4125
Ph: 07 3380 4200
Fax: 07 3802 0711

Twitter: parklandsnews

Facebook: pccnews

Note: If any part of this message or any attachments are not clearly received or unable to be read, please contact us. This document (including attachments) is intended for the addressee(s) and may contain privileged or confidential information. Unauthorised use, copying or distribution of this document or any part of its content is prohibited. If you have received this e-mail in error please contact us immediately and destroy all copies of this e-mail message. The views expressed in the email do not necessarily reflect the view of Parklands Christian College (Qld) Ltd ACN 58097063. Thank you.

[Antony Street]

James, the security on the Chromebooks is rock solid once set up correctly. Google originally monetised the mail of the students but when challenged in the courts in the US, changed its policy about 5 years ago. No EDU account is monetised in any way.

Antony Street IT Manager IT Department Thornlie Christian College 19 Furley Road, Southern River WA 6110 P:+61 8 9455 1607

Wisdom
Proverbs 2:6 It is the Lord who gives wisdom; from Him come knowledge and understanding.

This email and any files transmitted with it are confidential and intended solely for the use of the addressee. If you have received this email in error, please notify the system manager. Please note that any views or opinions presented in this email are solely those of the author and do not necessarily represent those of the company. Finally, the recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email.

[James Smith]

Thanks Antony, I was more concerned about the security/privacy of the filtering logs. I'm guessing with some of these cloud-based filters, logs of all traffic would go to these external companies.

James Smith

IT Manager

Parklands Christian College
www.parklands.qld.edu.au

11 Hillcrest Road
Park Ridge 4125
Ph: 07 3380 4200
Fax: 07 3802 0711

Twitter: parklandsnews

Facebook: pccnews

Note: If any part of this message or any attachments are not clearly received or unable to be read, please contact us. This document (including attachments) is intended for the addressee(s) and may contain privileged or confidential information. Unauthorised use, copying or distribution of this document or any part of its content is prohibited. If you have received this e-mail in error please contact us immediately and destroy all copies of this e-mail message. The views expressed in the email do not necessarily reflect the view of Parklands Christian College (Qld) Ltd ACN 58097063. Thank you.

[Antony Street]

Yes, that's unavoidable in this paradigm because of the cloud environment. But, that's also what makes it work everywhere. Tradeoffs.

Antony Street IT Manager IT Department Thornlie Christian College 19 Furley Road, Southern River WA 6110 P:+61 8 9455 1607

Wisdom
Proverbs 2:6 It is the Lord who gives wisdom; from Him come knowledge and understanding.

This email and any files transmitted with it are confidential and intended solely for the use of the addressee. If you have received this email in error, please notify the system manager. Please note that any views or opinions presented in this email are solely those of the author and do not necessarily represent those of the company. Finally, the recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email.