How to configure Google Safe Search for keyword blocking

Video preview:

Learn the basics and a bit beyond, from zero knowledge and skill to decent playing skill

Safe Search is a feature of Google Search and Bing that acts as an automated filter of pornography and
potentially offensive content. Firewall supports enabling this feature by force.

Google / Bing Safe Search is used to filter search results on supported Search Engines. Safe Search
enforcement prohibits users to search for websites containing explicit adult content.


1, Firewall should be is in Non-Transparent Mode / Transparent mode / Hotspot Mode, as well
as Gateway and DNS pointed toward it.
2. Enforce DNS Interception rule under Firewall Port forward Rule or Force
clients to use EN6200 LAN IP as the DNS server. This Prevent outgoing DNS requests to external
DNS servers from your network so that to be directed to –
a specific host that returns non-SSL results.

Limitations :
 Safe Search relies on the supported search engines to honour and filter the search results. The
firewall can enable this feature, but the execution is left up to the search engine.
 Safe Search is not enforced for mobile search apps.
 Safe Search is always set to strict Mode.

– Enable “Enable force safe search”
1- Log on to Firewall GUI with appropriate permissions.
2- Go to CONFIGURATION > WEB SECURITY > HTTP/S Proxy > Group Rules.
3- Select the Group on which you want to enforce Safe Search. ( Example – Default)
4- Click On edit, will open a new window called “Edit group: Group n”
5- Under Actions, Enable the “ Force safe search” as shown in below Picture, mark with red
rectangular box
6- Save and restart the services.

– Enable DNS Interception
Result: There are multiple sub-tabs associated with Firewall/Nat are displayed.
2. Click the Port Forwarding
Result: Will get the new window, if rule is already created with the name “DNS Intercept”, just
enable it.
Otherwise add rule and configure same as below snapshot.

Internal DNS domain GUI Configuration
Result: There are multiple sub-tabs associated with the Network setting tab are displayed.
2- Click the INTERNAL DNS DOMAIN. New Window will open
3- Click to a new Domain and configure it as a given snapshot and save it.
4- Add a record value for and configure it the same as a snapshot.
5. Click to Save.
6. Now Click On Under the same Internal DNS Domain windows. Result: Will get the new window.
7. Create a CNAME record pointing to

Similarly for Users of Indian region, they also need to configure for as well.
NOTE: Above record value / FQDN will be resolved to the Google Safe Search Virtual IP Address automatically.
But you may also add a and provide an A record override for
to (
Now, your network is configured to enforce Safe Search for computers of that group. To confirm it’s
active, the first time you visit , a message will appear on the top of the screen
confirming Safe Search is force enabled.

For BING –
Bing also offers a CNAME-based Filter equivalent as well as a system for schools to register their IP
addresses for Bing to enforce Family Filter on the server-side. For more information, please refer
For the CNAME equivalent, use the Google steps above; however, point to