Checkpoint can not block Offensive Language content

[Phillip-83]

Hello everyone,

Currently, I'm introducing the Checkpoint FW product to a school.
Every feature is relevant until they want to check out Filtering feature:
- They are using the following website for testing: http://testfiltering.com/
- I have implemented relevant categories, http/https inspection,..., however when performing "run test", the test results still do not prevent access to Offensive Language.
- I will leave the video with the configuration and perform the test below (video in file .pptx): 

 

Now competitor Fortinet is also pitching to that school, and they passed the test, pictured below:

If our solution can pass this test, that school will be very likely to buy the solution, because they are more favorable towards Checkpoint than Fortinet.
So please help me, is there any way to configure and pass the test?

Thank you very much, everyone.

Best regards.

[_Val_]

What do you configure in the policy to prevent those categories?

[Phillip-83]

Hi _Val_,
You can check configure on the .pptx file attachment.

[_Val_]

And what made you think I did not check it before asking a question? 

You put there a video of the test. It is virtually impossible to see in the video how you configured your URLF policy. 

[Lesley]

Hi!

What blades you have enabled to achieve this goal? I assume you want to use URL filtering and application control?

At this moment I am not able to find a URL filtering category related to bad language. Is does also not make sense I think. For example if there is a bad word in a youtube video comment this video then needs to be blocked? Maybe this has education purposes. So I would reconsider to advise against blocking this category. 

Also I found the DLP (data leak prevention) blade has an option for blocking bad language. Below screenshots as reference.

[the_rock]

Logically, to me anyway, if you can find category that matches offensive language, you can add it to be blocked. I cant recall now what closest one to it would be, but its easy to tell once you hit plus sign to add them. Otherwise, I would confirm with TAC.

Andy

[_Val_]

There are plenty, see below

[the_rock]

Just logging in now to S1C for one customer, let me see.

Andy

[the_rock]

@_Val_ I dont see inappropriate sites by default, I assume you added it yourself? Other ones are there...

Andy

[_Val_]

Anyhow, make sure you add these categories to the block rule, and see if it makes any difference.

 

On top, I hope your HTTPS Inspection is on.