Chromebook Allowlist USS Gateway Proxy

Updated 2 years ago by admin

This method bypasses a large portion of Google's infrastructure so it should only be used if you cannot use the Chromebook Agent. Reporting and filtering of Google search should still be available however CASB Inline rules will be affected that share the same domains

In order to filter Chromebooks through the USS Gateway there are a number of steps which need to be taken.

Firstly, the proxy will need to be deployed to Chromebooks using Guest/Captive portal. Then, in order to allow users to authenticate and log into the Chromebook you will need to bypass the following URL's:

gvt1.com
gvt2.com
gvt3.com
fonts.gstatic.com
googleapis.com
play.google.com
accounts.google.com
tools.google.com
ssl.gstatic.com
mtalk.google.com
clients3.google.com

When creating the bypass rule make sure to configure the bypass category to only apply to captive portal connections, that way you limit the impact of the bypasses by making them inapplicable to standard proxy connections.

How did we do?