The Dashboard is the hub of Relay and the first thing you see after signing in. To return to the Dashboard from another section of Relay, click Dashboard in the left-side navigation menu.
Note: The dashboard is cached for 45 minutes.
The Dashboard is made up of reports that provide a snapshot of your user’s internet activity for a specific time period. You can change the time period by clicking on the date drop-down menu and selecting Today, Last 7 Days, Last 30 Days, or entering a custom range in the Custom Dates fields. Click Apply to save your date range.
The Dashboard is divided into nine reports:
The top report row displays summarized data from popular reports (Users, Blocked Websites, Searches, Videos, and Overrides). Click on each square to view the full-detail report.
This report displays the number of active users for the selected time period. Opening the report shows the number of website visits per user. Click on a user name to access a detailed report that includes flagged content searches, full website history, location history (if the Tracker Extension is enabled), and user details (school, grade, group memberships, and more).
This report displays the number of websites blocked during the selected time period. Opening the report displays more details about the websites blocked (category, number of blocks, and the number of users visiting the website). Sort by any column head (website, category, blocks, users) and drill down for user names by clicking the users count.
This report displays the number of searches performed by users during the selected time period. Opening the report displays specific search terms, the number of searches, and the number of users performing each search. Click on the Users count number to see a list of users associated with that search.
This report displays the number of videos watched by users during the selected time period. Opening the report also shows the title of the video, the number of views (per video), and the number of users that watched each video.
This report displays blocked websites that have been overridden by users with override privileges. The report identifies which websites were overridden, which category they belong to, the number of times they were overridden, and which users performed the overrides.
This report displays the number of websites visited within the selected time period (in graph form). Hover your mouse over any point in the graph to see the exact number of websites visited during that day.
This report displays content that has been flagged as potentially dangerous or worrisome (based on your Flagged Terms list: Settings > Flagged Terms). It also includes the website flagged, the number of links, the number of users visiting the website, and the danger level of the flagged content.
Open the report (click View All) to see the full list of websites flagged, as well as the keywords that caused the flag, and the user who was visiting the flagged site.
This report displays the websites visited most by users during the selected time period. Open the report (click View All) to see a full list of top websites.
This report display a list of users who viewed the most flagged content, as well as the number of flags, and the danger level of the content viewed. Opening the report (click View All) to see a full list of flagged users.
Learn more about Reports here.
The General section allows you to set Google search and filter settings.
Click the toggle buttons to the left of the rule to turn it on or off.
- —indicates the rule is on.
- —indicates the rule is off.
In the General section, you can set the following rules:
- Force Google SafeSearch – forces all of your users to use Google SafeSearch.
- Filter Google image search thumbnails – blocks thumbnails in a Google image search that are from websites in your blocked categories and Custom Block List.
- Restrict Access to Google apps – limits your users’ access to Google apps domains that you have permitted. Add permitted Google apps domains in the Allowed Google apps domains text box. When adding multiple domains, seperate them with a comma. Note: This function is only supported in Relay extension versions 2.1.15 and higher.
- Bypass rules on failure – allows traffic to pass through if Relay cannot make an allow or block decision.
- Enable Relay for Chromebooks only – sets Relay to only filter and report on Chromebook users. Relay will not filter or report on users logged in on a Chrome browser on another operating systems.
You can lock General settings for each subsequent group in the Relay hierarchy by clicking on the arrow to the right of the settings and clicking Lock.
You can block or allow access to popular social media platforms in the Social Media section.
Click on the toggle buttons to the left of the social media platform to allow or block access.
- —indicates the social media platform is allowed.
- —indicates the social media platform is blocked.
Categories allow you to block websites by category instead of having to block each website individually. Each category has a category name, a definition, and a toggle button to allow or block the category.
Click the toggle button to the left of the category to allow or block access to the category.
- —indicates the category is allowed.
- —indicates the category is blocked.
If you are unsure of how a website is categorized, enter the website URL into the Enter a website or youtube video/channel to check… search bar at the top of the page and click Check.
In the following example we searched for www.reddit.com. The results show that Reddit is categorized as Mature.
This means that blocking the Mature category will block Reddit (or that allowing the Mature category will allow Reddit).
To change how a website is categorized:
- 1. Click the edit icon () next to the category to open the Edit Domain Details dialogue box.
- 2. In the Edit Domain Details dialogue box, click the Category drop-down menu and select a new category for the website.
- 3. Click Save.
In the following example, we changed the category for www.reddit.com from mature to forums.blogs.
The YouTube Options section is divided into the following parts:
- YouTube Controls – Various YouTube options, including Restrict Mode, hiding comments, and hiding the sidebar.
- YouTube Categories – YouTube video categories that you can choose to allow or block.
- Custom Allow List – Videos and channels that are always allowed, even if they are flagged or belong to blocked Categories.
- Custom Block List – Videos and channels that are always blocked, even if they belong to allowed Categories.
The Relay YouTube section also allows you to set several YouTube Controls.
You can turn the options on () or off ( ).
YouTube Controls include:
Note: If you’re using Smart Play, we recommend enabling Hide Featured Videos on Channels, Hide Comments, and Hide Sidebars. If you’re not using Smart Play, we recommend enabling all YouTube Controls.
YouTube classifies channels and videos into categories. You can see all categories by clicking the Show YouTue Categories link under YouTube Controls.
Note: Categories are not available if Smart Play is enabled as Smart Play overrides YouTube’s native categories. We recommend using Smart Play over YouTube Categories as Smart Play intelligently categorizes videos while YouTube categories are set by video uploaders, who do not always categorize videos correctly.
This opens the YouTube categories list:
You can block videos and channels that fall into any individual category by clicking the toggle button next to the category. In the following example, we have blocked all videos and channels in the Music category:
– indicates the category is blocked.
– indicates the category is allowed.
You can use the Custom Allow List to allow videos that are in blocked categories.
Custom Allow and Block Lists
You can use the Custom Allow and Custom Block lists to manually block or allow YouTube videos and channels.
You can sort between videos and channels on your lists by clicking the and buttons (the number in the button identifies how many videos or channels are currently in the list).
Adding Videos and Channels
You can add videos and channels to the Custom Allow or Custom Block lists by clicking in the upper-right corner of the list. This opens the Allow Video or Channel dialog box:
Enter the YouTube video or channel URL you want to allow in the Link field and click Allow. The video is now in the Custom Allow List. The videos and channels are ordered chronologically by last added.
To block a video or channel, follow the same steps but click the in the upper-right corner of the Custom Block List, add the YouTube video or channel URL, and click Block.
In the following example, we are adding the “Sports” YouTube channel to the Custom Block List:
Deleting Videos and Channels
To delete a video or channel from the Custom Allow or Custom Block list, click the to the right of the video or channel you want to delete.
In the following example, we’re deleting the Gaming YouTube channel from the Custom Block List:
Custom Video Lists
The Custom Video Lists page gives you an alternate view of your Custom Allow and Custom Block lists. Here you can also enable Custom Allow and Block list functionality in After School Rules.
To access the Custom Video Lists page, Click View All in the upper-right corner of the Custom Allow or Custom Block list.
From here, you can also enable Custom Video Lists for After School Rules. Enabling Custom Video Lists for After School Rules allows or blocks the videos and channels in your Custom Allow and Custom Block lists when After School Rules are applied.
To enable your Custom Allow and Custom Blocked lists when After School Rules are applied, click the Enable for After School Rules toggle button.
Enabling Allow Overrides gives designated users the ability override video blocks except for videos in the Custom Block List and videos blocked by Smart Play. You can designate override users in the Users section of Relay. Enable the Allow Overrides option by clicking the toggle button.
A hierarchy controls allowing or blocking YouTube categories, channels, and videos:
1) Smart Play overrides any other setting as long as Restricted Mode is turned off (Restricted Mode should always be turned off when using Smart Play.) Smart Play Allowed and Blocked lists override Smart Play categorization.
2) If you are not utilizing Smart Play, then YouTube’s Restricted Mode overrides any other setting. If you have the Enable YouTube’s Restricted Mode option turned on, then every single video categorized as “restricted” by YouTube will be blocked, even if it is within an allowed category or placed in the Allowed Videos & Channels list. Practically all videos that YouTube categorizes as “restricted” are of no educational merit, so you should not encounter a scenario in which you want to allow a restricted video.
3) The Allowed Videos & Channels and Blocked Videos & Channels lists override Categories. A channel or video that appears in one of these lists will always be either allowed or blocked (depending on which list it is in), no matter if the Category it is in is allowed or blocked. Ex: If you have the Films & Animation category allowed, but have a YouTube video within that category in the Blocked Videos & Channels list, then the video will always be blocked. Similarly, if you have the Films & Animation category blocked, but then have an educational film within that category in the Allowed Videos & Channels list, then the video will always be allowed.
4) The Allowed Videos & Channels list always overrides the Blocked Videos & Channels list. You can have an entire channel in the Blocked Videos & Channels list, but if you have a single video from that channel in the Allowed Videos & Channels list, the video will still be allowed.
The following example illustrates how all three non-Smart Play hierarchy settings work together:
Let us suppose you have the Films & Animation Category as allowed and have the Enable YouTube’s Restricted Mode option enabled. Instantly, all videos that are labeled as “restricted” by YouTube within that category are blocked, no matter what. Next, let us suppose that you have an entire Channel, “Shakespeare Films for Adults” (which falls into the Films & Animation category), in your Blocked Videos & Channels list because the majority of the videos in the channel are inappropriate… but, a teacher wants to show a single video of a film form that channel which contains age-appropriate content. You therefore place that single video into the Allowed Videos & Channels list. As a result, the entire “Shakespeare Films for Adults” channel is blocked, but the single video of the appropriate film from the channel is allowed.
Note: Even though the Allowed Videos & Channels and Blocked Videos & Channels lists override Categories, Sealed Categories (categories that you are not able to toggle on/off, such as the “Offensive” category, which contains highly offensive material, and the “Illicit” category, which contains illegal pornographic material) override all lists.
Navigate to After School Rules by clicking Internet Access > After School Rules in the left-side menu.
On the After School Rules page, you can enable the rules by adjusting the slider. You can apply After School Rules in two ways, according to a schedule (Scheduled) or when students are off campus based on IP range (Off-Campus).
Note: After School Rules use your public IP address.
Scheduled After School Rules
To set After School Rules according to a schedule select the Scheduled option.
After selecting the Scheduled option, you can set the start and end times for After School Rules. The After School Rules you set will only apply during the periods you specify. You can set separate schedules for weekdays (Mon-Fri) and the weekend (Sat, Sun).
To set a schedule, enter the time you want After School Rules to take effect into the Start field and the time you want After School Rules to end into the End field.
Off Campus After School Rules
Set After School Rules according to IP range by selecting the Off Campus option.
After selecting the Off Campus option, your After School Rules automatically apply when students’ devices leave your specified networks.
To set your networks, click the network button () to the right of the slider:
This opens the Campus Networks dialog box. To add a campus network:
- Enter your network name in the Network box.
- Enter your Classless Inter-Domain Routing (CIDR) number in the CIDR box.
- Select your predefined CIDR switch from the drop-down menu.
- Click Add.
You will then see your network in the Network list. Add as many networks as necessary. You can delete a network from the list by clicking the to the right.
The CIDR is a range of IPs. Example: If your IPs range from 192.168.1.0 to 192.168.1.25, your CIDR is 192.168.1.0/25. You can use this tool
to determine your CIDR.
If you want to allow a website in a blocked category, you can easily do so by adding it to the Custom Allow List.
Navigate to the Custom Allow List by clicking Internet Access > Custom Allow List in the left-side navigation menu.
Sites in the Custom Allow List are never blocked. To add a site, type the site’s URL in the Search/Add bar and press Enter on your keyboard.
Do not include a subdomain, not even www., unless you want to treat subdomains differently. For example, adding wikipedia.org will allow every subdomain of Wikipedia including en.wikipedia.org, fr.wikipedia.org, and so on. In contrast, allowing www.wikipedia.com will not automatically allow en.wikipedia.com.
Note: If you are using Blocked Search Keywords, do not add the domain (for example, google.com) to the Custom Allow List.
Verify the URL (reddit.com in the example below) and click Add to add the site to the Custom Allow List.
Custom Allow List sites are ordered by date added. You can remove a site from the Custom Allow List by clicking the to the right of the URL. You can set the site to generate reports for flagged terms by checking or unchecking the Allow Flagging box.
You can import a list (.csv or .txt) of websites by clicking the Importbutton (). The file should contain one URL per row or line and no more than 500 rows or lines.
You can enable Custom Allow Lists for After School Rules by clicking the Enable for After School Rules toggle button. This allows the Default Rules to check against the Custom Allow List while After School Rules are on.
If you want to block a website that is in an allowed category, you can easily do so by adding the website to the Custom Block List.
Navigate to the Custom Block List by clicking Internet Access > Custom Block List on the left-side navigation menu.
You can add any site to the Custom Block List. Sites in the Custom Block List are always blocked. To add a site, type the site’s URL in the Search/Add bar and press Enter on your keyboard.
Note:Do not include a subdomain, not even www., unless you want to treat subdomains differently. For example, adding wikipedia.org will allow every subdomain of Wikipedia including en.wikipedia.org, fr.wikipedia.org, and so on. In contrast, allowing www.wikipedia.com will not automatically allow en.wikipedia.com.
Verify the URL (reddit.com in the example below) and click Add to add the site to the Custom Block List.
Custom Block List sites are ordered by date added. You can remove a site from the Custom Allow List by clicking the to the right of the URL.
You can import a list (.csv or .txt) of websites by clicking the Import button (). The file should contain one URL per row or line and no more than 500 rows or lines.
You can enable Custom Block Lists for After School Rules by clicking the Enable for After School Rules switch. This will allow the Default Rules to check against the Custom Block List while After School Rules are on.
You can use Blocked Search Keywords to stop your users from searching for specific words. Navigate to Blocked Search Keywords by clicking Internet Access > Blocked Search Keywords.
Users that search for a Blocked Search Keyword see a block page similar to the following example:
Note: To block search keywords, you cannot have the domain (for example, google.com) in the Custom Allow List.
Adding Blocked Search Keywords
You can add to the Blocked Search Keywords list either manually one keyword at a time or by uploading a .CSV or plain text file containing multiple keywords.
Adding a Single Term
To add a single term to the Blocked Search Keyword list:
- Type the keyword you want to add in the Search/Add text box and press Enter to search for the keyword.
- If the keyword isn’t currently in the Blocked Search Keyword list, click Add to add it.
Click the next to the search term to exit back to the list.
Adding Multiple Terms
To add multiple terms to the Blocked Search Keyword list using a .CSV or plain text file:
- Click the Import icon to the right of the search box.
- Click Choose File and navigate to your .CSV or plain text file on your computer.
- Click Import.
Note: The file must contain one keyword per row with a limit of 500 rows.
Enabling Blocked Search Keywords for After School Rules
To enable the Blocked Search Keywords for your After School Rules, click the Enable for After School Rules toggle button at the top of the page.
- – indicates Blocked Search Keywords are enabled for After School Rules.
- – indicates Blocked Search Keywords are disabled for After School Rules.
Matching Blocked Search Keywords by Regex Patterning
You can have Relay match Blocked Search Keywords by Regex patterning.
Regex is a special text string for describing a search pattern that gives you significantly more control over your Blocked Search Keywords. Regex pattern matching allows you to quickly analyze large amounts of content in order to identify specific character patterns.
Enable Regex patterns in Relay for a Blocked Search Keyword by checking the box under the Enable Regex column next to the term.
The Flagged Queue section of Relay contains a queue of visited websites and user searches that contain one or more of the Flagged Terms listed under Settings > Flagged Terms. The Flagged Queue shows which websites the flags came from, which specific searches or browsing within the websites triggered the flags, and which users were doing the searching or browsing that triggered the flags. You can use the Flagged Queue to block potentially harmful websites that appear on the queue, see exactly which terms within websites are triggering flags, and see which of your users are searching or browsing for flagged terms.
You can access the Flagged Queue by clicking on Flagged Queue on the main left-hand side Relay navigation bar.
The Flagged Queue interface shows flagged activity for a certain date range. You can set the date range by clicking the data box on the top right and selecting one of the presets (Today, Last 7 Days, Last 30 Days) or inputting a custom date range. Click Apply to apply the date range.
The Flagged Queue interface is divided into a left-hand navigation menu and a right-hand box. The left-hand navigation menu contains all websites that have triggered flags. This menu displays the website name, the number of users who triggered flags on the website, the number of links from which flags were generated, and the aggregate danger-level of the site based on the terms flagged within it.
You can sort the left-hand navigation menu list by clicking the sort button () and selecting to sort by either Number of Links, Number of Users, Danger Level, or alphabetically by Website. You can also select whether you want the list sorted from Highest to Lowest or Lowest to Highest.
You can search for a specific website by typing it into the Search bar.
Typing any term will get you all search results that contain that term. Click the gray “x” within the search box to cancel the search.
Clicking on any link on the left-hand navigation menu opens up its details on the right-hand size box. Here, you will see a list of links that triggered a flag within the website.
Flagged links can be either searches users made (such as in the Google example below), or non-search based websites that contained the flagged term within the text of the webpage. For each individual link, you will see (1) the URL (which you can click to navigate directly to the website), (2) the Flagged term or terms that caused the link to generate a flag, and (3) the Users who browsed the site.
When reviewing the Flagged Queue, you can chose to Allow, Block or Clear a website. To allow a website, simply click on the site you wish to allow from the left-hand navigation menu and click the Allow button. This will automatically add the site to your Internet Access > Custom Allow List and the website will no longer generate any flags. Similarly, to block a website, simply click on the site you wish to block from the left-hand navigation menu and click the Block button. This will automatically add the site to your Internet Access > Custom Block List.
You can clear a website from the Flagged Queue by clicking the Clear button. You can clear the entire Flagged Queue by clicking the Clear button dropdown and selecting Clear All.
The Device Detective section of Relay allows you to locate missing or lost devices.
You can access Device Detective by navigating to Device Detective in the main Relay left-hand navigation bar.
Device Detective lists all of your devices, the date they were last connected to the network, their location (if enabled), and their last IP Address.
1. Name: The name of the device.
2. Last Seen : The date the device was last connected to the internet.
3. Near: The approximate location of the device (if the device has location services enabled)
4. IP Address: The last known IP Address of the device.
You can sort devices in ascending or descending order by Name, Last Seen, Near, and IP Address by clicking the column headers. You can navigate from one page to the next by clicking the gray navigational buttons or manually inputting the page number into the number field.
You can search for a specific device in the top-left search box (we searched for our Test device in the example below.)
Clicking on a device under the Name column opens up the device information and settings box on the right-hand side.
Here, you can:
1. Rename the device by clicking the edit icon.
2. Remove the device from the list by pressing the Remove from List button.
3. Exit out of the device information and settings box and return to the full Device Detective list
4. See the latest known device location on a zoomable Google map. This can help you track your lost or missing device.
5. See the device’s location history. This can also help you track your lost or missing device.
Syncing Device Detective to Google Admin
You will need to sync Device Detective with Chrome in order for it to work properly.
1. Log into your Google Admin Console. Navigate to Users.
2. On the left-hand menu, click on the dropdown menu to the right of your organization and select Add sub organization.
3. Name the new sub organization Stolen Devices. Click Create Organization.
4. Navigate back to the Google Admin Console dashboard and click on Device Management.
5. From the left-hand menu, select Chrome Management.
6. Click on App Management.
7. Click on the dropdown Settings menu on the top right and select Add custom app.
8. On the Add custom app page, you will need to copy the App id and App URL from the Relay interface. Navigate to Settings > Device Detective and copy the ID and URL values under the Chrome Extension section.Insert those into the ID and URL fields in Google Admin. Click Add.
9. On the app page, click on User Settings.
10. Click on the Stolen Devices organization you created in step 7. Click the Override command under each setting so that it changes to Inherit in order to enable toggling it on/off. Enable the Allow Installation and Force Installation settings. Click Save.
11. Navigate back to the app and now click on Kiosk Settings.
12. Navigate to your Stolen Devices organization and enable the following settings: Install automatically and Allow app to manage power. (Remember to click Override under each setting to change it to Inherit in order to be able to toggle them.) Click Save.
13. Scroll down on the Kiosk settings page and click on device settings page in order to navigate to Device Settings.
14. On Device Settings page, navigate to the Sign-in Settings section. Select Do not allow guest mode under the Guest Mode category. Select Do not allow any users to Sign-in under the Sign-in Restrictions category.
15. Scroll down to Kiosk Settings. Select Do not allow Public Session Kiosk under Public Session Kiosk and select the app you recently installed under Auto-Launch Kiosk App.
16. Scroll down to Power & Shutdown. In the field for Scheduled Reboot input the number 1. Click Save.
17. Navigate back to your Google Admin Console and click on Device Management.
18. Click on Chrome devices. Select the lost or stolen device by checking the box to the left of the device information. Click the Move to dropdown menu and select Stolen Devices. Click Move to Organization.
Note: The extension needs to be uploaded to GAFE, but only devices that have been deemed stolen are to be placed in the Stolen Devices OU. Only the devices placed in the Stolen Devices OU will have the Device Detective app installed when connected to the internet. A device without access to the internet will not Boot, therefore, as soon as it is used and the user logs in, the app will be installed and a lockout will be enforced.
19. You can now find the device by navigating to Stolen Devices in the left-hand navigation menu. From here, click on the device Serial Number.
20. Scroll down and click on System Activity and Troubleshooting.
21. Scroll down the Reboot Device and click REBOOT NOW. This will reboot the device and force the logout/login event.
Once the device is rebooted, it will show the following screen.
Clicking on Let us know opens up a field where users can add their e-mails and a custom message that will show up in Device Detective.
22. You will now be able to see the device in Device Detective. Log back into Relay and click on Device Detective. You will see the device you just added to your Google Admin Stolen Devices OU in the list. The device will show a “new” icon next to the name if it’s a new lost/stolen device.
23. Once you have located the device, remove it from your Google Admin Console Stolen Devices OU. Navigate back to Device Management -> Chrome Devices. Locate the device within your Stolen Devices OU, check the box next to the device, click the Move to dropdown menu, and move the device back to the OU where it belongs.
- a. In the case of more than one lost/stolen devices, perform the above steps individually for each device, one by one. Once a device has been moved to the Stolen Devices OU, has all the correct settings set, and appears in Device Detective, rename the device. Repeat this step with each new device. This will allow you to easily distinguish between devices.
- b. District Admins are encouraged to work with local law enforcement to retrieve stolen devices and not to attempt to recover them on their own.
Certain Google settings may interfere with the function of Device Detective. We have found that have Guest Mode enabled can block Device Detective from properly working. To turn off Guest Mode:
Navigate to Google Admin > Device Management.
Navigate to Chrome Management.
Navigate to Device Settings.
Make sure that you have your top-level root organization selected on the left-hand menu. Scroll down to Sign-in Settings. Under Guest Mode, select Do not allow guest mode. Click Save.