Using Relay with a Network Filter

Can I use Relay with another filter?

Yes. Relay is a cloud-based filter for Google Chromebooks that ensures safety and CIPA-compliance any time and anywhere. That means you do not need to use another filter – but you can.

If you want to use Relay as the ONLY filter, even on a school network:

There are several ways to accomplish this, with a Lightspeed Systems Rocket Web Filter or another filter:

  • You can place the Chromebooks in an unfiltered network, such as a guest network or a DMZ.
  • You can set an IP range for the Chromebooks and put those IPs into an Allow All policy.
  • You can apply an Allow All policy to your Chromebook users and use the Lightspeed Systems User Extension for Chrome to seamlessly identify which users get this policy. (Note: If students log into PCs or other operating systems with their Google IDs, use User Identification Priority feature in the Rocket to check for those other OS auth methods first.)

Either of these options will ensure that your Chromebooks are not filtered by the Rocket so they can be filtered and reported on by Relay.

If you want to use Relay AND your network filter:

While you can use Relay along with a network filter, you should remove other Chrome extension-based filters before using Relay. Otherwise, the two extensions may create redirect issues and other conflicts.

If you want to use Relay on Chromebooks that are on a filtered school network, you need to ensure that the URLs required for Relay are unblocked by the filter.

Unblocking these URLs will ensure that Relay can connect to our cloud services. When devices are on the filtered school network, they will be filtered by both Relay and the Web Filter. When devices are off the school network, they will be filtered by just Relay.

  • Note that double-filtering will cause data to appear in two separate places depending on where the traffic was blocked and can lead to some anomalies in reporting. This is especially true if your policies in the two solutions don’t match exactly:
  • If something is allowed by both Relay and the Rocket, the traffic will appear in both Rocket and Relay reports.
  • If something is blocked in both the Rocket and Relay, you will see a Rocket block page and it will be reported in the Rocket. Relay will never see the traffic, as it was blocked prior to making it to cloud.
  • If something is allowed on the Rocket but blocked by Relay, you will see the Relay block page and it will be reported in Relay Blocked reports. The Rocket will see the traffic as allowed even though it was blocked.
  • If something is allowed in Relay but blocked by the Rocket, you will see the Rocket block page and it will show as blocked in Rocket reports. (The traffic will not show in Relay.)