Masters-duplicate-please-edit-the-other-one

The Default Filtering Settings

The Default Filtering Settings

The Default Filtering Settings

By default GenTech blocks the categories of:

  1. Adult
  2. Porn
  3. Chat
  4. Dating
  5. Anonymizers
  6. Piracy
  7. Unsupported Languages

These sites are identified using both real-time AI analysis and general site categorization.

With the exception of Unsupported Languages, these categories cannot be unblocked.

(Miscategorized sites will need to be either muted or whitelisted)

Other Categories

Other categories are not blocked by default. These blocks can be activated in the CRM.

Adding the Default Category Blocks

Adding More Category Blocks

The CRM in Filtering Tab > Policies > Categories, contains the options for adding more category blocks.

Setting a Category on Allow: Will keep the category unblocked like the default. This setting may also add a whitelist for that category.

Setting a Category on Block: Will add the new category block.

System Priority Level:

These settings have the lowest priority within the whole system.

CRM and Servers

Servers

The GenTech Servers


The GenTech CRM

The GenTech CRM

The GenTech CRM, the online portal that controls the filter, is just a part of the entire system.

All the CRM settings in the front-end... Are related to specific setting on the GenTech servers in the back-end.


The GenTech Servers

The GenTech Servers

The GenTech servers are divided into 3 main parts.

Groups

Groups are sets of Policies.

When you activate a setting in the CRM, you are activating these Groups.


Policies

Polices are just sets of Rules

Since many Rules contradict one another, Policies dictate the priority level of each Rule. The lower the policy number, the more priority it will have to overpower the lower-priority policy.

Rules

Rules dictate how the filter should behave.

Rules decide whether:

  • Allow or Block the Site.
  • Show or Alter the image.
  • Bypass or Inspect the SSL.



Policies

Policies

Policies dictate the priority in which the rules should be applied.

Example (Allow): The Debug Group completely deactivates the filter. Although this Group contradicts every other Block Group in the system... And to make matters worse... when the Debug Group is turned ON, all the other Groups are on at the same time as well...

Reason: The Debug Group overrides the others because the Debug Policy has a higher priority setting.

Example (Block): The Allow Shopping category allows Staples.com. If this site was added to the Blacklist, it would then be blocked, even thought the Allow Shopping category is still active and technically allows it...

Reason: The Blacklist Policy has higher priority than the Allow Shopping Policy.

The higher Policy will override the lower ones...
Whether the higher one dictates to Allow or to Block.

GenTech Policy Setup

GenTech Policy Setup

This diagram shows the priority levels that all the different filter policies have.

Search Engines

Search Engines

Search Engine Category

This option under Filtering Tab > Policies > Categories will open all search engines.

Allowing this is not recommended as this can open unsafe search engines as well.

Safe Search Engines

Safe Search  Engines

Opening the Safe Search Engines under Filtering Tab > Policies > Groups will open just the standard safe search engines.

Blocking Images, video, and other Searches

Image Safe Search

Putting this option on Block under Filtering Tab > Policies > Groups will block the images tab in google search.

Blocking Other Searches

Under the Meta Apps Tab, you can add more settings to block the other tabs in Google.

Search for these and select Block.

Using the Whitelist with Google

Using the Whitelist with Google

Using the Whitelist to open something on Google needs to be done very carefully, as adding google.com to  any Whitelist can cause much trouble.

If there's an issue that requires a whitelist, please reach out to GenTech support for guidance on how this can be done safely.

Playstore / App Store

Google Playstore

Main Playstore Control

The main area to control the Google Playstore is under Filtering Tab > Policies > Groups > App/Play Store.

This should effectively open and close the Google Playstore, providing that no other Playstore settings are applied in the CRM.

Playstore Meta Apps

Playstore Meta Apps

Under Meta Apps Tab:

The Block Play Store meta app when placed on Block will block the playstore. Useful when the Regular Playstore settings doesn't seem to be blocking it.

The Play Store - restricted meta app when placed on Block will block downloading new apps but will allow app updates. Useful for users that just want to download updates but not new apps.

Other Playstore Settings

Other Playstore Settings

Here are all the other settings in the CRM that can affect the Playstore.

Note: If you see that the Playstore is not working properly, it pays to check these other options to ensure that they are not interfering.

Vending APK

Under Apps Tab > com.android.vending, this is the Playstore app on the device.

If this is on Block or Bypass (for Livigent Lite or Root), then this will override all the other settings in the CRM.

Note: the Hide/Uninstall option was disabled for all users.

Settings Tab

Under the Settings Tab > Please Use Categories these options can affect the Playstore:

  • TAG Allow App Store
  • TAG Block Playstore

Lists

If play.google.com was added to any list: Whitelist or Blacklist, then that will affect the Playstore as well.

Cache

Google Playstore Cache

Many times, when the Playstore seems to be opening when it shouldn't, it's opening because of the cache.

Go to Settings > Apps > Application Manager > Google Playstore, and press the clear cache button.

iOS App Store

iOS App Store

The main area to control the iOS App Store is under Filtering Tab > Groups > App/Play Store.

Allowing this will Allow all Apple related services as well.

Note: iCloud and iMessage are allowed by default, even with this option on Block.

Social Media

Social Networking Category

Social Networking Category

The Social Networking Category Under Filtering Tab > Policies > Categories > Social Networking will open allow Social Networking sites.

However, the main sites such as YouTube, Facebook, Twitter, Instagram, and similar will not open by simply allowing this.

YouTube

YouTube

YouTube is controlled from Filtering Tab > Policies > YouTube.

Restricted YouTube:

  • Enforces YouTube Safe-Search
  • Blocks all video thumbnails
  • Adds Filtering ontop of the YouTube Safe-Search

Allow YouTube:

  • Enforces YouTube Safe-Search

Priority Level

These settings are above the blocks for Social Networking and Entertainment.

YouTube Embedded

YouTube Embedded Videos

For users with YouTube on Block, individual embedded YouTube videos on other websites will be blocked as well.

Allow these by adding the site URL to the YouTube Embedded list.

In the Filtering Tab > Add New URL, type the URL of the website containing the YouTube clips into the provided field (without the http://) select the Include Dependencies option, and choose the Approvals TAG YouTube Embedded list.

This will allow these videos to play on that site while effectively blocking access to the actual YouTube.com website.

Note: The filter always enforces YouTube safe-search. If any of these videos were placed by YouTube under restricted mode, these will not play.

Facebook

Facebook

Facebook is controlled by Filtering Tab > Policies > Groups.


Facebook Open

This will open the full Facebook with a filter.

Facebook Restricted

This will open Facebook with just text. All images will be removed.

Facebook Image Altering

There's a setting to add Image Altering just for Facebook.

Find it in Filtering Tab > Policies > Image Altering > Block Facebook Images.

Twitter

Twitter

Under the Filtering Tab > Policies > Groups > Allow Twitter is the option to allow Twitter.


Twitter Image Altering

This will activate Image Altering just for Twitter.

Find it in Filtering Tab > Policies > Image Altering > Block Twitter Images.

Other Social Sites

Other Social Sites

Other Social sites can be open by adding the URL to Whitelist Minimum Filter. This will filter the site for the basic default filtering categories.

Note: Some some Social Sites have ready-made groups under Filtering Tab > Policies > Groups. These are filtered for the default basic filtering categories.

Image Altering

Images Altering

Image Altering

Under Filtering Tab > Policies > Images/Videos, you can activate Image Altering.

The three Image AlterinLevels here will activate image altering across the whole internet.

To exclude sites from this policy, you'll need to add those sites individually to the Image Altering Override list.

Priority Level

These settings are higher than the Categories tab, but may be lower than some items in the Groups tab. The Groups that disable image altering are marked.

These settings are above the Whitelist Minimum Filter but below Whitelist No Filter.

Video Block

This settings will block all videos from playing anywhere online. (Downloaded videos will play).

Block Facebook/Twitter Images

These two settings will apply Image Altering to Facebook and Twitter. (Useful when a user doesn't want to have it across the whole internet).

Excluding Shopping From Image Altering

Excluding  Shopping From Image Altering

Image Altering can be disabled for the Shopping Category. Filtering Tab > Policies > Images/Videos > Shopping No Painting.

Image Altering Override

Image Altering Override

To exclude sites from Image Altering, the site URL must be added to Filtering Tab > Add New URL.

Note: The images may be hosted on a seperate site than the main URL of the webpage. Make sure you're adding the URL where the images are actually hosted.

Customizing the Filter

Available Customization Options

Available Customization Options

  1. Block additional Categories. (covered elsewhere)
  2. Add Image Altering. (covered elsewhere)
  3. Exclude specific sites from Category Block.
  4. Exclude specific sites from Category Allow.
  5. Advanced Filtering Options

Allowing Blocked Sites

Allowing Blocked Sites

You can customize a blocked category by allowing specific sites while the rest of the category remains blocked.

Sites Blocked By Default Filtering Categories

Any site getting blocked by the Categories of: Adult, Porn, Chat, Dating, Anonymizers, or Piracy would need to be added to either:

  • Whitelist No Filter
  • Whitelist No Filter + Dependencies

Sites Blocked By Other Filtering Categories

A site getting blocked by the other added Category blocks would need to be added to either:

  • Whitelist Minimum Filter
  • Whitelist Minimum Filter + Dependencies

Available Whitelists

1. Whitelist No Filter

Any site on this list will bypass the default adult blocks in the system and will be allowed to open - regardless of the content on that webpage.

2. Whitelist No Filter + Dependencies

Any site on this list will get similar treatment to the Whitelist No Filter list with one addition...

Any other site that is linked on that page will also get the treatment of Whitelist No Filter.

Example: There were cases where Google.com was added to this list accidentally. Any site that was opened through google.com was opening, even though when the site was accessed directly it was blocked. Any listing on Google.com essentially became a dependency of Google.com.

3. Whitelist Minimum Filter

Any site on this list will bypass all the added Category blocks. Default Category blocks still apply.

Use: When a user wants a specific site open without allowing the entire category (news, shopping, or similar).

4. Whitelist Minimum Filter + Dependencies

Any site on this list will get similar treatment to the Whitelist Minimum Filter list with one addition...

Any other site that is linked on that page will also get the treatment of Whitelist Minimum Filter.

Blocking Allowed Sites

Blocking Allowed Sites

You can customize an allowed category by blocking specific sites while the rest of the category remains allowed.

Any allowed site can effectively be blocked by adding the site URL in Filtering Tab > Add New URL > 01 Private Blacklist.

Ready-Made Groups

Ready-Made Groups

There are a handful of ready-made bypasses that under Filtering Tab > Policies > Groups. These will override the main categories from Filtering Tab > Policies > Categories.

Advanced Filtering Options

Advanced Filtering Options

The Following advanced filtering options are available. Find them in Filtering Tab > Policies > Advanced.

Ad Block

This will block ads across the whole internet in apps and on websites

Keyword Block

This settings will block pages based on certain keywords written on the page.

Priority Level

These settings are above all the settings in the prior tabs.

Meta Apps

Meta Apps

Meta Apps under the Meta Apps Tab, contain specific resources to ensure that apps will function properly.

Take a quick look at the user's installed applications, and add the appropriate Meta Apps to their account.

Also, see the section dedicated to Meta Apps.

Troubleshooting Websites

Troubleshooting Websites

Troubleshooting Websites

The issues that normally occur are:

  • Website blocked by GenTech Blockpage
  • Website giving no connection error
  • Website not displaying properly

Website Blocked by GenTech Blockpage

Website Blocked by GenTech Blockpage

Usually caused by:

  • Site was not allowed properly in the CRM.
  • CRM settings not same as on server.
  • New Policy is not updated on the device.

Wasn't Allowed Properly in the CRM

Website Blocked by GenTech Blockpage

Wasn't Allowed Properly in the CRM

Not every setting is meant to work every time

Symptoms: You're trying to allow different ways randomly without paying attention to why it's getting blocked.

Examples:

  • An account set to Whitelist Mode, Categories won't work. Allowing the Shopping Category for that account won't work.
  • Sites getting blocked by Default Filtering Categories, Whitelist Minimum Filter won't work.

Solution: Review the account, starting from the Modes, and see where the issue may be. Review the reason for the block and determine which method of allowing is appropriate.

CRM settings not same as on server

Website Blocked by GenTech Blockpage

CRM Settings not Same as on Server

The CRM settings are meant to only send the settings to the Server. It's the settings on the server that make the difference.

Symptoms: You see that the block is coming from something that is clearly allowed already in the CRM.

Example: You see the Block is coming from the TAG Block Safe Shopping rule and in the CRM it is clearly set to have shopping ON.

Solution: Press the Save & Config button. This will send the settings to the server again.

New Policy is not Updated on the Device.

Website Blocked by GenTech Blockpage

New Policy is not Updated on the Device

Some changes can only take effect once the policy is updated on the device.

Symptoms: The Last Seen link didn't refresh since you made the change.

Solution: Refresh the Policy on the device.

  • Android: Press Update Policy inside filter app on the device.
  • iOS: There's no way and no need to Update Policy. Restarting the device may help with some changes.
  • IC: Press Policy Refresh in the filter panel on the computer.

Website giving no connection error

Website giving no connection error

Usually caused by:

  • Background website resource blocked by the filter.
  • SSL Connection Error.

Background Website Resource Blocked by the Filter

Website giving no connection error

Background Website Resource Blocked by the Filter

Solution: See the dedicated section to Working with the Logs.

SSL Connection Error

Website giving no connection error

SSL Connection Error

Solution: See the dedicated section to SSL Errors and Bypasses.

Untitled content

Website not displaying properly

A background resource is blocked by the filter.

Solution: See section dedicated to Working with the Logs.

Solution #2: Open the site in the Chrome on a computer and press CTRL - SHIFT - I on the keyboard. Choose the Sources tab and take a look at which resource is needed for the site to function properly.

Troubleshooting Apps

Troubleshooting Apps

Troubleshooting Apps

The issues that normally occur are:

  • GenTech Blockpage showing inside App - Refer to Troubleshooting Websites
  • App is frozen, not opening, or not functioning properly

App is frozen, not opening, or not functioning properly

App is frozen, not opening, or not functioning properly

Cause: Either a background resource is getting blocked by the filter, or there is an SSL error.

Solution: Refer to these sections:

  • Android: Working the Apps List
  • Meta Apps
  • Working with the Logs
  • SSL Errors and Bypasses

Android: Working the Apps List

Apps Tab

The Apps Tab

The Apps Tab (only available for Android), loads all the Apps from the filtered device, allowing more customization aside from the actual filtering.


Priority Level

The customizations done here, bypass and block in specific, will override everything else in the CRM.

Loading the Apps

Loading the Apps

When Set Credentials is pressed on the device, the apps are sent automatically to the server.

Reload

Click Reload to Load the Apps from the Server.


Send Apps List

In cases where Reload is not loading the Apps List, Go into the Filter App on the device > Filter Menu > Applications > Send App List.

Most of the time this should be unnecessary as this is done automatically with the Set Credentials.

Available Customizations

Available Customizations

There are four different customizations available in this tab.

Note: Availability varies from version to version. Not all items work in all versions.

MDM for Samsung

The only functions that are available are:

  • Allow
  • Hide/Uninstall

Lite

All functions are available.

Allow Installed

Users on Apps Only Mode are restricted from downloading new apps that were not added first to the Apps list.

On MDM: App will be removed from the device the next time the filter connects with the server.

On Lite: The blue App Blocked notification will appear when trying to access this app.

The Allow Installed function allows Apps Only Mode users to safely download and use this app.

Push Install

Push Install will automatically install that app on the user's device without the user needing the Google Playstore.

Just add the app to the list and choose Push Install. The app will be installed on the device after the next update policy.

Bypass

Bypass allows the app to bypass the filter.

Note: This function will automatically disable all in-app browsing inside that app. Certain apps needs this enabled in order to operate properly and the entire app may malfunction when placed on bypass. These apps will need to be allowed in a different manner using Meta Apps or by directly adding sites to the whitelist.

Block

Block will prevent the app from accessing the internet. The app will function as an offline app.

Hide / Uninstall

Hide/ Uninstall will:

On MDM: remove the app from the device.

On Lite: the App Blocked notification will appear when trying to access the app.

App Blocked Notification

When an app is on Hide/Uninstall on Livigent Lite, this is the notification that appears when the app is accessed.

The device's controls are disabled until the user presses the Press here to continue button.

Adding to the Apps List - Search

Adding to the Apps List

Add apps to the list by searching for it in the search bar at the top.

Press the green Add Application button to add it to the app list.

You'll usually find the new app at the bottom of the list.

Uses

  1. Apps Only Mode users - Add a new app and click Allow Installed to allow them to have that app.
  2. Everyone - Add a new app and click Block/Hide in cases where a user wants to block or hide an app from even being downloaded onto the device.

Adding to the Apps List - APK names

Adding APK names to the Apps List

In addition the search feature, you can add the APK name directly into the apps list.

Type the APK name into the box and click the green Add Package ID button.

Uses

Some items don't load into the apps list, widgets for example. These can be added manually to the apps list and blocked/Hidden as well.

Finding the Package Name

Dexplorer (https://play.google.com/store/apps/details?id=com.dexplorer) is a great app that gives you this info. In the Dexplorer settings you can customize it to show you the Package names of system apps as well.

Adding App Category or Rating

Adding App Category or Rating

In addition to adding single apps, you can add entire categories or content ratings of apps.

Choose an item from the drop down list. These will appear at the bottom of the app list and can be customize just as you would with a single app.


ChatSid

ChatSid

ChatSid

A kosher replacement for the Telegram app, available free on Google Play and iOS App Store, can be controlled here for users that have a GenTech account.

Free users have default restriction settings which can be modified for GenTech customers.

Simply sign in with the same phone number used to create the Telegram account.

ChatSid issues

Most ChatSid issues are caused by the wrong phone number entered on the GenTech account. Please reach out to support and have them verify which phone number is needed on order for the settings to apply.

Save vs. Save & Config

Save vs. Save & Config

Saving Settings

There are two Save buttons at the bottom of each CRM page. Here's when to use each one...

Save User

Use the blue Save User button when you're not sending something to the server.

Examples:

  • Billing info
  • Association
  • URL Requests

Save & Config User

Use the green Save & Config User button when your changes need to be sent to the server.

Examples:

  • Groups (under Filtering and Settings Tabs)
  • App Customizations (Apps Tab)
  • Advanced Config changes
  • ChatSid
  • Changing Modes on Android


Filtering Tab > Policies

The Filtering Tab

The Filtering Tab

The filtering tab contains most of the filter's customization settings.

This section will review each tab within the Filtering > Policies Section.

Categories

Categories Tab

The Categories Tab, controls the main categories that will be allowed/blocked by the filter.

Aside for adult content, these are the default blocks.

Priority Level:

These settings have the lowest priority within the whole system.

Groups

Groups Tab

The Groups Tab is meant to override the default Categories and customize the settings of the filter.

Priority Level

The Groups Tab is above the Categories Tab.

YouTube

YouTube Tab

By default, YouTube is blocked. This tab controls YouTube.

Restricted YouTube:

  • Enforces YouTube Safe-Search
  • Blocks all video thumbnails
  • Adds Filtering ontop of the YouTube Safe-Search

Allow YouTube:

  • Enforces YouTube Safe-Search

Priority Level

These settings are above the blocks for Social Networking and Entertainment.

Images Tab

Images Tab

The three Image Altering settings will apply Image Altering across the entire internet.

To exclude sites from this policy, you'll need to add those sites individually to the Image Altering Override list. (More about lists later)

Priority Level

These settings are higher than the Categories tab, but may be lower than some items in the Groups tab. The Groups that disable image altering are marked.

These settings are above the Whitelist Minimum Filter but below Whitelist No Filter.

Video Block

This settings will block all videos from playing anywhere online. (Downloaded videos will play).

Block Facebook/Twitter Images

These two settings will apply Image Altering to Facebook and Twitter. (Useful when a user doesn't want to have it across the whole internet).

Advanced Tab

Advanced Tab

This tab contains advanced filtering add-ons.

Priority Level

These settings are above all the settings in the prior tabs.

Ad Block

This will block ads across the whole internet in apps and on websites

Keyword Block

This settings will block pages based on certain keywords written on the page.

GenTech Basic Settings

This setting (which is locked to ON) applies the basic adult blocks off the filter.

Modes Tab

Modes Tab

This tab contains all the different filtering modes.

Priority Level

This tab is above all the settings in all the other tabs

Categories Mode

When these modes are all OFF, the filter is set to Categories Mode, which is controlled by all the other settings inside this Filtering Tab > Polices section.

Block All Data

This Mode will block all data on the device.

Email Only Mode

This Mode will block everything besides for email.

Whitelist Mode

This Mode will block everything besides the individual sites that are entered into the user's Whitelists. The Categories and some of the other groups in this section of the CRM are disabled for this Mode.

Apps Only Mode

This setting will block search engines for users set to Apps Only Mode (Apps Only Mode will come later...).

Meta Apps

Meta Apps

Meta Apps

Meta Apps are simply a database of resources to make specific apps operate properly. Adding a meta app to an account will add all those collected resources to this user's account.

Priority Level

The Meta Apps are above all the other blocks... and will cause the item to be unfiltered in most cases.

These were created manually one-by-one by GenTech support. If you need a meta app created, please reach out to [email protected]

How to Properly Use Meta Apps

Allowing

The standard case of using meta apps are to allow specific apps to work properly. Simple search for that specific app and add it to Allow.

Blocking

Some meta apps were created to facilitate certain items to be blocked...

Examples:

  • AccuWeather Block Images and Videos ( put it on block )
  • Bing Images (block)
  • Google Books Search - BLOCK -- DO NOT ALLOW
  • Google Maps - MEANT FOR BLOCKING IMAGES ON GOOGLE MAPS -- DO NOT ALLOW

These Meta apps contain the settings to block those specific items. Add these to Block.

Customization

Some meta apps are to make other customization.

Example:

  • Gmail Images - No Altering

Adding this meta app to Allow will remove image altering from Gmail Images. Meant for users that have Image altering across their whole internet.

Customizing Websites: Adding Sites to a List

What Are Lists?

What Are Lists?

Lists are simply a list of sites that will be excluded from the default settings of the filter. These items will receive different treatment, depending on the nature of the list you added the item to.

Adding Sites

Adding Sites

In the Filtering Tab > Add New URL:

  1. Enter the site without http://.
  2. Select a reason.
  3. Choose Full Domain - if applicable.
  4. Choose Include Dependencies - if applicable.
  5. Select a List.

URL Lists

All added URLs gather in the Filtering Tab > URL Lists.

Available Lists

Available Lists

There are seven available lists.

1. Whitelist No Filter

Any site on this list will bypass the default adult blocks in the system and will be allowed to open - regardless of the content on that webpage.

2. Whitelist No Filter + Dependencies

Any site on this list will get similar treatment to the Whitelist No Filter list with one addition...

Any other site that is linked on that page will also get the treatment of Whitelist No Filter.

Example: There were cases where Google.com was added to this list accidentally. Any site that was opened through google.com was opening, even though when the site was accessed directly it was blocked. Any listing on Google.com essentially became a dependency of Google.com.

3. Whitelist Minimum Filter

Any site on this list will bypass all the other blocks besides the default adult block.

Use: When a user wants a specific site open without allowing the entire category (news, shopping, or similar).

4. Whitelist Minimum Filter + Dependencies

Any site on this list will get similar treatment to the Whitelist Minimum Filter list with one addition...

Any other site that is linked on that page will also get the treatment of Whitelist Minimum Filter.

5. Image Altering Override

Removes image altering from a specific website - For users who have image altering set to ON.

This List appears when Allow Dependencies in Unchecked.

6. YouTube Embedded

Allows embedded YouTube clips to play without needing to open YouTube.com.

This List appears when Allow Dependencies in Checked.

7. Private Blacklist

If you choose Block, you can add a site to the Private Blacklist.

Removing a Site

Removing a Site from the List

Under the Activity Tab, where all the URL Requests are listed. Click the Request ID number.

URL Approvals

The URL Approvals page will appear with that request at the top.

Click Pending to remove it from the user's URL List.

You may choose to edit the request and Approve it again.

Changing the Request

Changing the Request

You can change the Request right inside the Pending Tab.

Use the edit icon near:

Full domain: to toggle between full domain and exact URL.

Include dependencies: to toggle between include and no dependencies.

Glob: to edit the URL and change it to anything.


Change to Block

Use the edit icon near Allow to change it to Block. The site can then be approved to be added to the Blacklist.

Working with the Logs

Logs

Logs

All internet activity for GenTech filtered devices are recorded in the Logs. These can be accessed inside each user under the Activity Tab.

Live Logs

Live Logs will show you the device's internet activity live as it's happening on the device.

Archived Logs

Archived Logs will show you the internet activity from an earlier time.

Use

For troubleshooting purposes to help determine why an app or site isn't working properly.

In respect for our customers' privacy, this information is restricted and is deleted once it's no longer needed.

Troubleshooting with Logs

Troubleshooting with Logs

Open the live logs and run the app or site that seems to be an issue.

Watch the activity in the logs and see what may be getting blocked (or allowed for that matter) and why.

Archived logs may be useful here as well by viewing what may have gotten blocked previously.

SSL Errors and Bypasses

SSL

SSL

SSL (Secure Sockets Layer) is the standard security technology for establishing an encrypted link between a web server and a browser. This link ensures that all data passed between the web server and browsers remain private and integral.

Sites that are https:// issue SSL certificate which allow the browser which has a certificate as well to decrypt the data. Once the recepient browser has a valid SSL certificate, it is able to decrypt and read the received data.

SSL Errors

SSL Errors

While GenTech has an SSL certificate, which enables GenTech to decrypt any data passing through it's servers, some apps and sites are extra secure. They will not accept certificates unless it is the original one that was issued by the website.

Once the filter decrypts the data, it comes with an SSL certificate issued by Livigent, not with the original one that was issued by the website.

This is the cause  for SSL errors.

Note: SSL errors don't show in the Logs.

Bypassing SSL Errors

Bypassing SSL Errors

Important: Once bypassed, these will be on NO filter.

Most SSL errors can be easily bypassed by entering the server name in Filtering Tab > URL Lists > TAG SSL Override.

The correct syntax is: sn site.com

If the site had a sub-domain use the syntax: sn sub.site.com

Wildcards

You can use wildcards (*) here in the place of the name. A wildcard will simply replace whatever text should've been there.

Wildcards only replace text, not dots (.).

Caution: This will bypass ANYTHING that fits in that space. Only use wildcards when needed.

Note: If entered improperly, the bypass will not work. Be sure to enter it properly. Wildcards are not needed in regular cases.

Finding the item that needs to be bypassed

Finding the item that needs to be bypassed

GenTech support can access the back-end of the filter and identify what needs to be bypassed. Please reach out to support when you suspect that you're having such an error.

Settings Tab > Username and Password

Username and Password

Username and Password

These are the credentials that are entered into:

  • The Filter App on Android,
  • The Livigent Panel on Computers,
  • The installer and Proxy Authentication poppup on iOS.

Settings Tab > Last Seen

Last Seen

Last Seen

This is the last time the device connected with the server.

Android: Should connect automatically every 30 minutes or when Set Credentials or Update Policy is pressed.

iOS: Should connect automatically every 30 minutes or when the GenTech Webclip is pressed.

Computers: Should connect automatically every 24 hours or when Policy Refresh is pressed.

Last Seen on Android

Last Seen on Android

Example:

Last seen: 1 min 2 sec ago seconds ago from ip 67.86.233.47, device id 67740a2edae6, app version 8 (8.1.3.31.GenT) pin code 7865

This line shows:

  • The time of the last connection.
  • The IP address of the last connection.
  • The device ID of the filter app on the device.
  • The filter version.
  • Emergency PIN code

Device ID of the Filter App

Every Android device filtered with GenTech has a Device ID at the top. This is the same Device ID shown here in the Last Seen.

Filter Version

There are three different filter version for android devices.

  1. Android Root: 152 and lower (3 digit number in the 100s range)
  2. Android Lite: 345 and lower (3 digit number in the 300s range
  3. Samsung MDM: 8 (single digit)

Emergency PIN code

For Livigent Lite, the filter locks Safe Mode by changing the PIN to something the user doesn't know. This is that PIN.

Settings Tab > Groups

System > Groups

Groups

In addition to the Groups under the Filtering Tab > Policies, there are some additional Groups here.

Bypass URL

Bypass URL deactivates all the URL blocks in the filter. This allows you to determine if an issue is caused by a URL block.

Bypass SSL

Bypass SSL deactivates all SSL blocks in the filter. This allows you to determine if an issue is caused by a SSL block.

Debug

Debug deactivates ALL blocks.


Categories Override

Categories Override disables all filtering above the Basic Adult Block.

Gentech Non Payment

Gentech Non Payment will block complete internet access and forward the user to a page requesting payment. This is used by the GenTech billing department.

Allow Unsupported

Allow Unsupported will bypass all data written in unrecognized languages. Use with caution...

Credential Storage Password

Credential Storage Error

Credential Storage Error

During Livigent Lite installation, you may get an error asking you for the Credential Storage Password. This is an error from Android, and there is no password for this.

There are 2 known ways to bypass this issue. This video will walk you through the process:
https://gentechsolution.com/wp-content/uploads/2016/11/cred-movie-project-compressed.mp4


Settings Tab > Advanced Config

Advanced Config

Advanced Config

The Advanced Config section is for advanced settings that aren't available using the regular CRM settings. These commands are different  depending on the filter platform and version.

Find detailed info in the GenTech wiki: https://support.gentechsolution.com/projects/livigent-crm-support/wiki/Advanced_Config_Commands

Advanced Cofig Commands for IC

Advanced Config Commands for IC

For Computers, the available commands are:

  1. Bypass IP addresses - Allow an IP address unfiltered internet access.
  2. Block IP addresses - Block the computer from accessing an IP address.
  3. Bypass .exe files - Allow a program unfiltered internet access.
  4. Block .exe files - Block a program from accessing the internet.
  5. Proxy - Put the filter on proxy instead of the filtering taking place on the computer itself.

Uses

Bypassing an IP: when a site is conflicting with the filter and the built-in SSL and URL bypasses aren't fixing the issue.

Bypassing a Program: When a program is not compatible with the filter.

Caution

Bypassing a program will unfilter that whole program, including any in-app-browsers that may be in it.

Advanced Config Commands for Android

Advanced Config Commands for Android Lite

Available commands are:

  1. Bypassing a single IP address.
  2. Bypassing the entire filter.

Advanced Config Commands for Samsung MDM

Available commands are:

  1. Bypassing a single Domain.
  2. Bypassing an IP address.

Advanced Config Commands for iOS

Advanced Config Commands for iOS

Available commands are:

  1. Bypassing entire filter.
  2. Bypassing an IP address.
  3. Bypassing a URL.
  4. Blocking entire internet.
  5. Blocking an IP address.
  6. Blocking a URL.

How to Find Process Names and IP Addresses for IC

Finding Process Names

How To Find The Process-Names

In order for this to work, you need to find the exact name of the application's .exe file.

First: Run the application.

Heading 1 text goes here

Lorem Ipsum is simply dummy text of the printing and typesetting industry. Lorem Ipsum has been the industry's standard dummy text ever since the 1500s, when an unknown printer took a galley of type and scrambled it to make a type specimen book.

Settings Tab > PIN Protection

PIN Protection

PIN Protection

PIN Protection protects against unauthorized changes on the account. Nothing can be saved in the account unless the PIN is provided.

Setting the PIN

Setting the PIN

In the Settings Tab within each user, you can add a PIN that will need to be entered before a Save can be applied to the account.

To set it up: Enter a PIN and press Save User.