SkieSkie for Enterprise
Browsing and web safety
Chrome rules, DNS filtering and the apps that are always blocked. 36 questions answered.
- How do I force SafeSearch on Chrome on managed school devices?Skie forces SafeSearch on in Chrome as a device owner rule, so it is on by default and the user cannot switch it off. Explicit images and results are filtered out of Google Search on every...
- Can YouTube Restricted Mode be forced on for every student device?Yes. Skie forces YouTube Restricted Mode on through the Chrome policy, so YouTube in the browser hides videos flagged as mature and the student cannot turn it off. It is on by default for...
- What is the safe-sites filter in Chrome and does Skie turn it on?The safe-sites filter is a Chrome policy that blocks pages Google classifies as explicit, and Skie turns it on by default on managed devices. It sits beside the filtering DNS as a second...
- Does Skie keep Chrome Safe Browsing on for managed devices?Yes. Skie keeps Chrome Safe Browsing on as a device owner rule, so students keep Google's warnings about phishing, malware and deceptive pages and cannot disable them. It is a security...
- Why does Skie turn off Chrome's own secure DNS?Skie turns off Chrome's built-in secure DNS so the browser uses the device's filtered system DNS instead of a provider the student could pick. Without this, Chrome could look up sites...
- Is incognito mode blocked on managed school devices?Yes. Skie blocks incognito mode in Chrome as a device owner rule, so the option does not appear for students. Browsing stays under the same SafeSearch, safe-sites and DNS filtering as...
- Can students change the Chrome search engine on a managed device?No. Skie locks Chrome's default search engine to Google, where SafeSearch is forced on, so students cannot swap in a search site that ignores the filter. The setting is greyed out or hidden...
- Why is Chrome sign-in blocked on managed devices?Skie blocks signing in to Chrome so a student cannot attach a personal Google profile to the browser, which would bring its own settings and history. The block is on by default for managed...
- Is Chrome sync turned off on Skie managed devices?Yes. Skie disables Chrome sync on managed devices, so bookmarks, history and saved passwords do not flow to or from a personal Google account. It is on by default and works with the block...
- Does Skie block pop-ups in Chrome on managed devices?Yes. Skie blocks pop-ups in Chrome by device owner policy, so pop-up windows and redirect tricks do not open, and students cannot allow them for a site. It is on by default. This cuts off a...
- Can websites send notifications to managed student devices?No. Skie blocks website notifications in Chrome through device owner policy, so no site can ask permission to send alerts and students cannot grant it. It is on by default. This stops...
- Are chrome://flags and other internal Chrome pages blocked on managed devices?Yes. Skie blocks chrome://flags, net-internals, inspect, view-source and javascript: pages on managed Chrome, so students cannot reach experimental settings or developer tools in the...
- Which Chrome rules does Skie enforce on managed devices?Skie enforces a fixed set of Chrome rules as the device owner: SafeSearch, YouTube Restricted Mode, the safe-sites filter, safe browsing, secure DNS off, incognito blocked, search engine...
- What is the filtering DNS on a Skie device and can students change it?The filtering DNS is a DNS service that refuses to resolve unsafe domains, and Skie locks it on the device so it applies to every app and browser. Students cannot change it, because the...
- Does the school web filter still work on home Wi-Fi and mobile data?Yes. Skie sets the filter on the device itself, as a locked filtering DNS, so it applies on school Wi-Fi, home Wi-Fi and mobile data alike. It is not tied to the school's router or...
- Which web filter does Skie use by default and what is the fallback?Organisations without their own filter get CleanBrowsing Family by default, with a fallback host if the first cannot be reached. An organisation or group filter overrides the default. The...
- Can different schools or groups use different web filters?Yes. An organisation can choose its own filter, and a school, branch or group below it can override that choice, so primary students and senior students can sit behind different levels of...
- What is the curated list of web filters and who controls it?The Skie owner curates a list of filtering DNS options, and organisation admins pick from that list for their organisation or groups. Admins cannot enter an arbitrary DNS address. This...
- How do I check that my school Wi-Fi works with the Skie web filter?Use the network check wizard in the Skie dashboard. It tests the school network against what the filtering DNS needs, mainly whether encrypted DNS can get out, and tells you the result...
- What happens when a network blocks the encrypted DNS port?The device uses that network's own DNS while it is connected and the Skie dashboard flags it, so you know the filter is not in the path on that Wi-Fi. Back on any other network, the...
- Will I be told if a student's device is bypassing the web filter?Yes. Skie reports a bypass of the filter, and a device that is not filtered appears in the dashboard against that exact device, with the breach centre carrying the alert. The device also...
- Which browsers are always blocked on Skie managed devices?More than 50 alternative browsers are always blocked, including Firefox, Brave, Opera, Edge, Samsung Internet, DuckDuckGo, UC, Vivaldi and Tor. The block applies whatever an app list says...
- Can a student install Firefox or Brave to get past the filter?No. Firefox, Brave and the other alternative browsers are on the never-allow list, and installs outside the allowed apps are removed. Unknown sources are blocked, so a downloaded installer...
- Can students use VPN, proxy or DNS changer apps on managed devices?No. VPN apps, proxy apps and DNS changer apps are on Skie's always-blocked list, whatever an app list says. VPN setup in Android settings is also blocked and the Private DNS setting is...
- How do you stop students using proxy websites to reach blocked sites?Skie filters proxy and anonymiser domains through the filtering DNS categories and adds Chrome's safe-sites filter, which checks the page itself. Proxy apps are never allowed, and incognito...
- Can we turn the browser off for some student groups and allow it for others?Yes. In Skie the browser can be off, restricted or allowed for each group. Off removes Chrome from the device, restricted allows it under the full Chrome rules and the filter, and allowed...
- How should a school handle YouTube on managed student devices?Decide by group. Leave the YouTube app off the app list where it is not needed, and where Chrome is allowed, Skie forces Restricted Mode on in the browser. Use a schedule window if students...
- Can we allow only specific YouTube channels or videos for students?Not yet. Skie forces YouTube Restricted Mode on in Chrome, and you can switch the YouTube app on or off by group or by schedule window, but allowing only chosen channels or videos is not...
- Can I add my own list of allowed or blocked websites in Skie?Not yet. Skie filters websites through the filtering DNS and the Chrome rules, and you choose the filter, but per-website allow or block lists are not available. The team is working on it....
- How do I block adult content on school devices permanently?Use Skie so the blocking is set by the device owner and cannot be edited by the student. A locked filtering DNS, forced SafeSearch, the safe-sites filter, locked Chrome rules, blocked...