Home Web Filtering How Web Filtering Works in KyberGate

How Web Filtering Works in KyberGate

Last updated on Apr 17, 2026

How Web Filtering Works in KyberGate

KyberGate uses a cloud-based proxy architecture with SSL/MITM inspection to provide comprehensive web filtering for K-12 schools. This article explains the technology behind KyberGate's filtering engine and how it keeps students safe online.

Overview

Unlike traditional DNS-based filters that can only block entire domains, KyberGate inspects traffic at the URL and content level. This means you can allow YouTube.com while blocking specific channels, or permit Google searches while enforcing SafeSearch.

How It Works

1. Proxy Architecture

All web traffic from managed devices routes through KyberGate's cloud proxy network. The proxy sits between the student's device and the internet, inspecting each request in real time.

  • 8 global proxy regions with smart geo-routing for low latency
  • PAC file auto-configuration deployed via MDM — no manual setup on devices
  • SSL/MITM inspection decrypts HTTPS traffic for deep content analysis

2. Domain Database

KyberGate maintains a curated database of 1.3 million+ domains organized into 130+ content categories. Each domain is classified and updated continuously.

  • Categories include: Adult Content, Gaming, Social Media, Streaming, Violence, Drugs, Gambling, and more
  • New domains are categorized within hours of discovery
  • Admins can override any categorization with custom allow/block rules

3. Real-Time Inspection

When a student visits a website, KyberGate performs multiple checks:

  1. Domain lookup — Is the domain in a blocked category?
  2. URL path analysis — Is this specific page restricted?
  3. Keyword scanning — Does the page content contain flagged terms?
  4. SafeSearch enforcement — Are search engines forced to safe mode?
  5. AI chat monitoring — Are AI tools being used appropriately?

4. Block Page

When content is blocked, students see a branded block page with:

  • The reason the site was blocked
  • The content category that triggered the block
  • A "Request Access" button to ask their teacher or admin for an exception

Filtering Modes

Mode Description
Category-based Block entire content categories (e.g., all Gaming sites)
Domain-level Block or allow specific domains
Keyword Block pages containing specific words or phrases
Schedule-based Apply different policies during school hours vs. after hours

Tips

  • Policy Simulator: Use the Policy Simulator in the dashboard to test how a URL would be handled before deploying changes
  • Bypass Domains: Add trusted domains to the bypass list to skip proxy inspection entirely (useful for internal school resources)
  • Game Detection: KyberGate blocks 130+ known gaming domains automatically when the Gaming category is enabled

Related Articles

  • Creating and Managing Filtering Policies
  • Using the Domain Checker
  • SafeSearch Enforcement
  • Managing Bypass Domains