Mass Deploying Lenovo NetFilter for Chromebooks

Mass Deploying Lenovo NetFilter for Chromebooks


This guide walks site administrators through the process of deploying the Lenovo NetFilter extension to students using Chromebooks and assigning a filtering policy.

System Requirements 

Administrators  

  • Lenovo NetFilter Site Administrator access 
  • Google Admin Console access to the Google Workspace domain the students are using

Students 

  • Chromebooks running ChromeOS 71 or higher  
  • A managed Google Workspace user account (formerly G Suite)

Procedure 

Log into Lenovo NetFilter

  1. Log into the NetFilter WebAdmin Dashboard as a a site administrator. 
  2. From the left navigation menu, select Policies.
  3. Under Policies, select Groups.
  4. Confirm the Group name that you will use to filter student Chromebooks (e.g. students@lenovoacademy.edu).

Sign in to Google Admin 

Sign in to the Google Admin console for your organization's G Suite domain by going to  https://admin.google.com/ . You must login with an administrator account that has permission to manage User & Browser settings and Apps & Extensions policies for the student accounts in your domain. 
The remaining steps cannot be completed without signing in to the Google Admin console. 
  1. Login to https://admin.google.com/. 
  2. In Google Admin, select the  Devices icon. 
      
      

  3. Under the Devices menu, navigate to  Chrome > Apps & Extensions > Users & Browsers.

     

  4. Select the organizational unit (OU) that contains the student user accounts to which to deploy the Lenovo NetFilter extension for Chromebooks. 

     

Force Install the Lenovo NetFilter Chrome Extension

  1. On the USERS & BROWSERS page, hover over the   Add      icon at the bottom right. 
     
  2. Select the   Add Chrome app or extension by ID       icon.  
     
  3. Enter the unique Extension ID based on your version of NetFilter and your geographic location:

    1. NetFilter
      1. North America:  joiaioaajglikblacdoccnmhmmfiebbp
      2. Europe:  ipfpifojkncienknljodopbagjdjjhaa
    2. NetFilter Plus
      1. PLEASE NOTE:  For NetFilter Plus on Chromebooks, they must be running ChromeOS 64-bit due to memory and processing requirements.
      2. North America:  mgjphhfodaiaedgepinmjnbhhaenengl
      3. Europe:  andkdfohfonkdaibpjipchnidjclinpe

  4. Ensure that From a Custom URL is selected in the list.

  5. Enter the following URL based on your version of NetFilter and your geographic location:

    1. NetFilter
      1. North America:  https://nf-client-public.s3.amazonaws.com/NetFilter/NA/chrome/nsfilter.xml
      2. Europe:  https://nf-client-public.s3.amazonaws.com/NetFilter/EU/chrome/nsfilter.xml
    2. NetFilter Plus
      1. North America:  https://nf-client-public.s3.amazonaws.com/NetFilter_Plus/NA/chrome/nsfilter.xml
      2. Europe:  https://nf-client-public.s3.amazonaws.com/NetFilter_Plus/EU/chrome/nsfilter.xml

  6. Select SAVE.
  7. In the list next to the newly added extension ID, select  Force install as the Installation Policy.  



  8. Select the extension and enter the appropriate JSON configuration in the Policy for extensions field.  NOTE: Replace groupname@orgname with the Group name you verified in the Log into Lenovo NetFilter section (near the top of this article).

    Chromebook JSON Policy for North America:
    
{
    "policyserver": {
        "Value": "https://policy.naea1.netfilter.lenovo.com:3431"
    },
    "makeopts": {
        "Value": "-f 4096 -g groupname@orgname"
    }
}


    Chromebook JSON Policy for Europe:

    
{
    "policyserver": {
        "Value": "https://policy.euwe1.netfilter.lenovo.com:3431"
    },
    "makeopts": {
        "Value": "-f 4096 -g groupname@orgname"
    }
}
  9. Set the Update URL to Installation URL

  10. Select SAVE at the top right of the page.

  11. To test the configuration:
    1. Login to a Chromebook as a user that resides in the OU where this policy is applied.
    2. Navigate to chrome://extensions
    3. The "Lenovo NetFilter" or "Lenovo NetFilter Plus" extension should appear as installed
    4. Navigate to chrome://policy
    5. The appropriate JSON configuration policy will be applied


    • Related Articles

    • Installing Lenovo NetFilter for Windows devices

      Overview This article explains how to install the Windows client on an individual student device. You must have local administrator rights to install software on the student devices in order to perform the steps below.  Run the Lenovo NetFilter ...

    • Installing Lenovo NetFilter for macOS Devices

      Overview This article explains how to install the macOS client on an individual student device (MacBook, iMac, etc.). You must have local administrator rights to install software on the student devices in order to perform the steps below.  Run the ...

    • Adding New Site Administrators to Lenovo NetFilter

      Overview When your Lenovo NetFilter organization is first created, it contains a single user account. This account is assigned the Site Admin role. If the initial Site Admin would like to delegate management to other admins, schools techs, etc., ...

    • Deny Page Framework

      Deny Page API Specifications The Lenovo NetFilter deny page framework allows you to configure the location where your deny pages will reside, within your overall Lenovo NetFilter solution. This section outlines how to configure your deny pages to ...

    • Policies Overview

      Policy Management Overview What is a filtering policy? A filtering policy is a set of rules or settings that the Lenovo NetFilter Policy Service uses in making decisions about whether requests for Internet content should be allowed or denied. The ...