How does Enforce Google Safe Search work with CFS 3.0?

Safe Search is a feature of Google Search that acts as an automated filter of pornography and potentially offensive content. SonicWall firewall supports enabling this feature by force.

NOTE: These instructions are for Gen5 SonicOS (5.X Firmware version) and Gen6 SonicOS up to 6.2.5.3. All later releases (i.e. 6.2.7, 6.2.9, 6.5, etc.) have CFS 4.0 so a different way to configure this.

A new Address Object named Google Force Safe Search is added with its FQDN hostname forcesafesearch.google.com. This FQDN will be resolved to the Google SafeSearch Virtual IP Address automatically.

When the Enforce Google Safe Search option is enabled in the Security Service | Content Filter page, SonicOS will rewrite DNS responses for Google domains to the Google SafeSearch Virtual IP address. And then the clients will always be forced to use forcesafesearch.google.com for google search.