Web Filter XG v18 | Scan HTTP and decrypted HTTPS option is relevant

note: This also happens with https site

Please post a copy of the testing rule.

Ian

That will use the dpi engine, also please post the rest of the rule.

ian

the dpi is disabled so the firewall will work with the common proxy scanning only http, but the question is not to activate the option Scan HTTP and HTTPS decrypted

the rule complete:

Categories so_siteshttp

Web Filter Police

Your web policy is set to block access.

Yes, this blocking is just what I want to do. The question would not be this but the use of the option Verify HTTP and HTTPS decrypted, to be unchecked and checked there is no difference, be it blocks or allowed.
From the tests I did I saw that the redirection is done on the 8090, a captive portal is necessary in the destination zone, in my case is LAN. The only plausible reason for  is that this option HTTP and HTTPS decrypted is flaged is forces the traffic to be scanned.

I just want to confirm that this is really so.

Yes, this blocking is just what I want to do. The question would not be this but the use of the option Verify HTTP and HTTPS decrypted, to be unchecked and checked there is no difference, be it blocks or allowed.
From the tests I did I saw that the redirection is done on the 8090, a captive portal is necessary in the destination zone, in my case is LAN. The only plausible reason for  is that this option HTTP and HTTPS decrypted is flaged is forces the traffic to be scanned.

I just want to confirm that this is really so.

XG essentially does not separate between HTTP and HTTPs, as most adminstrators do not care, they want to block the Website / content no matter what protocol. 

If you do not want this, you should not use Port 80 or Port 443 in the firewall to begin with. 

I would just like to confirm that the option HTTP and HTTPS decrypted is flaged is forces the traffic to be scanned. By my tests this option enabled or disabled I have the same result.