Web filtering not working if doing VPN or RDP to server

Kunal,

can you show the web filtering you have created on XG?

After that, can you also add more information on what you mean with VPN or RDP over internet?

Thanks

Hi Luk

What do you need to see exactly, is it the firewall rules or the web policy? 

The web policy I have created is blocked weapons, porn etc etc which has been applied on the default firewall rule going from LAN to WAN.

In terms on VPN and RDP... I am currently doing VPN to the firewall from different location and once in, I am doing RDP to one of the servers, this is where the web policy does not work.

I also created a new firewall rule to allow me rdp direct to the server without vpn and had the same issue.

Hi Luk

What do you need to see exactly, is it the firewall rules or the web policy? 

The web policy I have created is blocked weapons, porn etc etc which has been applied on the default firewall rule going from LAN to WAN.

In terms on VPN and RDP... I am currently doing VPN to the firewall from different location and once in, I am doing RDP to one of the servers, this is where the web policy does not work.

I also created a new firewall rule to allow me rdp direct to the server without vpn and had the same issue.

Thanks.

Are you using local authentication, you said, right? How do you authenticate on RDP server? Do you use Client Agent, Clientless?

Thanks.

For authentication I am just using the local username created on the server.

Once you are connected on your server using RDP, the traffic generated on that server should match the server ip and continue working as expected.

I have sent you a PM.

HI Kunal, 

For best practices , You may check where your web traffic is going through . 

Eg : Test URL http://198.15.109.91/. 

go to Packet capture and type host 198.15.109.91 and turn it on . 

Type on the Machine you have taken RDP and check which rule does it go from . 

OK so finally I have found the reason why it is not working.

My dynamic DHCP lease starts from 192.168.0.200-254 and I use anything before 200 for static addressing.

It seems any devices not part of the dynamic DHCP lease is not going through the web filter.

Any ideas how to fix this?

In order to help you,

Can you share your firewall policy screenshot?

Thanks

Kunal, I advice you to:

• move the LAN to WAN at the top
• create an empty web filter and add some few categories
• restart the web proxy from System Services > Services

It will work!

Regards,

Hi Luk

Thanks for all the help with PM, very appreciated.

This has now resolved the issue I was having.