I'm trying this simple environment:
- Fresh installation of 7.900 -> update to 7.901 -> update to 7.902
- Two interface configured, Internal (192.168.2.100) and External (PUB IP)
- DHCP enabled (range: 192.168.2.10 -> .20, gw=192.168.2.100, dns=192.168.2.100)
- SSH enabled
- Time events definition:
NAME: TEST [Single event]
From 2010-04-20 00:00 until 2010-04-20 15:00
Web security configuration:
- HTTP/S:[/b]
[Global]
Allowed network = Internal (Network)
Operation mode = standard
[Antivirus/Malware]
Use Antivirus scanning (Dual scan), max size 30MB
[URL Filtering, URL Filtering Categories, Exception, Advanced, HTTPS CAs]
default settings
- HTTP/S Profiles[/b]
[Filter Actions]
NAME: TEST
Mode: Blacklist
Blocked SP Categories Suspicious
Extremistic Sites
Nudity
Weapons
Games / Gambles
Drugs
Criminal Activities
Spyware is blocked
AntiVirus scanning Dual Scan
[Filter Assignments]
Name: TEST
User/Groups: none
Time Event: TEST
Filter Action: TEST
[Proxy Profiles]
Name: TEST
Source networks: Internal (Network)
Filter Assigments: TEST
Fallback action: Default content filter block action
With this configuration the Time Event TEST doesn't have effect to the surf experience of internal users.
Infact an user connected to the internal LAN can surf (ie google) with an IP released by DHCP
even if outside the time range:
2010:04:20-16:43:21 ASG8-beta httpproxy[6475]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.2.10" dstip="208.69.34.230" user="" statuscode="200" cached="0" profile="REF_bZSgPDRlPL (TEST)" filteraction="REF_ALudZFcCkt (TEST)" size="5488" time="263 ms" request="0x98d2778" url="www.google.it/.../html"
2010:04:20-16:43:21 ASG8-beta httpproxy[6475]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.2.10" dstip="208.69.34.230" user="" statuscode="204" cached="0" profile="REF_bZSgPDRlPL (TEST)" filteraction="REF_ALudZFcCkt (TEST)" size="0" time="34 ms" request="0x98d2778" url="www.google.it/gen_204
The system time is right:
ASG8-beta:/root # date
Tue Apr 20 16:44:13 CEST 2010
Is this a bug or a misconfiguration?
