Regular expression to block url that contains keyword

^https://www.youtube.com/results?search_query=.*keyword

should do it, Andy, but I'm not certain that it can be done without decrypting, so please share your results.

Cheers - Bob

Bob,

our assumption is correct. Without "Decrypt and scan" enabled, it is not even touching the https sites not even urls. Regular expression to check the url contents is also not working,

Now biggest question is: how can I enable decrypt and scan for https?

Here is what I did so far:

I now have a valid domain name pointing to my IP

I have a valid ssl certificate for my domain from sslforfree and letsencrypt

Here is what I did so far:

In Web Server protection --> Certificate management, I uploaded my PKCS#12 (Cert + CA)

In management --> https certificate, I selected the certificate that I imported.

In Web Protection --> Filtering Options --> HTTPS Ca, I uploaded my sslforfree certificate. and now it shows mysite.org proxy CA

I still get the https error "your connection is not private"

I also want to mention that, I have devices like android phones, tablets, google home, smart tv where I can't import any certificate (I probably can import certificate on android browsers but lot of other https web service would fail. For e.g. google play web service)

I really would like to "Decrypt and scan" my https traffic throughout my home because most of the traffic is through https tunnel these days and without that, having UTM is mostly useless.

Thanks

Andy

It's not Webserver Protection that you want, Andy.  Just go to the 'HTTPS CAs' tab in 'Web Protection >> Filtering Options' where you can download and install the Proxy CA.

For the IoT devices, assign them fixed IPs and have the Proxy skip those sources.  For the phones and tablets, you should be able to install the CA.

Cheers - Bob

Bob,

Thanks for your response. I did as you mentioned and seems to be working just fine.

I in fact don't have to buy my own domain and also ssl for it. It was a waste of money for me.

I just created a unique host in System Settings --> Organizational and provided a unique host name

Regenerate certificate in Filtering options --> Https CAs

Download the certificate

and then install the certificate on each user computer and works like a charm..

Now only problem i see here is: https://192.168.2.100:4444 started throwing me the invalid certificate error. How to trust it?

Also, how can I exclude IOT device. Can you please explain me in little detail?

Thanks

Andy

One of the unwritten rules here, Andy, is "one topic per thread" - that's to make it easier for future members to find an answer to their question without starting a new thread that's already been answered.  Please ask your last two questions in separate threads with appropriate titles in the General Discussion forum.

Cheers - Bob

One of the unwritten rules here, Andy, is "one topic per thread" - that's to make it easier for future members to find an answer to their question without starting a new thread that's already been answered.  Please ask your last two questions in separate threads with appropriate titles in the General Discussion forum.

Cheers - Bob