This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

https traffic don't work

hello,
i made in network security-->packet filter internal_lan-->any, service https, but i still acn not access https pages from my internal lan.
what i'm doing wrong?
thanx in advice.

This thread was automatically locked due to age.

Parents

0 BarryG over 18 years ago

Are you doing MASQuerading?
Are you using the HTTP proxy? In transparent mode?

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 Prometejas over 18 years ago in reply to BarryG

i'm in transparent mode, masquerading - no, http proxy - yes.
any ideas?
Cancel
Vote Up 0 Vote Down

Cancel
0 Prometejas over 18 years ago in reply to SilverOne

Your welcome....

Look at this site for additional help and manuals;
http://www.astaro.com/kb/

not easy solution [:(]
i found that https pages for all users work, but only first one (i'm talking about e-banking), after user's user name and passowd the same for all of them - waiting... and thats all. in my daily report i see theese IPs in blocked list. why don't work my exceptions in web security --> http --> expeptions --> "skip all" for these https urls list?
Cancel
Vote Up 0 Vote Down

Cancel
0 SilverOne over 17 years ago in reply to Prometejas

Is Caching (HTTP Proxy)ON or OFF
What is the packet filter rule for this?
Is LOGging active?
What is your "LiveLog" telling you?
Can you make a separate filter rule as test for a e-banker and test this?
Or if possible, try HTTP Proxy (standard mode=port 8080)

Transparent Proxy isn't always the finest solution......

Let us know
Cancel
Vote Up 0 Vote Down

Cancel
0 Prometejas over 17 years ago in reply to SilverOne

caching - on
packet filter rule: internals --> any, service - web surfing (http, http proxy, http webcache, https)
loging is active and everywhere is ok - green

i found that on mozilla firefox it works, but in ie - not [[:(]]
i turned off pfishing check but it sill don't work [[:(]]
now i know the problem's place.
Cancel
Vote Up 0 Vote Down

Cancel
0 SilverOne over 17 years ago in reply to Prometejas

What you can try is Caching off, CLEAR Cache.
Try again with IE.

Which version off IE? 6 or 7......
Cancel
Vote Up 0 Vote Down

Cancel
0 Prometejas over 17 years ago in reply to SilverOne

i'm using ie7. are you talking about ie cache?
Cancel
Vote Up 0 Vote Down

Cancel
0 SilverOne over 17 years ago in reply to Prometejas

Prometejas.

Under Astaro disable Caching,
Websecurity/HTTP/Advanced disable the option and Clear cache.

You could also set IE7 to remove cache at closing IE.

Let us know.
Cancel
Vote Up 0 Vote Down

Cancel
0 dx0001 over 17 years ago in reply to SilverOne

I'm experiencing the same problem on the ASL 7.010
NAT-Rules (Internal-->External) are working
Packetfilterrule uses "Websurfing" (http/https/etc.)
Caching is off & cleared, the http-proxy is in transparent mode
No personal firewall in use.
Unhardened Client with Win XP Pro SP2 in standard installation.

With IE6/Opera/Firefox there's no chance to get a ssl-connection anyway. Even with http-proxy off the same problem is on. I tried some other packet-filter-rule (a seperate one for ssl), but the problem's still there.
Cancel
Vote Up 0 Vote Down

Cancel
0 Simon Shaw over 17 years ago in reply to dx0001

In IE try turning off the setting "Auto detect proxy settings"
Cancel
Vote Up 0 Vote Down

Cancel
0 SilverOne over 17 years ago in reply to Simon Shaw

Can you check:

Websecurity/HTTP/Advanced/Misc Settings?

Is HTTPS in list Allowed Target Services?
Cancel
Vote Up 0 Vote Down

Cancel
0 dx0001 over 17 years ago in reply to SilverOne

Yes - HTTPS is one of the allowed targets.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 dx0001 over 17 years ago in reply to SilverOne

Yes - HTTPS is one of the allowed targets.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data