This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Social networking (https) not working in web protection

Hello,

I have restrict 'Social Networking' group from web protection to all users/VLANs and it successful running but if any user open facebook/twitter using "https" (Secure http) from any VLANs then facebook/twitter is open. How can I restrict? (One option is that add 'social networking' into Application control but then we cannot operate time based event in Application control)

If anyone know?

This thread was automatically locked due to age.

0 Amrish over 10 years ago

Anybody know solution ??
Cancel
Vote Up 0 Vote Down

Cancel
0 Hallowach2 over 10 years ago

Is https scanning active in the proxy profile? Which mode? Can you post a logline from the webprotectionlog and give us the version you are using?

Regards
Manfred
Cancel
Vote Up 0 Vote Down

Cancel
0 Amrish over 10 years ago

Hello Manfred,

Thanks for reply,

My https scanning proxy profile setting as attached. We are using Transparent Mode.
We are using Sophos ASG220 v9 with firmware version: 9.309-3

Thanks,
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 10 years ago

You are skipping proxying for all https traffic and I assume you have a firewall rule allowing https out. This is why it is not being restricted. The solution is to enable https scanning for web filtering.
Cancel
Vote Up 0 Vote Down

Cancel
0 Hallowach2 over 10 years ago

Scott is way too fast4me :-). Keep in mind that you may need to distribute the proxy ca cert to the clients if you haven't already.

Regards
Manfred
Cancel
Vote Up 0 Vote Down

Cancel
0 Amrish over 10 years ago

Wow....Its working fine after enable https scanning in web filtering. Thanks Manfred and Scott.

But I found that, "facebook, Google+, orkut all social networking sites are block but twitter is not block..!! Any reason behind that. (I checked twitter is already add in social networking category)
Cancel
Vote Up 0 Vote Down

Cancel
0 InformaticaOostkamp over 10 years ago

That's weird.. I also noticed twitter wasn't automatically blocked as social networking but I've added twitter.com (with option "include subdomains") to the social networking category and that did the trick for me..
Cancel
Vote Up 0 Vote Down

Cancel
0 InformaticaOostkamp over 10 years ago

That's weird.. I also noticed twitter wasn't automatically blocked as social networking but I've added twitter.com (with option "include subdomains") to the social networking category and that did the trick for me..
Cancel
Vote Up 0 Vote Down

Cancel
0 Amrish over 10 years ago

But it is really weird that Twitter is already added in social networking site ( See in social networking subcategories in application control), so I still not understand why it is not working.

If anyone know that "How to add site in default category list?"
Cancel
Vote Up 0 Vote Down

Cancel
0 InformaticaOostkamp over 10 years ago

Did you also add it as a website to the category under Filtering Options?

Web Protection > Filtering Options > Websites
Cancel
Vote Up 0 Vote Down

Cancel