Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 1 subscriber
  • Views 2599 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

blocking https

karabela
im trying to block some websites which are running in https mode. so i added those in the block list but its still reachable. what am i doing wrong? im using the latest asl version asg v7.501.


This thread was automatically locked due to age.
Parents
  • 0
    What mode are you running in?  If 'Transparent', then are you also scanning HTTPS traffic?  If not, then you must be using a packet filter rule to allow that traffic, and it is not being handled by the proxy.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0
    What mode are you running in?  If 'Transparent', then are you also scanning HTTPS traffic?  If not, then you must be using a packet filter rule to allow that traffic, and it is not being handled by the proxy.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
  • 0 in reply to BAlfson
    Hi,
    if you are using the proxy in standard mode, disable the https scanning function and make sure you don't have a packet filter rule that lets port 443 through.
    Instead of internal-> any-> any-> allow
    you would have
    internal -> port 1:442-> any -> allow
    internal -> port 444:65535-> any -> allow

    But you must be careful with you nat rules to ensure that they don't generate packet filter rules that overide yours by being higher up (hidden) the list.

    Ian M