This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

8.002:problem accessing a https site

Hello everyone.I enabled Http/s-Global-Scan Https (SSL) Traffic.
I also have 3 Proxy Profiles where I also enabled Scan Https (SSL) Traffic.
The proxy's certificate is imported in client's machines via group policy.
All https site we are accessing work fine, except https://ape.desmie.gr where I get the message “Internet Explorer cannot display the webpage”.
I made an exception rule, when I checked all the check boxes (for test reasons) and added “For all requests - Matching these URL’s” - ape.desmie.gr and desmie.gr
But still I get the same message. If I try to access the site outside astaro’s network, there is no problem.
Is there a way to fix this?
Regards, George

This thread was automatically locked due to age.

0 BAlfson over 15 years ago

I have URL filters enabled - basically a advertisement blocking technique and those don't work when I switch to standard mode.

You didn't show the lines from the log, so I'll guess that there were none, and you meant that the traffic wasn't blocked. With the Proxy in "Standard" mode, unless the browser's LAN settings specify to use the Proxy at the IP of the Astaro's "Internal (Address)" on port 8080, the proxy is not used. In that case, the traffic only passes if you have a packet filter rule like 'Internal (Network) -> Web Surfing -> Any : Allow'. Since you aren't scanning HTTPS traffic, SSL traffic wouldn't pass in "Transparent" mode unless you had such a PF rule. URL filtering applies only to traffic handled by the Proxy.

I don't see anything in the log indicating that the hotmail access was unsuccessful. Is there anything in the Intrusion Prevention log at the time of a block?

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel