Hi, we have the HTTP/S proxy set to transparent but we do not currently want HTTPS traffic checked. Is there a way to exclude HTTPS traffic so it can be viewed in a browser etc?
In "Transparent" mode, HTTPS traffic is not handled by the proxy unless 'Scan HTTPS (SSL) Traffic' is checked on the 'Global' tab.
Usually, when people first install Astaro, they cause the setup wizard to create a packet filter rule like 'Internal (Network) -> Web Surfing -> Any : Allow', and that includes HTTPS traffic. If that rule isn't active, then you at least would need a packet filter rule like 'Internal (Network) -> HTTPS -> Internet : Allow'.
Cheers - Bob
Sophos UTM Community Moderator Sophos Certified Architect - UTM Sophos Certified Engineer - XG Gold Solution Partner since 2005
In "Transparent" mode, HTTPS traffic is not handled by the proxy unless 'Scan HTTPS (SSL) Traffic' is checked on the 'Global' tab.
Usually, when people first install Astaro, they cause the setup wizard to create a packet filter rule like 'Internal (Network) -> Web Surfing -> Any : Allow', and that includes HTTPS traffic. If that rule isn't active, then you at least would need a packet filter rule like 'Internal (Network) -> HTTPS -> Internet : Allow'.
Cheers - Bob
Hi Bob,
thanks for the reply. I created the said filter rule but the pages still will not load. I have "Scan HTTPS (SSL) Traffic" unticked and the packet filter rule is set as All > HTTPS > ALL = Allow. Have selected All just for now for testing purposes.
In "Transparent" mode, HTTPS traffic is not handled by the proxy unless 'Scan HTTPS (SSL) Traffic' is checked on the 'Global' tab.
Usually, when people first install Astaro, they cause the setup wizard to create a packet filter rule like 'Internal (Network) -> Web Surfing -> Any : Allow', and that includes HTTPS traffic. If that rule isn't active, then you at least would need a packet filter rule like 'Internal (Network) -> HTTPS -> Internet : Allow'.
Cheers - Bob
Hi Bob,
thanks for the reply. I created the said filter rule but the pages still will not load. I have "Scan HTTPS (SSL) Traffic" unticked and the packet filter rule is set as All > HTTPS > ALL = Allow. Have selected All just for now for testing purposes.
