This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Google Safe Search

Hello

Is it correct, that https Scanning has to be turned on in order to make the google safe search setting within Sophos UTM work?
Turning on the https scanning starts to make the internet access really slow and also blocks all kinds of pages e.g. Facebook
I'm using Sophos 9.111-7.

Thanks

Roger

This thread was automatically locked due to age.

0 Michael Dunn over 11 years ago

Yes. As Google is only HTTPS, you must do HTTPS Decrypt and Scan to enforce Google SafeSearch.

When working correctly the HTTPS scanning should not greatly affect speed or block pages. You must install the UTM's CA as an authority on your computer.
Cancel
Vote Up 0 Vote Down

Cancel
0 alanrbryant over 11 years ago in reply to Michael Dunn

Does anyone know of a relatively automated way to deploy the CA to all computers in active directory?
Cancel
Vote Up 0 Vote Down

Cancel
0 Michael Dunn over 11 years ago

Please see:
Sophos Web Appliance: Installing the Sophos-Generated Certificate Authority in your Users' Browsers
Cancel
Vote Up 0 Vote Down

Cancel
0 alanrbryant over 11 years ago in reply to Michael Dunn

Please see:
Sophos Web Appliance: Installing the Sophos-Generated Certificate Authority in your Users' Browsers

Perfect, thank you!
Cancel
Vote Up 0 Vote Down

Cancel
0 Roger over 11 years ago

Just to verify. Where do I have to download the CA. The link describes that, but I'm not sure where I have to go. Is it in webfilter-HTTPS-CA's? Or the one in the user portal under HTTPS-proxy?

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 jlan over 11 years ago in reply to Roger

webfilter

http://passthrough.fw-notify.net/cacert.pem

hint: when using firefox you hardly can use gpo. Even updating to the latest version of firefox needed a manual uninstall and reinstall of the ca ....
Cancel
Vote Up 0 Vote Down

Cancel
0 Roger over 11 years ago

Thanks for your answer, but the link doesn't help me. I will do a manual update as soon as I know where to get the correct certificate.
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 11 years ago

Download from the 'HTTPS CAs' tab in Web Filtering or via the User Portal. If you're already logged into WebAdmin, the link provided by jlan will give it to you.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel