Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 4 replies
  • Subscribers 1 subscriber
  • Views 3654 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Allow an app through proxy(having dificulties)

AexTI
Ok, New to UTM.

Thing is we have a UTM and we are using transparent proxy. 

There's this government website caixa.gov.br that we've added through firewall and proxy, everything goes fine except qhen we have to access an application in it. 

   The main URL is the same *.caixa.gov.br but when logged in it uses a ".jar" application that is being blocked. When out of the UTM it opens a window that has the http://127.0.0.1/yadayadayada URL. 

   The app being blocked is the following: 


httpproxy[13573]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="xx.xx.xx.xx" dstip="200.201.173.68" user="" statuscode="304" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFBlockAction (Default content filter block action)" size="0" request="0x17d80220" url="cmt.caixa.gov.br/TACSUNjpw.jar" exceptions="application" error="" authtime="0" dnstime="0" cattime="0" avscantime="0" fullreqtime="84733" device="0" auth="0" application="http" 

How can I set for everything related to *.CAIXA.GOV.BR goes out without passing through proxy? 

Or where do I add the TACSUN*.jar to be allowed? 

Please help.


This thread was automatically locked due to age.
Parents
  • 0
    It appears you are running 9.2something.

    Is there anything in the packetfilter.log or ips.log from the client IP after loading the page?  You could also run WireShark on the client to see what it is trying to do.

    That log line doesn't show something being blocked by the proxy - the .jar loaded (status 304, file contents didn't change, action=pass).   Are there other proxy log lines that show block?

    I suspect the applet creates a tunnel back to Caixa Econômica Federal - seeing more logs, or packet captures, would help there.
Reply
  • 0
    It appears you are running 9.2something.

    Is there anything in the packetfilter.log or ips.log from the client IP after loading the page?  You could also run WireShark on the client to see what it is trying to do.

    That log line doesn't show something being blocked by the proxy - the .jar loaded (status 304, file contents didn't change, action=pass).   Are there other proxy log lines that show block?

    I suspect the applet creates a tunnel back to Caixa Econômica Federal - seeing more logs, or packet captures, would help there.
Children
No Data