This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

how to set different rights (web app/filter)

Hi,

my setup is as followed:
UTM 220
- 2 WAN interfaces
- 2 Wireless lans (guest + internal; different subnets)
- web filtering:
transparent with AD SSO. No auth for blackberry
allowed networks: internal + guest
filter profiles: default settings
application control: 1 rule for source net "any" blocking ads

Now I wanted to have another AC-rule to block social networking for internal network users but allow for guest network. I created the rule and set it to the top of AC.
To test I logged in with my blackberry from internal, watching AC-Log and Web Filtering log but still can access e.g. facebook. No entries in AC-Log only in WebFiltering log.

Would be glad if s/o could explain how to achieve that. Reading the "rulz" didn't clearify [:(]

Greetings
LoD

This thread was automatically locked due to age.

Parents

0 FrankBarmentlo over 10 years ago

about the flow description:
I think the app control fits in with the proxies.. or the firewall,
If it fits in with the firewall, then the web filter comes first,
If it fits in with the proxies, then it's not specified if WebFilter or App Control is handled first.

About your issue:
Can you try it with a single host instead of a group?
Cancel
Vote Up 0 Vote Down

Cancel

0 LoD over 10 years ago in reply to FrankBarmentlo

Good morning Frank.

Just tried it. But still no luck. No entries in AppControl.
In WebFiltering-Log:


2015:01:09-09:15:26 mail httpproxy[29299]: id="0060" severity="info" sys="SecureWeb" sub="http" name="web request blocked, forbidden category detected" action="block" method="CONNECT" srcip="192.168.***.yyy" dstip="" user="" ad_domain="" statuscode="403" cached="0" profile="REF_HttProContaInterNetwo2 (internal network)" filteraction="REF_HttCffBlockunwan (block-unwanted)" size="0" request="0x8e71000" url="www.facebook.com/" referer="" error="" authtime="0" dnstime="0" cattime="178" avscantime="0" fullreqtime="246898" device="0" auth="0" ua="" exceptions="" reason="category" category="195" reputation="neutral" categoryname="Social Networking"

Reply

0 LoD over 10 years ago in reply to FrankBarmentlo

Good morning Frank.

Just tried it. But still no luck. No entries in AppControl.
In WebFiltering-Log:


2015:01:09-09:15:26 mail httpproxy[29299]: id="0060" severity="info" sys="SecureWeb" sub="http" name="web request blocked, forbidden category detected" action="block" method="CONNECT" srcip="192.168.***.yyy" dstip="" user="" ad_domain="" statuscode="403" cached="0" profile="REF_HttProContaInterNetwo2 (internal network)" filteraction="REF_HttCffBlockunwan (block-unwanted)" size="0" request="0x8e71000" url="www.facebook.com/" referer="" error="" authtime="0" dnstime="0" cattime="178" avscantime="0" fullreqtime="246898" device="0" auth="0" ua="" exceptions="" reason="category" category="195" reputation="neutral" categoryname="Social Networking"

Children

No Data