topic Re: URL Filtering and SSL sites in General Topics

URL Filtering and SSL sites

Wusu — Tue, 05 Nov 2013 16:55:08 GMT

Hi all,

I have a question regarding URL filtering. I set up URL filtering in Security Profiles to "Continue" for Social Networking. I noticed that if i open the first site under social networking, i get the response page "to continue", after that if i open the 2nd social networking i do not get any prompt, it just opens. And the same for any web sites under social networking. But if i open a site with https, i get a "page cannot be displayed". For example i opened https://socialnetworking.sites i get an error but if i open http://socialnetworking.sites i get the prompt to continue or it just opens (if another site in that category is already opened). The problem is most sites automatically re-directs from http to https. Is that the way URL Filtering works? If not how can i make URL filtering works so that each and every site that falls under the URL category shows the prompt to continue and also not shows "page cannot be displayed" when the address contains https. Thanks

Re: URL Filtering and SSL sites

kadak — Tue, 05 Nov 2013 18:12:57 GMT

Hello Wusu,

For HTTPS websites, you would require to get a 'Continue' page for URL filtering.

For example,

If you don't configure SSL decryption, you will still get a continue page for http://www.facebook,com

But for the https version of facebook.com, you would configure the SSL decryption as follows:

After including the correct URL category in the SSL decryption policy, the following page is presented :

Notice the continue page is presented for an https version of facebook.com

Hope that helps!

Thanks and regards,

Kunal Adak

Re: URL Filtering and SSL sites

Wusu — Tue, 05 Nov 2013 19:57:44 GMT

Hi Kadak,

Thanks for your answer! I am very positive it is going to work. But we haven't decided on decryption yet and hence no certificate for forward trust. Is there a work-around to make it work without the certificate? Thanks

Regards

Wusu

Re: URL Filtering and SSL sites

Wusu — Tue, 05 Nov 2013 20:40:36 GMT

Hi Kadak,

i tested it and it works perfectly. Big thanks!