topic Re: URL Whitelist Nightmare in General Topics

URL Whitelist Nightmare

Bocsa — Wed, 04 Feb 2015 16:28:59 GMT

I've tried without luck to add the URL 'addons.mozilla.org' to a whitelist. This URL falls under the 'shareware-and-freeware' category. This category is blocked. That's why I need to specify this explicitly in the whitelist. It just won't work.

My monitor tab shows it is allowed for that traffic, but looking at logs for URL filtering, I see it being block-url.

I've noticed that this had some other prefixes so I tried different combinations (below), with no luck:

*.addons.mozilla.org

addons.mozilla.org

addons.mozilla.org/

Any ideas?

Re: URL Whitelist Nightmare

Dz3015 — Wed, 04 Feb 2015 16:33:19 GMT

What are the details for why it's being blocked?

Re: URL Whitelist Nightmare

ssharma — Wed, 04 Feb 2015 16:38:49 GMT

Hi Martin,

Can you please attach the snapshot for the URL filtering logs where it says block-url. Thank you.

Re: URL Whitelist Nightmare

Bocsa — Wed, 04 Feb 2015 16:40:52 GMT

Not sure of the details you are referring to. I just get:

Category: shareware-and-freeware

Application: ssl

Action: block-URL

Re: URL Whitelist Nightmare

ssharma — Wed, 04 Feb 2015 16:44:15 GMT

Application might be the issue here. With snapshot I wanted to look at the actual URL that was under URL Filtering logs.

In an SSL session, firewall does not have visibility on the HTTP GET message as that is also encrypted. I believe you do not have ssl decryption on the device?

You will need ssl decryption to allow or block ssl site with specific URLs. Hope this helps. Thank you.

Re: URL Whitelist Nightmare

Bocsa — Wed, 04 Feb 2015 16:46:14 GMT

Re: URL Whitelist Nightmare

Bocsa — Wed, 04 Feb 2015 16:54:32 GMT

I really doubt this has anything to do with SSL decryption. If I allow 'shareware-and-freeware' it works fine. I don't want to allow all access to shareware and freeware for security purposes though.

Re: URL Whitelist Nightmare

ssharma — Wed, 04 Feb 2015 16:57:09 GMT

With that URL it should have worked.

Could you try following :

Instead of putting the URL, configure Custom URL Category and add

addons.mozilla.org

*.addons.mozilla.org

In separate lines. Remove the entries in the allow list under URL Filtering Profile. Then change the action to Alert for the custom category in the same URL Filtering profile. Commit the changes. Navigate to the site and see if the category still shows up as Shareware or new Custom Category. Please do attach the snapshot as well after making and committing those changes. Thank you.

Re: URL Whitelist Nightmare

hyadavalli — Wed, 04 Feb 2015 22:20:30 GMT

Hello Martin,

Please add below URLs in allow list:

addons.mozilla.org

addons.mozilla.org/

addons.cdn.mozilla.net/

Regards,

Hari Yadavalli

Re: URL Whitelist Nightmare

Bocsa — Fri, 06 Feb 2015 11:22:42 GMT

Spot on...

Re: URL Whitelist Nightmare

Bocsa — Fri, 06 Feb 2015 14:06:54 GMT

I should add that i needed *.addons.mozilla.org as well