topic SSL Vs No SSL site in General Topics

SSL Vs No SSL site

fnichelson — Tue, 10 May 2011 20:05:59 GMT

Hello again, still waiting on an answer to my last question but I have more

Today we noticed that https://gravytable.com with is listed at BrightCloud as

Category	Reputation Index	Location
Proxy Avoid and Anonymizers (Suggest a new category)	10	US

We have *.gravytable.com/* listed but today we noticed that students can access the SSL version of the site

What do I need to block access to the SSL version of the site?

Pan OS is 3.1.7 with the latest Dynamic updates applied.

fnichelson — Tue, 10 May 2011 20:09:13 GMT

Sorry, forgot to add that we’re also blocking the Category Proxy Avoid and Anonymizers for all our URL Filtering profiles.

ExclusiveNetworksGermany — Wed, 11 May 2011 15:05:43 GMT

Hi,

try an Update to 3.1.8

in my quick test the Site/link was correctly blocked

Regards

Marco

fnichelson — Mon, 23 May 2011 16:02:33 GMT

We upgraded to 3.1.8 last week. This week we found another proxy site using the same tactic

Their security cert points to a different site which allows the user to go to the proxy site. I have blocked the sites.

and the cert

Anyone else seeing anything like this?