topic URL filtering - no response page appears with https site in General Topics

URL filtering - no response page appears with https site

sam76 — Thu, 30 Mar 2017 07:35:26 GMT

Hi,

On my PA-200, I use URL filtering to block the access to some http and https site. For https sessions, the response page is serving without SSL decryption. I use this command:

set deviceconfig settings ssl-decrypt url-proxy yes

I use also a intermediate CA certificat generates by our organization for Forward Trust. The response page is also enable on the layer 3 interface.

With the version 7.0.x, that works very well. The response page appears when a https site was blocked by the URL filtering. But with versions 7.1.x, the response page appears for http sites, but NOT for https sites.

What is changing between version 7.0 and 7.1 ? Have anybody met this problem ?

thanks a lot for your help

Re: URL filtering - no response page appears with https site

Remo — Sun, 28 May 2017 10:54:25 GMT

Is the TLS decryption working in general? So are you able to get to https websites with decryption enabled?
What exact version of PAN-OS 7.1 do you have installed?

Re: URL filtering - no response page appears with https site

TranceforLife — Sun, 28 May 2017 15:36:00 GMT

Not sure if something has changed to the default behaviour on the 7.1 releases:

https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os-release-notes/pan-os-7-1-release-information/changes-to-default-behavior#_28973