Stop web browsing to ssl

Jordan_Roebuck — Thu, 18 Jan 2018 11:53:27 GMT

The external IP of our WiFi controller requires 443 to be open to the internet, so we have this open on our inbound rule>external IP of the controller. 443 needs to be open but we don't want this to be accessible via a web browser - as currently this rule allows the external IP to be accessed via https. Is there a way of stopping this behavior? Many thanks.

Re: Stop web browsing to ssl

kiwi — Thu, 18 Jan 2018 13:18:31 GMT

Hi @Jordan_Roebuck,

I don't think there's an easy way to do this.

You could decrypt the traffic and do a pattern match on all the different User-Agent strings that you can find in the header information. You can identify different browsers that way and block traffic accordingly ... but the list will be enormous and hard to keep updated.

An old example :

https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to-Block-Google-Chrome/ta-p/57997

Cheers !

-Kiwi.

topic Re: Stop web browsing to ssl in General Topics

Stop web browsing to ssl

Re: Stop web browsing to ssl