URL filtering - no response page appears with https site

Reply
Highlighted
L0 Member

URL filtering - no response page appears with https site

Hi,

 

On my PA-200, I use URL filtering to block the access to some http and https site. For https sessions, the response page is serving without SSL decryption. I use this command:

 

set deviceconfig settings ssl-decrypt url-proxy yes

 

I use also a intermediate CA certificat generates by our organization for Forward Trust. The response page is also enable on the layer 3 interface.

With the version 7.0.x, that works very well. The response page appears when a https site was blocked by the URL filtering. But with versions 7.1.x, the response page appears for http sites, but NOT for https sites.

What is changing between version 7.0 and 7.1 ?  Have anybody met this problem ?

 

thanks a lot for your help

 

L7 Applicator

Re: URL filtering - no response page appears with https site

Is the TLS decryption working in general? So are you able to get to https websites with decryption enabled?
What exact version of PAN-OS 7.1 do you have installed?
L6 Presenter

Re: URL filtering - no response page appears with https site

Not sure if something has changed to the default behaviour on the 7.1 releases:

 

https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os-release-notes/pan-os-7-1-release-inf...

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!