google applications versus localization

[twj@ihi-bupa.com]

Hey guys,

I have a theoretical question regarding a issue i had today.

A user called and said that google-translate was blocked. I couldn't understand that, since i knew that we've allowed that.

I went to http://translate.google.com and sure enough, "Application Blocked".

I went to the monitor tab on the firewall web interface and set a filter for google-translate applications. I was surprised to see that allow/deny actions were 50/50. Some users got a allow, others a deny.

Eventually, by accident, i opened a new browser window and navigated to http://translate.google.dk

We're based in Denmark, so thats the TLD for us.

And woop woop, no problems there.

So I've told my users to use the .dk extension instead..

But what is happening? Why is google's localization system interfering with my application rules ??

[jdoyle]

im in phone queue.  amazing the number of my users that are actually using google translate

[SRA · Accepted solution]

We have identified the issue and are working to provide a fix in the next content version.

Content version 259 introduced two new application functions for google-translate, one each for auto and manual.

But traffic to the landing page is neither of these, and may be blocked if you have a deny-all rule at the bottom.

As a workaround, you can revert to content version 258, or, you can create a custom app with a different name (e.g. custom-google-translate) that looks for the pattern “translate.google.com” in the http-req-host-header, and add that app to the allow rule.

[ahopkins]

Same issue here, waiting for a fix. Any word from Palo Alto?

[twj@ihi-bupa.com]

This is all fine and dandy.. But what about the localization?

We got http://translate.google.co.uk working, but not .com

Why does the PA differenciate between those two?

[RNC]

google translate can be/is a proxy avoidance engine. common issue with machine translation sites.

go to translate.google.com. enter the URL for a blocked site (use an english language one). manually set source language to a non-english lanauage. translate the site. you should see blocked site.

google translate won't translate english to english if it is in "automatic" mode. so if you can turn that off manual mode via PAN, you will reduce the cases of proxy avoidance.

n.