SSL Sites bypass URL Category block

[u7285]

Good Day Guys and Gals

I need ideas on the following issue please! I have a block on all Social networking sites for the company. The Policy works great when the user tries to access http://plus.google.com, but when they use SSL (https://plus.google.com) the user gains full access to the site. Same goes for all other Social networking sites! How do we stop them on SSL?

Thanx in advance!

[ssancho]

Hi, you need SSL Proxy to unencrypt SSL and analize the traffic. It is very easy to implement.

Regards

[bpappas]

You could also block these using the URL filtering feature. URL filtering will work on encrypted or unencrypted traffic because it is making the allow/block decision using the unencrypted URL information.

-Benjamin

[u7285]

Good Morning Bpappas

Thank you for your reply!

I am actualy using the URL filtering feature, Policy with application filtering and plus.google url in custom deny list, but still it bypasses the PA......

Any other ideas?

[bpappas]

@kobus.snyders:

if that is happening I would advise you to open a case with your support provider.

-Benjamin