URL filtering - no response page appears with https site

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

URL filtering - no response page appears with https site

L0 Member

Hi,

 

On my PA-200, I use URL filtering to block the access to some http and https site. For https sessions, the response page is serving without SSL decryption. I use this command:

 

set deviceconfig settings ssl-decrypt url-proxy yes

 

I use also a intermediate CA certificat generates by our organization for Forward Trust. The response page is also enable on the layer 3 interface.

With the version 7.0.x, that works very well. The response page appears when a https site was blocked by the URL filtering. But with versions 7.1.x, the response page appears for http sites, but NOT for https sites.

What is changing between version 7.0 and 7.1 ?  Have anybody met this problem ?

 

thanks a lot for your help

 

2 REPLIES 2

L7 Applicator
Is the TLS decryption working in general? So are you able to get to https websites with decryption enabled?
What exact version of PAN-OS 7.1 do you have installed?

L6 Presenter

Not sure if something has changed to the default behaviour on the 7.1 releases:

 

https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os-release-notes/pan-os-7-1-release-inf...

  • 3558 Views
  • 2 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!