URL filter is great when working with Categories, but when an exception is published in the allow list there are catches and exceptions.:smileyconfused: We block-continue Streaming Media, which contains Youtube, which we want to allow users access to without a block. I create an allow exception *.youtube.com/* and commit, open a new browser, clear the cache, and go to www,youtube.com to see that B&C is still in effect. So I added www.youtube.com and youtube.com in addition, and then it worked. I did the same thing for dropbox, but it uses HTTPS and the session would be dropped every time I went to www.dropbox.com - which in turn redirected me to https://dropbox.com In order to get that working, I had to go against the documention in the dialog box and add https:// to the dropbox.com. still haven't got the dropbox desktop application to work, even with *.dropbox.com in the allow list. This is an exercise in frustration!
... View more
Can someone please detail how a HIP profile for missing patches works? I have tried every combination possible and I always get the same result. My Criteria is as follows: Patching is Enabled Yes is Installed Checked Severity - Greater than 2 (Which means 3 or Critical for Microsoft related patches) Check - Has None Vendor - Microsoft Corp. My Gateway HIP Notification rule says: On Match display bubble "Missing Patches" on Not Match "Patches Good" - this of course is just verbiage for me to know which match condition is hitting. When I connect with the GP agent the "Patches Good" message pops up, telling me the Not Match rule fired. (or to my logic you do not have missing patches greater than severity 2). On a fully patched machine this is great, but then I removed a critical patch (verified on technet to have a Critical Severity rating) and re-connected. Same "Patches Good" message. I re-submitted HIP profile and ran again, same thing so I figured I have the wrong Check logic. I tried Has All and Has Any with the same "Patches Good" message fired. Now I am at a loss and wondering if I am missing something so I have the following questions: What is the logic of Has None vs Has Any vs Has all How does GP know what patches are available from Microsoft, and what severity they are? Do I need to populate the "Patches" section of the Criteria tab in order for GP to know what it is looking for? What happens if I want to check patches from Adobe?
... View more