About sberti

Hi Tom, Kindle e-reader doesn't seem to support browsing on non standard ports and that's required for captive portal. The redirect will look like this HTTP/1.0 302 Moved Location: https://192.168.0.1:6081/php/uid.php?vsys=1&url=http://www.google.com/search%3Fq%3Dkindlereadertest Content-Length: 0 Pragma: no-cache Cache-Control: no-cache Either redirect or you'll need to import a certificate into the Kindle (if using transparent) and that is also not an option apparently for the e-reader. Certs can't be imported. Regards, Salvo ... View more

Hi PANoJam, Do you have a sample picture that you can share? I'd like to see the format and how the GPS data looks like. -Salvo ... View more

Hi Aaron, Can you please show us the all list and a screenshot if you can. BTW, can you confirm decryption is also turned on? -Salvo ... View more

Hi Eric, I'm afraid you might be out of luck here. One of the many differences between DNS and HTTP is that the first one is 1 packet in each direction. This means in your case you won't be able to have the custom app matched unless DNS as a parent application is allowed but if you do this all DNS requests will be allowed through not just the one you specify in your customer app. Let's assume you create your custom_dns application where www.hp.com is detected and allow it in a policy from A(client) to B (dns server). Now, if the default dns application is denied as soon as the firewall detects that this is a DNS request (It does it before the content is inspected) the request will be denied. Application has been detected as dns and there is an deny action associated wit it On the other hand if the default dns application is allowed when the traffic goes through the firewall the application will shift from dns (the default one) to the custom_dns as soon as the firewall reads the content. So in the logs you'll see a correct match with the custom_dns app you created but being this the mechanism this implies all other dns requests will be allowed as well. . Hope this helps to understand the logic. -Salvo ... View more

The issue with " set deviceconfig setting ssl-decrypt url-proxy yes " was tracked with bugid 43872 and it's fixed in 4.1.9. In 4.1.6 you can use SSL Decryption rule as an alternative -Salvo ... View more