Skip to main content
Grumman
Grumman
New Member
Sep 9, 2015 5:09 PM UTC
Solved

Block HTTPS website on Google Chrome

Hello,

 

I have sucessfully managed to block http and https traffic on my Fortigate 100D but for some reason, if I open Google Chrome, all blocked HTTPS sites are accessible wile HTTP sites remain blocked !!!

 

I tried with Safari and Firefox and both HTTP & HTTPS sites are blocked...

 

Is there any reason why Chrome is bypassing the firewall settings?

 

The settings on the firewall are:

SSL/SSH Inspection ON, blocking HTTPS traffic

WebFilter ON, blocking all websites (* wildcard - deny) and allowing only 3 specific ones.

IPv4 Policy that incorporates the above rules.

    emnoc
    emnocAnswer
    New Member
    Sep 9, 2015 6:40 PM UTC

    The diag debug flow is your best friend, run the command and with a filter on chrome and non-chrome client ipv4:port . If I had to  guess, one of the following is taking place

     

    [ul]
  • The fw-policy is not correct or being match for the traffic from  the client(s)
  • The chrome client is using some external HTTPS proxy that the firewall is not matching ( i.e x.x.x.x port 8888 or 8123 or etc....)[/ul]

     

     

    For example on running  diag debug flow, search here on this forum.

     

     

    • View in thread

    3 replies

    emnoc
    emnocAnswer
    New Member
    Sep 9, 2015 6:40 PM UTC

    The diag debug flow is your best friend, run the command and with a filter on chrome and non-chrome client ipv4:port . If I had to  guess, one of the following is taking place

     

    [ul]
  • The fw-policy is not correct or being match for the traffic from  the client(s)
  • The chrome client is using some external HTTPS proxy that the firewall is not matching ( i.e x.x.x.x port 8888 or 8123 or etc....)[/ul]

     

     

    For example on running  diag debug flow, search here on this forum.

     

     

    • Grumman
    GrummanAuthor
    New Member
    Sep 9, 2015 6:54 PM UTC

    Thank you for your swift reply and suggestions.

     

    I tried to replicate this on my machine and it does the same thing...

    Traffic from all browsers is blocked except from Chrome...

    I have no proxy setting on Chrome or any other browser...

    Is Chrome using some built in SSL/SSH proxy of some sort that fortigate can't catch?

    emnoc
    emnoc
    New Member
    Sep 9, 2015 9:36 PM UTC

    The diag debug flow is your best friend

     

    see the above & stop guessing

     

    Terms & ConditionsAccessibility statement
    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT