Certain websites can pass web filter policy.

Forum|Forum|7 years ago
November 29, 2018
3 replies
7289 views

Hello,

I created a web filter profile to block social networking websites, however some can pass such as, Facebook and Instagram

Here is what i did:

[ul]

Blocked whole sub category (Social networking).

Linked SSL deep scan filter to the policy and imported the certificated.

Cleared browsing history and restarted the browser (Chrome and Firefox).

Created static URL filter and added wildcard for facebook.

Created application signature and added anything related to facebook to block it.

Blocked QUIC protocol.[/ul]

In the forward traffic logs i get that application name is Facebook-Web and it is allowed.

Your help will be appreciated.

Regards.

WF.jpg

danteLive

New Member

Good Day,

What you did with the web filter and application filter looks in order.

I would recommend that you double check your policies and make sure the source are contained in the policy where the filters are applied on. Also check if there are perhaps any policy above the policy where filters are applied which is allowing access as this will be where the traffic is then going through and not hitting your filters.

Regards,

Danté

YahowmyAuthor

New Member

Thank you Danté for the response,

Actually i already checked this, in the forward traffic logs the policy applied number is the right policy and it is also in the top of other policies.

It is blocking web sites from same category such as Twitter and Youtube, however Facebook get pass this policy in case SSL deep inspection is applied, but in case of SSL certificate inspection applied it get blocked.

The odd thing is it is blocking anything related to Facebook such as if you googled the word facebook but if you typed the URL https://www.facebook.com it will pass.

YahowmyAuthor

New Member

When changing the inspection mode configuration from flow-based to proxy it get blocked,

Can someone explain why?

Sign up

Login with SSO

Login to the community

Login with SSO