Skip to main content
simport
New Member
Mar 7, 2007 4:26 PM UTC
Question

Could we block https proxy avoidance?

Hi all, If we use an https anonymous proxy (like https://proxify.com) we can navigate everywhere without being concerned by the fortiguard filters. It doesn' t log our connection to the proxy website because it is with https. Does anyone know a way of blocking this bypass (without listing ALL the proxy avoidance websites in a block list or disabling https websites) ??? Thanks Simport --FG200a OS 3.0 b0475--

    2 replies

    rwpatterson
    New Member
    Mar 7, 2007 4:43 PM UTC
    If you are using FortiGuard web filtering, adjust the protecion profile for the policy to block web proxy avoidance. Firewall -> Protection Profile -> profile name. Edit this Protection Profile. Cruise down to ' FortiGuard Web Filtering' , open it up. Under ' Rate URLs by domain and IP address' , under the category ' Potentially Liable' , find ' Proxy Avoidance' and select block. Make sure you select HTTPS under ' Enable FortiGuard Web Filtering' , and you should be good. This will block all KNOWN proxy servers. Anyone using one from a private (Verizon, AOL, etc.) IP address may bypass this, which is why I also block unrated sites. I' m in health care, so this is allowed, without higher approval.
    simport
    simportAuthor
    New Member
    Mar 7, 2007 4:49 PM UTC
    Thank you, it works. Simport
    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT