FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
duenlim
Staff
Staff
Article Id 404954
Description

This article describes all the URLs blocked with Static URL Filter being directed to tunnel.googlezip.net, which serves as a pre-fetch proxy in Google Chrome.

 

For example: the URL domain pirateproxy-bay.com has been blocked in Static URL Filter. Even so, the block page is accessible. The browser debug log shows the Remote Address is 216.239.34.157:443.

 

tunnelgooglezip_pirateproxy_1.png

Scope FortiGate 7.2/7.4/7.6.
Solution
  1. The packet capture results show the block page is accessing from an IP address 216.239.34.157:443 through tunnel.googlezip.net.

 

tunnelgooglezip_pirateproxy_2.png

 

  1. Use the Static URL Filter to block the tunnel.googlezip.net or Proxy Avoidance Category.