Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 11 replies
  • Answers 2 answers
  • Subscribers 39 subscribers
  • Views 2590 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Can't print with IPPS.

core_memory

I can't print when Mac and Printer are connected through XG Firewall's bridge.
Mac - XG br0 - Printer

I can print by disabling SSL/TLS engine. Or I can print by disabling IPv6.

IPPS (Internet Printing Protocol over TLS) is used for printing.
When IPv6 is enabled, IPPS uses link-local addresses (fe80::/64).

The firewall log is output as Allow.
If I can print, application is identified as 'SSL Traffic over Non-SSL Ports'.
If I can't print, application is blank and the SSL/TLS inspection and Web filter logs will not be output.

Does SSL/TLS engine have problems handling link-local addresses?

I'm using SFOS 19.5.1 MR-1-Build278.



This thread was automatically locked due to age.
Parents
  • 0

    I don't think it's a rule issue because there is a log output allowed by the expected rule, and No issue with IPv4.

    Firewall rule(IPv6) are as follows:
    Action Accept
    Src LAN, Any host
    Dst LAN, Any host Any service
    Web Policy None
    Scan HTTP and decrypted HTTPS disable
    App control None
    IPS None

    There is no change in the behavior of either Decrypt or Don't decrypt with the SSL/TLS inspection rule.

    I disabled the following in the Decryption profile:
    Self-signed
    Untrusted issuer
    Name mismatch

    BTW: I have also confirmed that there is no issue when using other firewall products.

  • 0 in reply to core_memory

    Hi,

    please try using the web proxy with allow all in the application and web policies. SSL/TLS is not very friendly to UDP traffic.

    Ian

    XG115W - v20 GA - Home

    XG on VM 8 - v20 GA

    If a post solves your question please use the 'Verify Answer' button.

Reply Children
Unfiltered HTML