Can't print with IPPS.

Question

I can't print when Mac and Printer are connected through XG Firewall's bridge. Mac - XG br0 - Printer 
 
 I can print by disabling SSL/TLS engine. Or I can print by disabling IPv6. 
 
 IPPS (Internet Printing Protocol over TLS) is used for printing. When IPv6 is enabled, IPPS uses link-local addresses (fe80::/64). 
 
 The firewall log is output as Allow. If I can print, application is identified as 'SSL Traffic over Non-SSL Ports'. If I can't print, application is blank and the SSL/TLS inspection and Web filter logs will not be output. 
 
 Does SSL/TLS engine have problems handling link-local addresses? 
 
 I'm using SFOS 19.5.1 MR-1-Build278.

rfcat_vk · Answer

Hi, 
 please try using the web proxy with allow all in the application and web policies. SSL/TLS is not very friendly to UDP traffic. 
 Ian

core_memory · Answer

Thanks for letting me know you have the same problem. 
 I was able to avoid it by adding a rule to drop if the destination is the printer's link local address and port 631.

Can't print with IPPS.

Top Replies