Keyword blocking not working with DPI engine enabled.

Question

Is it expected behaviour for url keyword blocking not to work when DPI is enabled? See below for an example: 
 
 I created the following category:

With the following user activity: 
 
 which I added to the following web policy 
 
 However, when I create a firewall rule with the following:

The rule works as expected: 
 
 However when I uncheck Use web proxy instead of DPI engine and visit the same page: 
 
 The request is not blocked and using the policy tester I see the following: 
 
 Please assist.

Prism · Answer

Hello! 
 Teererai Marange said: However when I uncheck Use web proxy instead of DPI engine and visit the same page: 
 You need a rule with the action of "Decrypt" in the new "SSL/TLS Inpsection Rules" in order for the Firewall to scan HTTPS traffic with the DPI Engine. 
 You can find more information about this at the Sophos Docs. https://docs.sophos.com/nsg/sophos-firewall/20.0/Help/en-us/webhelp/onlinehelp/index.html?contextId=rules-policies-SSL-TLS-add

Keyword blocking not working with DPI engine enabled.

Top Replies