Changed behaviour when you click on blocked categories like "Advertisements"

I typed in "iPhone 11" in google search i got the following advertisements listed first:

Now when you click on the first listed results (Anzeige=Advertisements) in proxy mode you got the following block page:

But when you change to DPI you can now click on the advertisement and the site behind it will load.

So how will be the behaviour when you click on a malicious site? Will the traffic just pass by and only the malicious site will get blocked, other content after the click will be loaded normally? There will be no interruption?

Parents

0 Rana Sharma over 5 years ago

Hi TheBalmasque,

Thanks for feedback.Sending you PM for more detailing.

Thanks,

Rana Sharma
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 TheBalmasque over 5 years ago in reply to Rana Sharma

I do some further investigations...

When i add a domain to the "local TLS exclusion list" i can now see advertisements on the page. In proxy mode the advertisements are always blocked... Even you put the site on the exclusion list for scanning, https... etc...
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 TheBalmasque over 5 years ago in reply to TheBalmasque

Another update:

On the most web sites i recognize more advertisements not being blocked in DPI mode. In normal proxy mode most of the ads are blocked correctly.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Michael Dunn over 5 years ago in reply to TheBalmasque

There is a known issue with some policy enforcement with TLS 1.3.

Can you please go to

Rules and Polices, SSL/TLS Inspection Rules and click on SSL Inspection Settings.

Under TLS 1.3 can you select "downgrade to TLS 1.2 and decrypt".

Does that make a difference?
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Reply

0 Michael Dunn over 5 years ago in reply to TheBalmasque

There is a known issue with some policy enforcement with TLS 1.3.

Can you please go to

Rules and Polices, SSL/TLS Inspection Rules and click on SSL Inspection Settings.

Under TLS 1.3 can you select "downgrade to TLS 1.2 and decrypt".

Does that make a difference?
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Children

0 TheBalmasque over 5 years ago in reply to Michael Dunn

Yeah it's better but not perfect compared to proxy mode. [:O]

EDIT: OK, i think it is better now. I needed to close the browser and start again...
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel