bypass webpage blocked not working

Question

In our company, we have two Sophos SG210 set up in cluster. In the Sophos, proxy web filtering is activate on the cluster and the ByPass Users tab is enable for all Active Directory Users. However when a user (member of the domain) is connected on a website blocked by the Sophos UTM, the option to unblock webpage is displayed but when he clicks on the button, it leads to a authentication error webpage with no possibility to unblock the webpage. Can you please help me on this topic as it's really annoying for end users. 
 Thanks

DouglasFoster · Answer

When the Exception link is selected, UTM is expecting an ADMIN login. If you have an environment that allows admins to see user screens, this link is pretty useful. 
 However, if you are going to let any employee to whitelist any webpage, why use UTM at all? There are serious threats out there, and the only way to protect yourself from them is to analyze the threat before proceeding. 
 Some of the things you could/should check: 
 
 What is blocked, a main page or a component? 
 Why is it blocked: Category? Reputation? Encryption Protocols? Company Policy? 
 If uncategorized, have you used TrustedSites.org to see whether McAfee agrees that it is uncategorized, and whether McAfee thinks it is safe? (Until 9.6, UTM has some problems with overlooking some of McAfee's categories.) If uncategorized, has it been submitted for evaluation? 
 Do a DNS lookup against quad9.org (9.9.9.9) and see if they return a result or not. If UTM does not block the query and Quad9 returns no result, Quad9 thinks the DNS name is dangerous. 
 
 I guess you could get your desired result by making every employee a member of the UTM admin group.

Ol Deda · Answer

1 How the Web Filter authentication is configured? It is in browser mode or Active directory 
 2 How the Web Filter port is configured Standart Mode or Transparent mode 
 I think you have configured the proxy in standart mode (redirecting browser in port 8080 or 3821) This error can be bypassed if the Proxy is in Transparent Mode or In the client browser check Bypass proxy server for local addresses 
 I will suggest you Importing the UTM certificate as well on the clients. Or you can push it by Active Directory GPO

BAlfson · Answer

Salut Jean-Marc and welcome to the UTM Community! 
 I suspect the problem is the definition of "Active Directory Users." There are places where WebAdmin doesn't get things right if your AD Backend Group is not defined using a manually-created Security Group in AD. See Configuring HTTP/S proxy access with AD SSO . Although the article is aimed at Standard mode, 98% of it applies to Transparent mode, too. 
 Cheers - Bob