This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Web browsing blocked from vlan.

I recently moved all my mobile devices to their own VLAN on a Ubiquiti AP. Now most sites are blocked from web browsing by the UTM, I am using the latest release. The reason is mostly reputation limit or HSTS certificate errors. I can access these sites from my desktop that is on the main UTM internal interface.

Thanks for any help Trevor

This thread was automatically locked due to age.

Parents

0 apijnappels over 6 years ago

How's web filtering configured for this VLAN? HTTPS decrypt and scan enabled maybe?

Managing several Sophos firewalls both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 apijnappels over 6 years ago

How's web filtering configured for this VLAN? HTTPS decrypt and scan enabled maybe?

Managing several Sophos firewalls both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Trevor H over 6 years ago in reply to apijnappels

Yes transparent mode, decrypt and scan.
Cancel
Vote Up 0 Vote Down

Cancel
+1 apijnappels over 6 years ago in reply to Trevor H

With decrypt and scan you'll need the UTM's certificate installed on all your devices since all encrypted traffic is inspected and then reencrypted using the UTM's certificate.

If you want to try you might try to first set it on URL filering only and see if that makes a difference; if it does, then that's your problem.

Managing several Sophos firewalls both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.
Cancel
Vote Up 0 Vote Down

Cancel
0 Trevor H over 6 years ago in reply to apijnappels

Thanks, yes I can connect properly now with URL Filtering only.

Trevor
Cancel
Vote Up 0 Vote Down

Cancel