At Web Filter Profiles | Block these websites , I use following string in Regular Expression and Domain:
1) ^https?://([A-Za-z0-9.-]*\.)?.poki.com/
2) poki.com
But the user still can entry this website, how to solve this problem?
I would try with the following: ^https?://[A-Za-z0-9.-]*poki.com/
If that doesn't block the user, show us a line or two from the Web Filtering log where the user was able to reach the game.
Cheers - Bob
Hi Bob,
After changing the parameter, it still will not be blocked.
Following is the Log:
2018:11:02-08:33:20 XXXXXX httpproxy[25197]: id="0062" severity="info" sys="SecureWeb" sub="http" name="web request blocked, forbidden url detected" action="block" method="CONNECT" srcip="10.77.192.90" dstip="" user="" ad_domain="" statuscode="403" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2974" request="0xcf153000" url="https://a.poki.com/" referer="" error="" authtime="0" dnstime="0" cattime="39644" avscantime="0" fullreqtime="248391" device="0" auth="0" ua="" exceptions=""
2018:11:02-08:33:20 XXXXXX httpproxy[25197]: id="0062" severity="info" sys="SecureWeb" sub="http" name="web request blocked, forbidden url detected" action="block" method="CONNECT" srcip="10.77.192.90" dstip="" user="" ad_domain="" statuscode="403" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2974" request="0xddb30800" url="https://g.poki.com/" referer="" error="" authtime="0" dnstime="0" cattime="40540" avscantime="0" fullreqtime="244922" device="0" auth="0" ua="" exceptions=""
2018:11:02-08:33:20 XXXXXX httpproxy[25197]: id="0062" severity="info" sys="SecureWeb" sub="http" name="web request blocked, forbidden url detected" action="block" method="CONNECT" srcip="10.77.192.90" dstip="" user="" ad_domain="" statuscode="403" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2978" request="0xc3f75000" url="https://img.poki.com/" referer="" error="" authtime="0" dnstime="0" cattime="41357" avscantime="0" fullreqtime="245628" device="0" auth="0" ua="" exceptions=""
2018:11:02-08:33:20 XXXXXX httpproxy[25197]: id="0062" severity="info" sys="SecureWeb" sub="http" name="web request blocked, forbidden url detected" action="block" method="CONNECT" srcip="10.77.192.90" dstip="" user="" ad_domain="" statuscode="403" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2974" request="0xe0d11800" url="https://i.poki.com/" referer="" error="" authtime="0" dnstime="0" cattime="43962" avscantime="0" fullreqtime="249580" device="0" auth="0" ua="" exceptions=""
Thanks for help!
Hi Bob,
After changing the parameter, it still will not be blocked.
Following is the Log:
2018:11:02-08:33:20 XXXXXX httpproxy[25197]: id="0062" severity="info" sys="SecureWeb" sub="http" name="web request blocked, forbidden url detected" action="block" method="CONNECT" srcip="10.77.192.90" dstip="" user="" ad_domain="" statuscode="403" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2974" request="0xcf153000" url="https://a.poki.com/" referer="" error="" authtime="0" dnstime="0" cattime="39644" avscantime="0" fullreqtime="248391" device="0" auth="0" ua="" exceptions=""
2018:11:02-08:33:20 XXXXXX httpproxy[25197]: id="0062" severity="info" sys="SecureWeb" sub="http" name="web request blocked, forbidden url detected" action="block" method="CONNECT" srcip="10.77.192.90" dstip="" user="" ad_domain="" statuscode="403" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2974" request="0xddb30800" url="https://g.poki.com/" referer="" error="" authtime="0" dnstime="0" cattime="40540" avscantime="0" fullreqtime="244922" device="0" auth="0" ua="" exceptions=""
2018:11:02-08:33:20 XXXXXX httpproxy[25197]: id="0062" severity="info" sys="SecureWeb" sub="http" name="web request blocked, forbidden url detected" action="block" method="CONNECT" srcip="10.77.192.90" dstip="" user="" ad_domain="" statuscode="403" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2978" request="0xc3f75000" url="https://img.poki.com/" referer="" error="" authtime="0" dnstime="0" cattime="41357" avscantime="0" fullreqtime="245628" device="0" auth="0" ua="" exceptions=""
2018:11:02-08:33:20 XXXXXX httpproxy[25197]: id="0062" severity="info" sys="SecureWeb" sub="http" name="web request blocked, forbidden url detected" action="block" method="CONNECT" srcip="10.77.192.90" dstip="" user="" ad_domain="" statuscode="403" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2974" request="0xe0d11800" url="https://i.poki.com/" referer="" error="" authtime="0" dnstime="0" cattime="43962" avscantime="0" fullreqtime="249580" device="0" auth="0" ua="" exceptions=""
Thanks for help!
The logs show that, after changing the REGEX, all attempts to access via Web Filtering were unsuccessful: "web request blocked, forbidden url detected".
Cheers - Bob
