In 9.314-13.1, it seems that hosts/networks in the "Skip Transparent Mode Destination Hosts/Nets" list are not always properly being skipped and are instead being intercepted by a Transparent Mode Web Filter Profile when one or more profiles are in the Web Filter Profiles, Filter Profiles area (need not be Active).
Steps:
- New install from ssi-9.314-13.1.iso or asg-9.314-13.1.iso and enable Web Protection. Test by visiting a site (by IP or name) and observing entries in the Web Filtering log.
- Create entry (say Type DNS Group) to site in "Skip Transparent Mode Destination Hosts/Nets". Test and observe there are no log entries.
- Create Web Filtering Profile in Operation Mode Transparent, Default authentication none, with the Base Policy of the same filter action as the Default Web Filtering Profile. Test and observe that there are log entries under the "Default Web Filtering Profile".
- Turn the new Transparent Mode Web Filter Profile to Active. Test and observe that there are log entries under the new Transparent Mode Web Filter Profile.
Sometimes, I can seem to get it working through a series of disables/enables:
- Disable the added Transparent Mode Web Filter Profile.
- Disable Web Filtering.
- Enable Web Filtering.
- Enable the added Transparent Mode Web Filter Profile.
This acts rather finicky and inconsistent.
This thread was automatically locked due to age.