This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Application control doesn't work with web proxy!!!

Hi everyone, 
I'm trying to apply application control rules in order to allow facebook for a specific IP adresses(172.17.24.30).
i create an exception for url filtering for social netwoking category in web filter exceptions and i made these tests:
1) test1:
i made in the application control tab configuration
rule 1:
action: allow
control these application: facebook
for: 172.17.24.30
rule 2:
action: block
control these application: facebook
for: any
Result: the allowed IP could not access to facebook
2) test2:
i made in the application control tab configuration
rule 1:
action: allow
control these application: facebook
for: any
Result: It works but for any !!!!!

3) test3:
In Application Control Skiplist
i put the IP (172.17.24.30) for skiphost/nets 
Result: it works, the IP adress could access to facebook but also to all other blocked applications!!!!

When i checked the Application control logs, i found that  the source address for all packets is the external address which means that all request are nated before arriving to the application control.
So the request after being handled by the web proxy it was nated before cheking application control rules.
I don't know if i misunderstood something or what!!![:S][:S][:S]
Can somebody tell me how to configure correctly application control with the proxy web.
thanks in advance


This thread was automatically locked due to age.
Parents
  • You don't need Application Control for this, just Web Filtering, but you need to be scanning HTTPS.  Are you doing that?

    Your test1 should have worked.  What do you see in the Firewall and Web Filtering logs?

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • You don't need Application Control for this, just Web Filtering, but you need to be scanning HTTPS.  Are you doing that?

    Your test1 should have worked.  What do you see in the Firewall and Web Filtering logs?

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data