Thread Info
  • State Suggested Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 10 replies
  • Answers 1 answer
  • Subscribers 2 subscribers
  • Views 8076 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Access Microsoft CRLs through Webfilter

stephan_lache
Hello to all,

i just changed our proxy from TMG to UTM ( Standard Mode with AD SSO)
Everything is working fine for authenticated Users.

But i can see a lot blocked connections from computeraccounts which want to contact http://crl.microsoft.com/pki/crl.....

Via TMG there was a rule which allowed unauthenticated traffic.
How can i do this with UTM Webfilter?

A exception with "skiping authentication" does not work.

any ideas?

Thanks in advance

best regards
Stephan


This thread was automatically locked due to age.
Parents
  • 0
    Stephan, I don't think the "Domänencomputer" group works in a Backend Group definition.  I tested that in V7 and found that only manually-created Security Groups of users could be used.  In any case, it appears that the URL in your post qualified for a different Exception.  It was blocked because there was authentication and the user was disqualified or maybe because authentication was required and this Exception removed authentication - it's not clear.

    I also don't think a Backend Group can work in an Exception that includes an exception for "Authentication."

    MfG - Bob
    PS In order to attach the screenshots that Manfred requested, click on [Go Advanced] below .
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson
    Hi Bob,

    thanks for your explanations.
    Now i think i understand the webfilter process.
    After studying the logfiles and playing around with "filter-policy-Action"
    i got the understanding.

    best regards
    Stephan

    this user board is great :-)

    Stephan, I don't think the "Domänencomputer" group works in a Backend Group definition.  I tested that in V7 and found that only manually-created Security Groups of users could be used.  In any case, it appears that the URL in your post qualified for a different Exception.  It was blocked because there was authentication and the user was disqualified or maybe because authentication was required and this Exception removed authentication - it's not clear.

    I also don't think a Backend Group can work in an Exception that includes an exception for "Authentication."

    MfG - Bob
    PS In order to attach the screenshots that Manfred requested, click on [Go Advanced] below .
Reply
  • 0 in reply to BAlfson
    Hi Bob,

    thanks for your explanations.
    Now i think i understand the webfilter process.
    After studying the logfiles and playing around with "filter-policy-Action"
    i got the understanding.

    best regards
    Stephan

    this user board is great :-)

    Stephan, I don't think the "Domänencomputer" group works in a Backend Group definition.  I tested that in V7 and found that only manually-created Security Groups of users could be used.  In any case, it appears that the URL in your post qualified for a different Exception.  It was blocked because there was authentication and the user was disqualified or maybe because authentication was required and this Exception removed authentication - it's not clear.

    I also don't think a Backend Group can work in an Exception that includes an exception for "Authentication."

    MfG - Bob
    PS In order to attach the screenshots that Manfred requested, click on [Go Advanced] below .
Children
No Data
Unfiltered HTML