Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 4 replies
  • Subscribers 1 subscriber
  • Views 3777 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

HTTPS Block Requires Refresh

Boris60
Hi,

Just enabled HTTPS filtering (Standard, URL filtering only, No authentication).

Every time a blocked HTTPS page is browsed to, a refresh is required before the content block page appears. Initially, a page cannot be displayed error is presented. HTTP pages, blocked and unblocked are fine, HTTPS unblocked pages are fine.

SG 115 with IPS/ATP/SMTP, UTM 9.315-2, IE 11 on Windows 7 SP1 x64 clients. 1Gb network. UTM is not heavily taxed (usually 5% CPU, 55% RAM).

CA and Proxy settings have been deployed via GPO (proxy settings are manual, IP and Port 8080).

I have found this: "ID34478 9.306 https enduser message not shown in AD SSO mode" but it describe the problem as periodic. I can reproduce my issue all the time and have no SSO mode enabled. 


Please help!


This thread was automatically locked due to age.
Parents
  • 0
    Yeah, it's time to distribute the HTTPS Proxy CA to everyone's devices.  The upside is that you will also allow AV scanning of their accesses.  When you do this, you will want an exception for sites categorized as Finance/Banking, Health or Pharmacy.  You might find HTTP-S Proxy Access with AD-SSO helpful.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0
    Yeah, it's time to distribute the HTTPS Proxy CA to everyone's devices.  The upside is that you will also allow AV scanning of their accesses.  When you do this, you will want an exception for sites categorized as Finance/Banking, Health or Pharmacy.  You might find HTTP-S Proxy Access with AD-SSO helpful.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data
Unfiltered HTML